@canonry/canonry 4.167.0 → 4.168.0

package/dist/{chunk-SXENNCJF.js → chunk-R2SZWJDV.js}

@@ -1,16 +1,15 @@
 import {
   ApiClient,
   CanonryMcpToolNames,
-  CliError,
-  PACKAGE_VERSION,
   canonryMcpTools,
   configExists,
+  getBundledSkillSnapshots,
   getConfigPath,
   isMachineFormat,
   loadConfig,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-P5LR3NDQ.js";
+} from "./chunk-C4UWZLQX.js";
 import {
   CC_CACHE_DIR,
   DUCKDB_SPEC,
@@ -139,7 +138,7 @@ import {
   siteCrawlSnapshots,
   toAlertView,
   usageCounters
-} from "./chunk-7M3QVRJD.js";
+} from "./chunk-CDACTPTY.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_PROVIDER_IDS,
@@ -151,7 +150,6 @@ import {
   BacklinkSources,
   CITED_URL_CAPTURE_VERSION,
   CcReleaseSyncStatuses,
-  CodingAgents,
   DiscoveryCompetitorTypes,
   LLM_CAPABILITIES,
   LlmCapabilities,
@@ -170,10 +168,8 @@ import {
   SITE_AUDIT_MAX_PAGE_LIMIT,
   SITE_CRAWL_GRAPH_MAX_EDGES,
   SITE_CRAWL_GRAPH_MAX_NODES,
-  SKILL_MANIFEST_FILENAME,
   SchedulableRunKinds,
   SiteHealthLinkClassificationSources,
-  SkillsClients,
   TEMPLATE_LINK_RATIO_THRESHOLD,
   TrafficEventConfidences,
   TrafficEventKinds,
@@ -192,10 +188,8 @@ import {
   authRequired,
   bucketOnboardingCount,
   buildRunErrorFromMessages,
-  classifySkillFile,
   classifyTemplateLinkEdge,
   cloudflareQueueNameSchema,
-  coerceSkillManifest,
   computeBacklinkSummaryMetrics,
   contentActionLabel,
   contentBriefDtoSchema,
@@ -243,7 +237,6 @@ import {
   serializeRunError,
   shiftIsoCalendarDate,
   siteAuditRequestIdentity,
-  skillsClientSchema,
   splitList,
   startOfDayHourInTimeZone,
   templateLinkDetection,
@@ -585,13 +578,13 @@ function checkLatestVersionForServer(opts) {
 
 // src/server.ts
 import { createRequire as createRequire4 } from "module";
-import crypto25 from "crypto";
-import fs8 from "fs";
-import path9 from "path";
-import { fileURLToPath as fileURLToPath3 } from "url";
+import crypto24 from "crypto";
+import fs7 from "fs";
+import path8 from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
 import { and as and18, eq as eq24 } from "drizzle-orm";
 import Fastify from "fastify";
-import os5 from "os";
+import os4 from "os";
 
 // ../provider-gemini/src/normalize.ts
 import { GoogleGenAI } from "@google/genai";
@@ -5181,12 +5174,12 @@ function adsClientLog(level, action, ctx) {
   const stream = level === "error" ? process.stderr : process.stdout;
   stream.write(JSON.stringify(entry) + "\n");
 }
-function buildUrl(path10, queryPairs) {
+function buildUrl(path9, queryPairs) {
   const qs = queryPairs.join("&");
-  return qs ? `${OPENAI_ADS_API_BASE}/${path10}?${qs}` : `${OPENAI_ADS_API_BASE}/${path10}`;
+  return qs ? `${OPENAI_ADS_API_BASE}/${path9}?${qs}` : `${OPENAI_ADS_API_BASE}/${path9}`;
 }
-async function adsFetch(apiKey, path10, queryPairs = [], method = "GET", body) {
-  const url = buildUrl(path10, queryPairs);
+async function adsFetch(apiKey, path9, queryPairs = [], method = "GET", body) {
+  const url = buildUrl(path9, queryPairs);
   const res = await fetch(url, {
     method,
     headers: {
@@ -5198,18 +5191,18 @@ async function adsFetch(apiKey, path10, queryPairs = [], method = "GET", body) {
   });
   if (res.status === 401 || res.status === 403) {
     const { code } = parseErrorEnvelope(await res.text());
-    adsClientLog("error", "http.auth-failed", { path: path10, httpStatus: res.status, code });
+    adsClientLog("error", "http.auth-failed", { path: path9, httpStatus: res.status, code });
     throw new OpenAiAdsApiError("OpenAI Ads API key is invalid or unauthorized", res.status, code);
   }
   if (res.status === 429) {
     const { code } = parseErrorEnvelope(await res.text());
-    adsClientLog("error", "http.rate-limited", { path: path10, httpStatus: 429, code });
+    adsClientLog("error", "http.rate-limited", { path: path9, httpStatus: 429, code });
     throw new OpenAiAdsApiError("OpenAI Ads API rate limit exceeded", 429, code);
   }
   if (!res.ok) {
     const body2 = await res.text();
     const { message, code } = parseErrorEnvelope(body2);
-    adsClientLog("error", "http.error", { path: path10, httpStatus: res.status, code });
+    adsClientLog("error", "http.error", { path: path9, httpStatus: res.status, code });
     const detail = message ?? (body2.length <= 500 ? body2 : `${body2.slice(0, 500)}... [truncated]`);
     throw new OpenAiAdsApiError(`OpenAI Ads API error (${res.status}): ${detail}`, res.status, code);
   }
@@ -5220,12 +5213,12 @@ async function adsFetch(apiKey, path10, queryPairs = [], method = "GET", body) {
     throw new OpenAiAdsApiError("OpenAI Ads API returned invalid JSON", 502);
   }
 }
-async function fetchAllPages(apiKey, path10, queryPairs, maxPages = OPENAI_ADS_MAX_PAGES) {
+async function fetchAllPages(apiKey, path9, queryPairs, maxPages = OPENAI_ADS_MAX_PAGES) {
   const items = [];
   let after = null;
   for (let page = 0; page < maxPages; page++) {
     const pairs = after ? [...queryPairs, `after=${encodeURIComponent(after)}`] : [...queryPairs];
-    const response = await adsFetch(apiKey, path10, pairs);
+    const response = await adsFetch(apiKey, path9, pairs);
     items.push(...response.data);
     if (!response.has_more || !response.last_id) {
       return items;
@@ -5233,7 +5226,7 @@ async function fetchAllPages(apiKey, path10, queryPairs, maxPages = OPENAI_ADS_M
     after = response.last_id;
   }
   if (maxPages < OPENAI_ADS_MAX_PAGES) return items;
-  adsClientLog("error", "pagination.cap-reached", { path: path10, pages: OPENAI_ADS_MAX_PAGES, items: items.length });
+  adsClientLog("error", "pagination.cap-reached", { path: path9, pages: OPENAI_ADS_MAX_PAGES, items: items.length });
   throw new OpenAiAdsApiError(
     `OpenAI Ads API collection remained incomplete after the ${OPENAI_ADS_MAX_PAGES}-page safety cap`,
     502,
@@ -7394,8 +7387,8 @@ function hashUnit(value) {
   }
   return (hash >>> 0) / 4294967296;
 }
-function pathSection(path10) {
-  return path10.split("/").filter(Boolean)[0] ?? "__root__";
+function pathSection(path9) {
+  return path9.split("/").filter(Boolean)[0] ?? "__root__";
 }
 function seedSiteCrawlGraphNodes(nodes, rootNodeKey, priorPositions) {
   return [...nodes].sort((a, b) => a.sampleRank - b.sampleRank || a.nodeKey.localeCompare(b.nodeKey)).map((node) => {
@@ -8026,9 +8019,9 @@ function pagePath(page) {
   }
 }
 function parentPath(page) {
-  const path10 = pagePath(page);
-  if (path10 === "/") return "/";
-  const trimmed = path10.endsWith("/") ? path10.slice(0, -1) : path10;
+  const path9 = pagePath(page);
+  if (path9 === "/") return "/";
+  const trimmed = path9.endsWith("/") ? path9.slice(0, -1) : path9;
   const slash = trimmed.lastIndexOf("/");
   return slash <= 0 ? "/" : trimmed.slice(0, slash) || "/";
 }
@@ -8098,12 +8091,14 @@ function deadLinkCheckedCount(edges, pages) {
   }
   return new Set([...edges].filter((edge) => edge.type === "anchor" && edge.classification === "internal" && attemptedUrls.has(edge.to)).map((edge) => edge.to)).size;
 }
+var RATE_LIMITED_STATUS = 429;
 function partitionDeadLinks(deadLinks) {
   const reported = deadLinks.findings;
   const engineUnverified = deadLinks.unverified ?? [];
-  const dead = reported.filter((finding) => typeof finding.statusCode === "number" && finding.statusCode >= 400);
+  const answeredWithError = (finding) => typeof finding.statusCode === "number" && finding.statusCode >= 400;
+  const dead = reported.filter((finding) => answeredWithError(finding) && finding.statusCode !== RATE_LIMITED_STATUS);
   const unverified = [
-    ...reported.filter((finding) => typeof finding.statusCode !== "number"),
+    ...reported.filter((finding) => !answeredWithError(finding) || finding.statusCode === RATE_LIMITED_STATUS),
     ...engineUnverified
   ];
   return { dead, unverified };
@@ -9092,7 +9087,7 @@ function readStoredGroundingSources(rawResponse) {
   return result;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-ULDOVV5Y.js");
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-KBSDKHED.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);
@@ -9616,352 +9611,6 @@ No DB writes performed. Re-run without --dry-run to apply.`);
   }
 }
 
-// src/commands/skills.ts
-import crypto18 from "crypto";
-import fs4 from "fs";
-import os4 from "os";
-import path5 from "path";
-import { fileURLToPath } from "url";
-var BUNDLED_SKILL_NAMES = ["canonry", "aero"];
-function resolveBundledSkillsRoot(pkgDir) {
-  const here = pkgDir ?? path5.dirname(fileURLToPath(import.meta.url));
-  const candidates = [
-    path5.join(here, "../assets/agent-workspace/skills"),
-    path5.join(here, "../../assets/agent-workspace/skills"),
-    path5.join(here, "../../../../skills")
-  ];
-  for (const candidate of candidates) {
-    if (BUNDLED_SKILL_NAMES.every((name) => fs4.existsSync(path5.join(candidate, name, "SKILL.md")))) {
-      return candidate;
-    }
-  }
-  throw new CliError({
-    code: "INTERNAL_ERROR",
-    message: `Bundled skills not found. Searched:
-  ${candidates.join("\n  ")}`,
-    exitCode: 2
-  });
-}
-function parseDescription(content) {
-  const fmMatch = /^---\n([\s\S]*?)\n---/.exec(content);
-  if (!fmMatch) return "";
-  const descMatch = /^description:\s*(\S.*)$/m.exec(fmMatch[1]);
-  if (!descMatch) return "";
-  return descMatch[1].replace(/^["']|["']$/g, "").trim();
-}
-function getBundledSkills(pkgDir) {
-  const root = resolveBundledSkillsRoot(pkgDir);
-  return BUNDLED_SKILL_NAMES.map((name) => {
-    const skillDir = path5.join(root, name);
-    const skillFile = path5.join(skillDir, "SKILL.md");
-    const content = fs4.readFileSync(skillFile, "utf-8");
-    return { name, description: parseDescription(content), bundledPath: skillDir };
-  });
-}
-function walkRelative(dir, prefix = "") {
-  const out = [];
-  for (const entry of fs4.readdirSync(dir, { withFileTypes: true })) {
-    const rel = prefix ? path5.join(prefix, entry.name) : entry.name;
-    const full = path5.join(dir, entry.name);
-    if (entry.isDirectory()) {
-      out.push(...walkRelative(full, rel));
-    } else if (entry.isFile()) {
-      out.push(rel);
-    }
-  }
-  return out.sort();
-}
-function sha256File(filePath) {
-  return crypto18.createHash("sha256").update(fs4.readFileSync(filePath)).digest("hex");
-}
-function readSkillManifest(skillDir) {
-  try {
-    return coerceSkillManifest(JSON.parse(fs4.readFileSync(path5.join(skillDir, SKILL_MANIFEST_FILENAME), "utf-8")));
-  } catch {
-    return null;
-  }
-}
-function writeSkillManifest(skillDir, manifest) {
-  fs4.writeFileSync(path5.join(skillDir, SKILL_MANIFEST_FILENAME), `${JSON.stringify(manifest, null, 2)}
-`, "utf-8");
-}
-function reconcileSkillTree(srcDir, destDir, manifest, force) {
-  const result = { added: [], updated: [], unchanged: [], conflicts: [], bundledHashes: /* @__PURE__ */ new Map() };
-  for (const rel of walkRelative(srcDir)) {
-    const srcPath = path5.join(srcDir, rel);
-    const destPath = path5.join(destDir, rel);
-    const bundledHash = sha256File(srcPath);
-    result.bundledHashes.set(rel, bundledHash);
-    const installedHash = fs4.existsSync(destPath) ? sha256File(destPath) : void 0;
-    const state = classifySkillFile({ bundledHash, installedHash, manifestHash: manifest?.files[rel] });
-    switch (state) {
-      case "missing":
-        fs4.mkdirSync(path5.dirname(destPath), { recursive: true });
-        fs4.copyFileSync(srcPath, destPath);
-        result.added.push(rel);
-        break;
-      case "unchanged":
-        result.unchanged.push(rel);
-        break;
-      case "stale":
-        fs4.copyFileSync(srcPath, destPath);
-        result.updated.push(rel);
-        break;
-      case "edited":
-        if (force) {
-          fs4.copyFileSync(srcPath, destPath);
-          result.updated.push(rel);
-        } else {
-          result.conflicts.push(rel);
-        }
-        break;
-    }
-  }
-  return result;
-}
-function buildManifest(skillName, recon, prior) {
-  const conflicts = new Set(recon.conflicts);
-  const files = {};
-  for (const [rel, bundledHash] of recon.bundledHashes) {
-    files[rel] = conflicts.has(rel) ? prior?.files[rel] ?? bundledHash : bundledHash;
-  }
-  return { skill: skillName, version: PACKAGE_VERSION, files };
-}
-function describeChanges(recon) {
-  const parts = [];
-  if (recon.added.length > 0) parts.push(`${recon.added.length} added`);
-  if (recon.updated.length > 0) parts.push(`${recon.updated.length} refreshed`);
-  return parts.length > 0 ? parts.join(", ") : "no changes";
-}
-function buildClaudeMessage(name, status, recon) {
-  const rel = `.claude/skills/${name}`;
-  let message = status === "installed" ? `Installed ${rel}` : status === "updated" ? `Updated ${rel} (${describeChanges(recon)})` : `Already installed: ${rel}`;
-  if (recon.conflicts.length > 0) {
-    message += ` \u2014 ${recon.conflicts.length} file(s) differ from the bundle (local edits kept; pass --force to overwrite)`;
-  }
-  return message;
-}
-function installClaudeSkill(skill, targetDir, force) {
-  const targetPath = path5.join(targetDir, ".claude", "skills", skill.name);
-  const existedBefore = fs4.existsSync(path5.join(targetPath, "SKILL.md"));
-  const priorManifest = readSkillManifest(targetPath);
-  fs4.mkdirSync(targetPath, { recursive: true });
-  const recon = reconcileSkillTree(skill.bundledPath, targetPath, priorManifest, force);
-  writeSkillManifest(targetPath, buildManifest(skill.name, recon, priorManifest));
-  const changed = recon.added.length + recon.updated.length;
-  const status = !existedBefore ? "installed" : changed > 0 ? "updated" : "already-installed";
-  return {
-    skill: skill.name,
-    client: CodingAgents.claude,
-    targetPath,
-    status,
-    message: buildClaudeMessage(skill.name, status, recon),
-    added: recon.added,
-    updated: recon.updated,
-    unchanged: recon.unchanged,
-    conflicts: recon.conflicts
-  };
-}
-function installCodexSymlink(skill, targetDir, force) {
-  const codexPath = path5.join(targetDir, ".codex", "skills", skill.name);
-  const claudePath = path5.join(targetDir, ".claude", "skills", skill.name);
-  const linkTarget = path5.relative(path5.dirname(codexPath), claudePath);
-  fs4.mkdirSync(path5.dirname(codexPath), { recursive: true });
-  let stat;
-  try {
-    stat = fs4.lstatSync(codexPath);
-  } catch {
-    stat = void 0;
-  }
-  if (stat?.isSymbolicLink()) {
-    const existing = fs4.readlinkSync(codexPath);
-    if (existing === linkTarget) {
-      return {
-        skill: skill.name,
-        client: CodingAgents.codex,
-        targetPath: codexPath,
-        status: "already-linked",
-        message: `Already linked: .codex/skills/${skill.name}`
-      };
-    }
-    if (!force) {
-      throw new CliError({
-        code: "VALIDATION_ERROR",
-        message: `.codex/skills/${skill.name} is a symlink pointing elsewhere (${existing}). Pass --force to relink.`,
-        details: { skill: skill.name, targetPath: codexPath, existingTarget: existing },
-        exitCode: 1
-      });
-    }
-    fs4.unlinkSync(codexPath);
-    fs4.symlinkSync(linkTarget, codexPath);
-    return {
-      skill: skill.name,
-      client: CodingAgents.codex,
-      targetPath: codexPath,
-      status: "relinked",
-      message: `Relinked .codex/skills/${skill.name} \u2192 ${linkTarget}`
-    };
-  }
-  if (stat) {
-    if (!force) {
-      throw new CliError({
-        code: "VALIDATION_ERROR",
-        message: `.codex/skills/${skill.name} exists but is not a symlink. Pass --force to replace.`,
-        details: { skill: skill.name, targetPath: codexPath },
-        exitCode: 1
-      });
-    }
-    fs4.rmSync(codexPath, { recursive: true, force: true });
-  }
-  fs4.symlinkSync(linkTarget, codexPath);
-  return {
-    skill: skill.name,
-    client: CodingAgents.codex,
-    targetPath: codexPath,
-    status: stat ? "relinked" : "linked",
-    message: stat ? `Replaced and linked .codex/skills/${skill.name} \u2192 ${linkTarget}` : `Linked .codex/skills/${skill.name} \u2192 ${linkTarget}`
-  };
-}
-function buildSummaryMessage(results) {
-  const counts = {};
-  for (const r of results) counts[r.status] = (counts[r.status] ?? 0) + 1;
-  const parts = Object.entries(counts).map(([status, n]) => `${n} ${status}`);
-  let message = `Skills install summary: ${parts.join(", ")}.`;
-  const totalConflicts = results.reduce((sum, r) => sum + (r.conflicts?.length ?? 0), 0);
-  if (totalConflicts > 0) {
-    message += ` ${totalConflicts} file(s) differ from the bundle and were kept \u2014 pass --force to overwrite local edits.`;
-  }
-  return message;
-}
-function getBundledSkillSnapshots(pkgDir) {
-  return getBundledSkills(pkgDir).map((skill) => {
-    const files = {};
-    for (const rel of walkRelative(skill.bundledPath)) {
-      files[rel] = sha256File(path5.join(skill.bundledPath, rel));
-    }
-    return { name: skill.name, version: PACKAGE_VERSION, files };
-  });
-}
-async function installSkills(opts = {}) {
-  const targetDir = opts.user ? os4.homedir() : path5.resolve(opts.dir ?? process.cwd());
-  const client = opts.client ?? SkillsClients.all;
-  const force = opts.force ?? false;
-  const allSkills = getBundledSkills();
-  const requestedNames = opts.skills && opts.skills.length > 0 ? opts.skills : allSkills.map((s) => s.name);
-  const knownNames = new Set(allSkills.map((s) => s.name));
-  const unknown = requestedNames.filter((n) => !knownNames.has(n));
-  if (unknown.length > 0) {
-    throw new CliError({
-      code: "VALIDATION_ERROR",
-      message: `Unknown skill(s): ${unknown.join(", ")}. Available: ${[...knownNames].join(", ")}`,
-      details: { unknownSkills: unknown, availableSkills: [...knownNames] },
-      exitCode: 1
-    });
-  }
-  const skillsToInstall = allSkills.filter((s) => requestedNames.includes(s.name));
-  fs4.mkdirSync(targetDir, { recursive: true });
-  const results = [];
-  for (const skill of skillsToInstall) {
-    results.push(installClaudeSkill(skill, targetDir, force));
-    if (client !== SkillsClients.claude) {
-      results.push(installCodexSymlink(skill, targetDir, force));
-    }
-  }
-  return {
-    targetDir,
-    results,
-    message: buildSummaryMessage(results)
-  };
-}
-async function listSkills(opts = {}) {
-  const skills = getBundledSkills();
-  if (isMachineFormat(opts.format)) {
-    console.log(JSON.stringify({
-      skills: skills.map((s) => ({
-        name: s.name,
-        description: s.description,
-        claudePath: `.claude/skills/${s.name}`,
-        codexPath: `.codex/skills/${s.name}`
-      }))
-    }, null, 2));
-    return;
-  }
-  console.log("Bundled canonry skills:\n");
-  for (const skill of skills) {
-    console.log(`  ${skill.name}`);
-    if (skill.description) console.log(`    ${skill.description}`);
-    console.log(`    Claude: .claude/skills/${skill.name}/`);
-    console.log(`    Codex:  .codex/skills/${skill.name} (symlink \u2192 ../../.claude/skills/${skill.name})`);
-    console.log();
-  }
-}
-function emitInstallSummary(summary, format) {
-  if (isMachineFormat(format)) {
-    console.log(JSON.stringify(summary, null, 2));
-    return;
-  }
-  for (const r of summary.results) console.log(r.message);
-  console.log(`
-Target: ${summary.targetDir}`);
-  console.log(summary.message);
-}
-function getMissingUserSkillsNudge(home, agentPlugin) {
-  if (!home) return null;
-  const skillsBase = path5.join(home, ".claude", "skills");
-  const installed = [];
-  const missing = [];
-  for (const name of BUNDLED_SKILL_NAMES) {
-    const skillFile = path5.join(skillsBase, name, "SKILL.md");
-    if (existsSafe(skillFile)) installed.push(name);
-    else missing.push(name);
-  }
-  if (agentPlugin && agentPlugin.configuredClients.length > 0) {
-    const unverifiedClients = agentPlugin.configuredClients.filter((client) => !agentPlugin.verifiedClients.includes(client));
-    const mismatchedClients = agentPlugin.verifiedClients.filter((client) => agentPlugin.verifiedClientVersions?.[client] !== PACKAGE_VERSION);
-    if (unverifiedClients.length === 0 && mismatchedClients.length === 0) return null;
-    const displayClients = (clients) => clients.map((client) => client === "claude-code" ? "Claude Code" : "Codex").join(" + ");
-    const problems = [];
-    if (unverifiedClients.length > 0) {
-      problems.push(`The Canonry plugin is enabled for ${displayClients(unverifiedClients)}, but its cached manifest and skill assets could not be verified.`);
-    }
-    if (mismatchedClients.length > 0) {
-      const versions = mismatchedClients.map((client) => `${client === "claude-code" ? "Claude Code" : "Codex"} v${agentPlugin.verifiedClientVersions?.[client] ?? "unknown"}`).join(", ");
-      problems.push(`${versions} ${mismatchedClients.length === 1 ? "does" : "do"} not match the running Canonry v${PACKAGE_VERSION}.`);
-    }
-    return {
-      message: `Tip: ${problems.join(" ")} Update or reinstall \`canonry@canonry\` with the affected client plugin manager.`,
-      missing,
-      installed
-    };
-  }
-  if (missing.length === 0) return null;
-  const fix = missing.length === BUNDLED_SKILL_NAMES.length ? "canonry skills install --user" : `canonry skills install ${missing.join(" ")} --user`;
-  return {
-    message: `Tip: ${missing.join(" + ")} skill${missing.length === 1 ? "" : "s"} not installed in ~/.claude/skills/. Run \`${fix}\` so Claude/Codex sessions on this host auto-load the canonry reference docs.`,
-    missing,
-    installed
-  };
-}
-function existsSafe(p) {
-  try {
-    return fs4.existsSync(p);
-  } catch {
-    return false;
-  }
-}
-function parseSkillsClient(value) {
-  if (!value) return SkillsClients.all;
-  const parsed = skillsClientSchema.safeParse(value);
-  if (parsed.success) return parsed.data;
-  const allowed = skillsClientSchema.options;
-  throw new CliError({
-    code: "VALIDATION_ERROR",
-    message: `Invalid --client value "${value}". Must be one of: ${allowed.join(", ")}`,
-    details: { flag: "client", value, allowed },
-    exitCode: 1
-  });
-}
-
 // src/provider-registry.ts
 var ProviderRegistry = class {
   providers = /* @__PURE__ */ new Map();
@@ -10014,7 +9663,7 @@ var ProviderRegistry = class {
 };
 
 // src/scheduler.ts
-import crypto19 from "crypto";
+import crypto18 from "crypto";
 import cron from "node-cron";
 import { and as and14, eq as eq17, inArray as inArray6, notExists, sql as sql8 } from "drizzle-orm";
 var log13 = createLogger("Scheduler");
@@ -10057,7 +9706,7 @@ var Scheduler = class {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     for (const project of projectsWithoutHealth) {
       this.db.insert(schedules).values({
-        id: crypto19.randomUUID(),
+        id: crypto18.randomUUID(),
         projectId: project.id,
         kind: SchedulableRunKinds.doctor,
         cronExpr: DEFAULT_HEALTH_CRON,
@@ -10216,7 +9865,7 @@ var Scheduler = class {
           log13.warn("gbp-sync.no-callback", { scheduleId, projectId, msg: "host did not register onGbpSyncRequested" });
           return;
         }
-        const runId2 = crypto19.randomUUID();
+        const runId2 = crypto18.randomUUID();
         this.db.insert(runs).values({
           id: runId2,
           projectId,
@@ -10249,7 +9898,7 @@ var Scheduler = class {
           this.db.update(schedules).set({ nextRunAt, updatedAt: now }).where(eq17(schedules.id, currentSchedule.id)).run();
           return;
         }
-        const runId2 = crypto19.randomUUID();
+        const runId2 = crypto18.randomUUID();
         this.db.insert(runs).values({
           id: runId2,
           projectId,
@@ -10324,7 +9973,7 @@ var Scheduler = class {
           this.db.update(schedules).set({ nextRunAt, updatedAt: now }).where(eq17(schedules.id, currentSchedule.id)).run();
           return;
         }
-        const runId2 = crypto19.randomUUID();
+        const runId2 = crypto18.randomUUID();
         const effectiveRequest = normalizeSiteAuditRunRequest({});
         this.db.transaction((tx) => {
           tx.insert(runs).values({
@@ -10422,7 +10071,7 @@ async function refreshAllIntegrations(client, projectName) {
 
 // src/notifier.ts
 import { eq as eq18, desc as desc7, and as and15, inArray as inArray7, or as or2 } from "drizzle-orm";
-import crypto20 from "crypto";
+import crypto19 from "crypto";
 var log15 = createLogger("Notifier");
 var Notifier = class {
   db;
@@ -10748,7 +10397,7 @@ var Notifier = class {
   }
   logDelivery(projectId, notificationId, event, status, error) {
     this.db.insert(auditLog).values({
-      id: crypto20.randomUUID(),
+      id: crypto19.randomUUID(),
       projectId,
       actor: "scheduler",
       action: `notification.${status}`,
@@ -10910,12 +10559,12 @@ function analysisResultFromInsights(insights2) {
 }
 
 // src/agent/session-registry.ts
-import crypto24 from "crypto";
+import crypto23 from "crypto";
 import { eq as eq21 } from "drizzle-orm";
 
 // src/agent/session.ts
-import fs7 from "fs";
-import path8 from "path";
+import fs6 from "fs";
+import path7 from "path";
 import { Agent } from "@mariozechner/pi-agent-core";
 import { registerBuiltInApiProviders } from "@mariozechner/pi-ai";
 
@@ -11158,26 +10807,26 @@ function buildAgentProvidersResponse(config) {
 }
 
 // src/agent/skill-paths.ts
-import fs5 from "fs";
-import path6 from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
+import fs4 from "fs";
+import path5 from "path";
+import { fileURLToPath } from "url";
 function resolveAeroSkillDir(pkgDir) {
-  const here = pkgDir ?? path6.dirname(fileURLToPath2(import.meta.url));
+  const here = pkgDir ?? path5.dirname(fileURLToPath(import.meta.url));
   const candidates = [
-    path6.join(here, "../assets/agent-workspace/skills/aero"),
-    path6.join(here, "../../assets/agent-workspace/skills/aero"),
-    path6.join(here, "../../../../skills/aero")
+    path5.join(here, "../assets/agent-workspace/skills/aero"),
+    path5.join(here, "../../assets/agent-workspace/skills/aero"),
+    path5.join(here, "../../../../skills/aero")
   ];
   for (const candidate of candidates) {
-    if (fs5.existsSync(path6.join(candidate, "SKILL.md"))) return candidate;
+    if (fs4.existsSync(path5.join(candidate, "SKILL.md"))) return candidate;
   }
   throw new Error(`Aero skill not found. Searched:
   ${candidates.join("\n  ")}`);
 }
 
 // src/agent/skill-tools.ts
-import fs6 from "fs";
-import path7 from "path";
+import fs5 from "fs";
+import path6 from "path";
 import { Type } from "@sinclair/typebox";
 var MAX_DOC_CHARS = 2e4;
 function textResult(details) {
@@ -11186,7 +10835,7 @@ function textResult(details) {
     details
   };
 }
-function parseDescription2(body) {
+function parseDescription(body) {
   if (!body.startsWith("---")) return "(no description)";
   const end = body.indexOf("\n---", 3);
   if (end === -1) return "(no description)";
@@ -11198,16 +10847,16 @@ function parseDescription2(body) {
   return "(no description)";
 }
 function scanSkillDocs(skillDir) {
-  const refsDir = path7.join(skillDir ?? resolveAeroSkillDir(), "references");
-  if (!fs6.existsSync(refsDir)) return [];
+  const refsDir = path6.join(skillDir ?? resolveAeroSkillDir(), "references");
+  if (!fs5.existsSync(refsDir)) return [];
   const entries = [];
-  for (const file of fs6.readdirSync(refsDir)) {
+  for (const file of fs5.readdirSync(refsDir)) {
     if (!file.endsWith(".md")) continue;
-    const filePath = path7.join(refsDir, file);
-    const body = fs6.readFileSync(filePath, "utf-8");
+    const filePath = path6.join(refsDir, file);
+    const body = fs5.readFileSync(filePath, "utf-8");
     entries.push({
       slug: file.replace(/\.md$/, ""),
-      description: parseDescription2(body),
+      description: parseDescription(body),
       bytes: Buffer.byteLength(body, "utf-8")
     });
   }
@@ -11247,8 +10896,8 @@ function buildReadSkillDocTool() {
           availableSlugs: docs.map((d) => d.slug)
         });
       }
-      const filePath = path7.join(skillDir, "references", `${match.slug}.md`);
-      const content = fs6.readFileSync(filePath, "utf-8");
+      const filePath = path6.join(skillDir, "references", `${match.slug}.md`);
+      const content = fs5.readFileSync(filePath, "utf-8");
       if (content.length > MAX_DOC_CHARS) {
         return textResult({
           slug: match.slug,
@@ -11654,7 +11303,7 @@ function buildAeroStateTools(ctx, opts = {}) {
 }
 
 // src/agent/llm-usage.ts
-import crypto21 from "crypto";
+import crypto20 from "crypto";
 var AeroLlmUsageFeatures = {
   turn: "aero.turn"
 };
@@ -11673,7 +11322,7 @@ function recordLlmUsageEvent(args) {
     const usage = args.message.usage;
     const now = (/* @__PURE__ */ new Date()).toISOString();
     args.db.insert(llmUsageEvents).values({
-      id: crypto21.randomUUID(),
+      id: crypto20.randomUUID(),
       projectId: args.projectId,
       runId: args.runId,
       agentSessionId: args.agentSessionId,
@@ -11749,7 +11398,7 @@ function splitAeroAnthropicSystemCachePayload(payload, model) {
 }
 
 // src/agent/tool-usage.ts
-import crypto22 from "crypto";
+import crypto21 from "crypto";
 var AeroToolEventStatuses = {
   success: "success",
   error: "error"
@@ -11812,7 +11461,7 @@ function createAeroToolUsageHooks(args) {
 function recordAgentToolEvent(args) {
   try {
     args.db.insert(agentToolEvents).values({
-      id: crypto22.randomUUID(),
+      id: crypto21.randomUUID(),
       projectId: args.projectId,
       agentSessionId: args.agentSessionId,
       toolCallId: args.toolCallId,
@@ -11843,9 +11492,9 @@ function ensureBuiltinsRegistered() {
 }
 function loadAeroSystemPrompt(pkgDir) {
   const skillDir = resolveAeroSkillDir(pkgDir);
-  const skillBody = fs7.readFileSync(path8.join(skillDir, "SKILL.md"), "utf-8");
-  const soulPath = path8.join(skillDir, "soul.md");
-  const base = fs7.existsSync(soulPath) ? `${fs7.readFileSync(soulPath, "utf-8").trimEnd()}
+  const skillBody = fs6.readFileSync(path7.join(skillDir, "SKILL.md"), "utf-8");
+  const soulPath = path7.join(skillDir, "soul.md");
+  const base = fs6.existsSync(soulPath) ? `${fs6.readFileSync(soulPath, "utf-8").trimEnd()}
 
 ---
 
@@ -11858,7 +11507,7 @@ function appendSystemPromptExtras(base, env = process.env) {
   const filePath = env.AERO_SYSTEM_PROMPT_FILE?.trim();
   if (filePath) {
     try {
-      fileBody = fs7.readFileSync(filePath, "utf-8").trim();
+      fileBody = fs6.readFileSync(filePath, "utf-8").trim();
     } catch {
       fileBody = "";
     }
@@ -12039,7 +11688,7 @@ async function loadExternalMcpTools(servers, opts = {}) {
 }
 
 // src/agent/memory-store.ts
-import crypto23 from "crypto";
+import crypto22 from "crypto";
 import { and as and16, desc as desc8, eq as eq20, like, sql as sql9 } from "drizzle-orm";
 var COMPACTION_KEY_PREFIX = "compaction:";
 var COMPACTION_NOTES_PER_SESSION = 3;
@@ -12068,7 +11717,7 @@ function upsertMemoryEntry(db, args) {
     throw new Error(`memory key prefix "${COMPACTION_KEY_PREFIX}" is reserved for compaction notes`);
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  const id = crypto23.randomUUID();
+  const id = crypto22.randomUUID();
   db.insert(agentMemory).values({
     id,
     projectId: args.projectId,
@@ -12105,7 +11754,7 @@ function writeCompactionNote(db, args) {
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const key = `${COMPACTION_KEY_PREFIX}${args.sessionId}:${now}`;
-  const id = crypto23.randomUUID();
+  const id = crypto22.randomUUID();
   let inserted;
   db.transaction((tx) => {
     tx.insert(agentMemory).values({
@@ -12384,7 +12033,7 @@ var SessionRegistry = class {
     }
     const { provider, modelId } = resolveSessionProviderAndModel(this.opts.config, preferences);
     const systemPrompt = loadAeroSystemPrompt();
-    const sessionId = crypto24.randomUUID();
+    const sessionId = crypto23.randomUUID();
     const agent = createAeroSession({
       projectName,
       client: this.opts.client,
@@ -12763,7 +12412,7 @@ ${lines.join("\n")}
   insertRow(params) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     this.opts.db.insert(agentSessions).values({
-      id: params.id ?? crypto24.randomUUID(),
+      id: params.id ?? crypto23.randomUUID(),
       projectId: params.projectId,
       systemPrompt: params.systemPrompt,
       modelProvider: params.provider ?? params.modelProvider ?? AgentProviderIds.claude,
@@ -13151,13 +12800,13 @@ var USER_AGENT2 = "Canonry/1.0 (site-analysis)";
 function fetchWithPinnedAddress(target) {
   return new Promise((resolve) => {
     const port = target.url.port ? Number(target.url.port) : 443;
-    const path10 = target.url.pathname + target.url.search;
+    const path9 = target.url.pathname + target.url.search;
     const req = https2.request(
       {
         hostname: target.address,
         family: target.family,
         port,
-        path: path10,
+        path: path9,
         method: "GET",
         timeout: FETCH_TIMEOUT_MS2,
         servername: target.url.hostname,
@@ -13946,14 +13595,14 @@ function summarizeProviderConfig(config) {
   };
 }
 function hashApiKey(key) {
-  return crypto25.createHash("sha256").update(key).digest("hex");
+  return crypto24.createHash("sha256").update(key).digest("hex");
 }
 var DASHBOARD_SCRYPT_KEYLEN = 64;
 var DASHBOARD_SCRYPT_COST = 1 << 15;
 var DASHBOARD_SCRYPT_MAXMEM = 64 * 1024 * 1024;
 function hashDashboardPassword(password) {
-  const salt = crypto25.randomBytes(16);
-  const derived = crypto25.scryptSync(password, salt, DASHBOARD_SCRYPT_KEYLEN, {
+  const salt = crypto24.randomBytes(16);
+  const derived = crypto24.scryptSync(password, salt, DASHBOARD_SCRYPT_KEYLEN, {
     N: DASHBOARD_SCRYPT_COST,
     maxmem: DASHBOARD_SCRYPT_MAXMEM
   });
@@ -13974,14 +13623,14 @@ function verifyDashboardPassword(password, storedHash) {
     } catch {
       return { ok: false, needsRehash: false };
     }
-    const derived = crypto25.scryptSync(password, salt, expected.length, {
+    const derived = crypto24.scryptSync(password, salt, expected.length, {
       N: DASHBOARD_SCRYPT_COST,
       maxmem: DASHBOARD_SCRYPT_MAXMEM
     });
     if (derived.length !== expected.length)
       return { ok: false, needsRehash: false };
     return {
-      ok: crypto25.timingSafeEqual(derived, expected),
+      ok: crypto24.timingSafeEqual(derived, expected),
       needsRehash: false
     };
   }
@@ -13990,7 +13639,7 @@ function verifyDashboardPassword(password, storedHash) {
     const expected = Buffer.from(storedHash, "hex");
     if (candidate.length !== expected.length)
       return { ok: false, needsRehash: false };
-    const ok = crypto25.timingSafeEqual(candidate, expected);
+    const ok = crypto24.timingSafeEqual(candidate, expected);
     return { ok, needsRehash: ok };
   }
   return { ok: false, needsRehash: false };
@@ -14221,8 +13870,8 @@ async function createServer(opts) {
   );
   jobRunner.onRunCompleted = (runId, projectId) => runCoordinator.onRunCompleted(runId, projectId);
   const snapshotService = new SnapshotService(registry);
-  const orphanedOpenClawDir = path9.join(os5.homedir(), ".openclaw-aero");
-  if (fs8.existsSync(orphanedOpenClawDir)) {
+  const orphanedOpenClawDir = path8.join(os4.homedir(), ".openclaw-aero");
+  if (fs7.existsSync(orphanedOpenClawDir)) {
     app.log.warn(
       { path: orphanedOpenClawDir },
       "OpenClaw gateway is no longer used. Remove ~/.openclaw-aero/ manually to reclaim the directory."
@@ -14759,7 +14408,7 @@ async function createServer(opts) {
       return removed;
     }
   };
-  const googleStateSecret = process.env.GOOGLE_STATE_SECRET ?? crypto25.randomBytes(32).toString("hex");
+  const googleStateSecret = process.env.GOOGLE_STATE_SECRET ?? crypto24.randomBytes(32).toString("hex");
   const googleConnectionStore = {
     listConnections: (domain) => listGoogleConnections(opts.config, domain),
     getConnection: (domain, connectionType) => getGoogleConnection(opts.config, domain, connectionType),
@@ -14839,7 +14488,7 @@ async function createServer(opts) {
     if (!existing) {
       const prefix = opts.config.apiKey.slice(0, 12);
       opts.db.insert(apiKeys).values({
-        id: `key_${crypto25.randomBytes(8).toString("hex")}`,
+        id: `key_${crypto24.randomBytes(8).toString("hex")}`,
         name: "default",
         keyHash,
         keyPrefix: prefix,
@@ -14863,7 +14512,7 @@ async function createServer(opts) {
   };
   const createSession = (apiKeyId) => {
     pruneExpiredSessions();
-    const sessionId = crypto25.randomBytes(32).toString("hex");
+    const sessionId = crypto24.randomBytes(32).toString("hex");
     sessions.set(sessionId, {
       apiKeyId,
       expiresAt: Date.now() + SESSION_TTL_MS
@@ -15111,7 +14760,7 @@ async function createServer(opts) {
       const configPath = getConfigPath();
       return {
         databasePath: opts.config.database,
-        configPath: fs8.existsSync(configPath) ? configPath : null
+        configPath: fs7.existsSync(configPath) ? configPath : null
       };
     })(),
     // Snapshot the bundled skill trees (version + file hashes) so the
@@ -15223,7 +14872,7 @@ async function createServer(opts) {
         deps: {
           enqueueAutoExtract: ({ projectId, release: r }) => {
             const now = (/* @__PURE__ */ new Date()).toISOString();
-            const runId = crypto25.randomUUID();
+            const runId = crypto24.randomUUID();
             opts.db.insert(runs).values({
               id: runId,
               projectId,
@@ -15458,7 +15107,7 @@ async function createServer(opts) {
         const createdAt = (/* @__PURE__ */ new Date()).toISOString();
         opts.db.insert(auditLog).values(
           targetProjectIds.map((projectId) => ({
-            id: crypto25.randomUUID(),
+            id: crypto24.randomUUID(),
             projectId,
             actor: "api",
             action: existing ? "provider.updated" : "provider.created",
@@ -15617,10 +15266,10 @@ async function createServer(opts) {
       return snapshotService.createReport(input);
     }
   });
-  const dirname = path9.dirname(fileURLToPath3(import.meta.url));
-  const assetsDir = opts.assetsDir ?? path9.join(dirname, "..", "assets");
-  if (fs8.existsSync(assetsDir)) {
-    const indexPath = path9.join(assetsDir, "index.html");
+  const dirname = path8.dirname(fileURLToPath2(import.meta.url));
+  const assetsDir = opts.assetsDir ?? path8.join(dirname, "..", "assets");
+  if (fs7.existsSync(assetsDir)) {
+    const indexPath = path8.join(assetsDir, "index.html");
     const injectConfig = (html, projectTabsOverride, themeOverride, renderTokenOverride) => {
       const clientConfig = {};
       if (basePath) clientConfig.basePath = basePath;
@@ -15675,8 +15324,8 @@ async function createServer(opts) {
       // Without this, the browser hits the server for every JS chunk on
       // every page load, defeating most of the dashboard's first-paint
       // budget.
-      setHeaders: (res, path10) => {
-        if (path10.endsWith(".html")) {
+      setHeaders: (res, path9) => {
+        if (path9.endsWith(".html")) {
           res.setHeader("Cache-Control", "no-cache, must-revalidate");
         } else {
           res.setHeader("Cache-Control", "public, max-age=31536000, immutable");
@@ -15684,8 +15333,8 @@ async function createServer(opts) {
       }
     });
     const serveIndex = (_request, reply) => {
-      if (fs8.existsSync(indexPath)) {
-        const html = fs8.readFileSync(indexPath, "utf-8");
+      if (fs7.existsSync(indexPath)) {
+        const html = fs7.readFileSync(indexPath, "utf-8");
         return sendSpaDocument(reply, html);
       }
       return reply.status(404).send({ error: "Dashboard not built" });
@@ -15706,8 +15355,8 @@ async function createServer(opts) {
       if (basePath && !url.startsWith(basePath)) {
         return reply.status(404).send({ error: "Not found", path: request.url });
       }
-      if (fs8.existsSync(indexPath)) {
-        const html = fs8.readFileSync(indexPath, "utf-8");
+      if (fs7.existsSync(indexPath)) {
+        const html = fs7.readFileSync(indexPath, "utf-8");
         return sendSpaDocument(reply, html);
       }
       return reply.status(404).send({ error: "Not found" });
@@ -15814,11 +15463,6 @@ export {
   backfillTrafficClassificationCommand,
   getCloudflareTrafficConnectionBySourceId,
   setGoogleAuthConfig,
-  installSkills,
-  listSkills,
-  emitInstallSummary,
-  getMissingUserSkillsNudge,
-  parseSkillsClient,
   formatAuditFactorScore,
   checkLatestVersionForCli,
   listAgentProviders,