@fased/fased 0.1.41 → 0.1.42

package/dist/plugin-sdk/skill-commands-DCnCOVR_.js

@@ -0,0 +1,1514 @@
+import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
+import { t as createSubsystemLogger } from "./subsystem-DBPNbQDQ.js";
+import { h as resolveUserPath, t as CONFIG_DIR } from "./utils-CYk9EKoq.js";
+import { Ar as resolveEffectiveEnableState, Bn as loadPluginManifestRegistry, Er as parseBooleanValue, jr as resolveMemorySlotDecision, kr as normalizePluginsConfig, ur as MANIFEST_KEY, yr as isDangerousHostEnvVarName } from "./config-DKNrb8oT.js";
+import { D as resolveFasedAgentPackageRootSync, K as normalizeStringEntries, R as resolveEffectiveAgentSkillFilter, l as resolveAgentWorkspaceDir, r as listAgentIds, z as normalizeSkillFilter } from "./agent-scope-BbgPlhtw.js";
+import { o as createAsyncLock } from "./pairing-token-HQpaqod5.js";
+import { a as listChatCommands } from "./commands-registry-DwQIFJmL.js";
+import { i as resolveSandboxPath } from "./sandbox-paths-fc-HFGJr.js";
+import path from "node:path";
+import fs from "node:fs";
+import os from "node:os";
+import JSON5 from "json5";
+import { fileURLToPath } from "node:url";
+import { randomUUID } from "node:crypto";
+import { formatSkillsForPrompt, loadSkillsFromDir } from "@mariozechner/pi-coding-agent";
+import chokidar from "chokidar";
+import YAML from "yaml";
+
+//#region src/markdown/frontmatter.ts
+function stripQuotes(value) {
+	if (value.startsWith("\"") && value.endsWith("\"") || value.startsWith("'") && value.endsWith("'")) return value.slice(1, -1);
+	return value;
+}
+function coerceFrontmatterValue(value) {
+	if (value === null || value === void 0) return;
+	if (typeof value === "string") return value.trim();
+	if (typeof value === "number" || typeof value === "boolean") return String(value);
+	if (typeof value === "object") try {
+		return JSON.stringify(value);
+	} catch {
+		return;
+	}
+}
+function parseYamlFrontmatter(block) {
+	try {
+		const parsed = YAML.parse(block, { schema: "core" });
+		if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
+		const result = {};
+		for (const [rawKey, value] of Object.entries(parsed)) {
+			const key = rawKey.trim();
+			if (!key) continue;
+			const coerced = coerceFrontmatterValue(value);
+			if (coerced === void 0) continue;
+			result[key] = coerced;
+		}
+		return result;
+	} catch {
+		return null;
+	}
+}
+function extractMultiLineValue(lines, startIndex) {
+	const match = lines[startIndex].match(/^([\w-]+):\s*(.*)$/);
+	if (!match) return {
+		value: "",
+		linesConsumed: 1
+	};
+	const inlineValue = match[2].trim();
+	if (inlineValue) return {
+		value: inlineValue,
+		linesConsumed: 1
+	};
+	const valueLines = [];
+	let i = startIndex + 1;
+	while (i < lines.length) {
+		const line = lines[i];
+		if (line.length > 0 && !line.startsWith(" ") && !line.startsWith("	")) break;
+		valueLines.push(line);
+		i++;
+	}
+	return {
+		value: valueLines.join("\n").trim(),
+		linesConsumed: i - startIndex
+	};
+}
+function parseLineFrontmatter(block) {
+	const frontmatter = {};
+	const lines = block.split("\n");
+	let i = 0;
+	while (i < lines.length) {
+		const match = lines[i].match(/^([\w-]+):\s*(.*)$/);
+		if (!match) {
+			i++;
+			continue;
+		}
+		const key = match[1];
+		const inlineValue = match[2].trim();
+		if (!key) {
+			i++;
+			continue;
+		}
+		if (!inlineValue && i + 1 < lines.length) {
+			const nextLine = lines[i + 1];
+			if (nextLine.startsWith(" ") || nextLine.startsWith("	")) {
+				const { value, linesConsumed } = extractMultiLineValue(lines, i);
+				if (value) frontmatter[key] = value;
+				i += linesConsumed;
+				continue;
+			}
+		}
+		const value = stripQuotes(inlineValue);
+		if (value) frontmatter[key] = value;
+		i++;
+	}
+	return frontmatter;
+}
+function parseFrontmatterBlock(content) {
+	const normalized = content.replace(/\r\n/g, "\n").replace(/\r/g, "\n");
+	if (!normalized.startsWith("---")) return {};
+	const endIndex = normalized.indexOf("\n---", 3);
+	if (endIndex === -1) return {};
+	const block = normalized.slice(4, endIndex);
+	const lineParsed = parseLineFrontmatter(block);
+	const yamlParsed = parseYamlFrontmatter(block);
+	if (yamlParsed === null) return lineParsed;
+	const merged = { ...yamlParsed };
+	for (const [key, value] of Object.entries(lineParsed)) if (value.startsWith("{") || value.startsWith("[")) merged[key] = value;
+	return merged;
+}
+
+//#endregion
+//#region src/shared/frontmatter.ts
+function normalizeStringList(input) {
+	if (!input) return [];
+	if (Array.isArray(input)) return input.map((value) => String(value).trim()).filter(Boolean);
+	if (typeof input === "string") return input.split(",").map((value) => value.trim()).filter(Boolean);
+	return [];
+}
+function getFrontmatterString(frontmatter, key) {
+	const raw = frontmatter[key];
+	return typeof raw === "string" ? raw : void 0;
+}
+function parseFrontmatterBool(value, fallback) {
+	const parsed = parseBooleanValue(value);
+	return parsed === void 0 ? fallback : parsed;
+}
+function resolveFasedAgentManifestBlock(params) {
+	const raw = getFrontmatterString(params.frontmatter, params.key ?? "metadata");
+	if (!raw) return;
+	try {
+		const parsed = JSON5.parse(raw);
+		if (!parsed || typeof parsed !== "object") return;
+		const candidate = parsed[MANIFEST_KEY];
+		if (candidate && typeof candidate === "object") return candidate;
+		return;
+	} catch {
+		return;
+	}
+}
+function resolveFasedAgentManifestRequires(metadataObj) {
+	const requiresRaw = typeof metadataObj.requires === "object" && metadataObj.requires !== null ? metadataObj.requires : void 0;
+	if (!requiresRaw) return;
+	return {
+		bins: normalizeStringList(requiresRaw.bins),
+		anyBins: normalizeStringList(requiresRaw.anyBins),
+		env: normalizeStringList(requiresRaw.env),
+		config: normalizeStringList(requiresRaw.config)
+	};
+}
+function resolveFasedAgentManifestInstall(metadataObj, parseInstallSpec) {
+	return (Array.isArray(metadataObj.install) ? metadataObj.install : []).map((entry) => parseInstallSpec(entry)).filter((entry) => Boolean(entry));
+}
+function resolveFasedAgentManifestOs(metadataObj) {
+	return normalizeStringList(metadataObj.os);
+}
+function parseFasedAgentManifestInstallBase(input, allowedKinds) {
+	if (!input || typeof input !== "object") return;
+	const raw = input;
+	const kind = (typeof raw.kind === "string" ? raw.kind : typeof raw.type === "string" ? raw.type : "").trim().toLowerCase();
+	if (!allowedKinds.includes(kind)) return;
+	const spec = {
+		raw,
+		kind
+	};
+	if (typeof raw.id === "string") spec.id = raw.id;
+	if (typeof raw.label === "string") spec.label = raw.label;
+	const bins = normalizeStringList(raw.bins);
+	if (bins.length > 0) spec.bins = bins;
+	return spec;
+}
+
+//#endregion
+//#region src/shared/config-eval.ts
+function isTruthy(value) {
+	if (value === void 0 || value === null) return false;
+	if (typeof value === "boolean") return value;
+	if (typeof value === "number") return value !== 0;
+	if (typeof value === "string") return value.trim().length > 0;
+	return true;
+}
+function resolveConfigPath(config, pathStr) {
+	const parts = pathStr.split(".").filter(Boolean);
+	let current = config;
+	for (const part of parts) {
+		if (typeof current !== "object" || current === null) return;
+		current = current[part];
+	}
+	return current;
+}
+function isConfigPathTruthyWithDefaults(config, pathStr, defaults) {
+	const value = resolveConfigPath(config, pathStr);
+	if (value === void 0 && pathStr in defaults) return defaults[pathStr] ?? false;
+	return isTruthy(value);
+}
+function evaluateRuntimeRequires(params) {
+	const requires = params.requires;
+	if (!requires) return true;
+	const requiredBins = requires.bins ?? [];
+	if (requiredBins.length > 0) for (const bin of requiredBins) {
+		if (params.hasBin(bin)) continue;
+		if (params.hasRemoteBin?.(bin)) continue;
+		return false;
+	}
+	const requiredAnyBins = requires.anyBins ?? [];
+	if (requiredAnyBins.length > 0) {
+		if (!requiredAnyBins.some((bin) => params.hasBin(bin)) && !params.hasAnyRemoteBin?.(requiredAnyBins)) return false;
+	}
+	const requiredEnv = requires.env ?? [];
+	if (requiredEnv.length > 0) {
+		for (const envName of requiredEnv) if (!params.hasEnv(envName)) return false;
+	}
+	const requiredConfig = requires.config ?? [];
+	if (requiredConfig.length > 0) {
+		for (const configPath of requiredConfig) if (!params.isConfigPathTruthy(configPath)) return false;
+	}
+	return true;
+}
+function evaluateRuntimeEligibility(params) {
+	const osList = params.os ?? [];
+	const remotePlatforms = params.remotePlatforms ?? [];
+	if (osList.length > 0 && !osList.includes(resolveRuntimePlatform()) && !remotePlatforms.some((platform) => osList.includes(platform))) return false;
+	if (params.always === true) return true;
+	return evaluateRuntimeRequires({
+		requires: params.requires,
+		hasBin: params.hasBin,
+		hasRemoteBin: params.hasRemoteBin,
+		hasAnyRemoteBin: params.hasAnyRemoteBin,
+		hasEnv: params.hasEnv,
+		isConfigPathTruthy: params.isConfigPathTruthy
+	});
+}
+function resolveRuntimePlatform() {
+	return process.platform;
+}
+function windowsPathExtensions() {
+	const raw = process.env.PATHEXT;
+	return ["", ...(raw !== void 0 ? raw.split(";").map((v) => v.trim()) : [
+		".EXE",
+		".CMD",
+		".BAT",
+		".COM"
+	]).filter(Boolean)];
+}
+let cachedHasBinaryPath;
+let cachedHasBinaryPathExt;
+const hasBinaryCache = /* @__PURE__ */ new Map();
+function hasBinary(bin) {
+	const pathEnv = process.env.PATH ?? "";
+	const pathExt = process.platform === "win32" ? process.env.PATHEXT ?? "" : "";
+	if (cachedHasBinaryPath !== pathEnv || cachedHasBinaryPathExt !== pathExt) {
+		cachedHasBinaryPath = pathEnv;
+		cachedHasBinaryPathExt = pathExt;
+		hasBinaryCache.clear();
+	}
+	if (hasBinaryCache.has(bin)) return hasBinaryCache.get(bin);
+	const parts = pathEnv.split(path.delimiter).filter(Boolean);
+	const extensions = process.platform === "win32" ? windowsPathExtensions() : [""];
+	for (const part of parts) for (const ext of extensions) {
+		const candidate = path.join(part, bin + ext);
+		try {
+			fs.accessSync(candidate, fs.constants.X_OK);
+			hasBinaryCache.set(bin, true);
+			return true;
+		} catch {}
+	}
+	hasBinaryCache.set(bin, false);
+	return false;
+}
+
+//#endregion
+//#region src/agents/skills/frontmatter.ts
+function parseFrontmatter(content) {
+	return parseFrontmatterBlock(content);
+}
+function parseInstallSpec(input) {
+	const parsed = parseFasedAgentManifestInstallBase(input, [
+		"brew",
+		"node",
+		"go",
+		"uv",
+		"download"
+	]);
+	if (!parsed) return;
+	const { raw } = parsed;
+	const spec = { kind: parsed.kind };
+	if (parsed.id) spec.id = parsed.id;
+	if (parsed.label) spec.label = parsed.label;
+	if (parsed.bins) spec.bins = parsed.bins;
+	const osList = normalizeStringList(raw.os);
+	if (osList.length > 0) spec.os = osList;
+	const formula = typeof raw.formula === "string" ? raw.formula.trim() : "";
+	if (formula) spec.formula = formula;
+	const cask = typeof raw.cask === "string" ? raw.cask.trim() : "";
+	if (!spec.formula && cask) spec.formula = cask;
+	if (typeof raw.package === "string") spec.package = raw.package;
+	if (typeof raw.module === "string") spec.module = raw.module;
+	if (typeof raw.url === "string") spec.url = raw.url;
+	if (typeof raw.archive === "string") spec.archive = raw.archive;
+	if (typeof raw.integrity === "string") spec.integrity = raw.integrity;
+	if (typeof raw.sha256 === "string") spec.sha256 = raw.sha256;
+	if (typeof raw.shasum === "string") spec.shasum = raw.shasum;
+	if (typeof raw.extract === "boolean") spec.extract = raw.extract;
+	if (typeof raw.stripComponents === "number") spec.stripComponents = raw.stripComponents;
+	if (typeof raw.targetDir === "string") spec.targetDir = raw.targetDir;
+	return spec;
+}
+function parseConfigFieldSpec(input) {
+	if (!input || typeof input !== "object" || Array.isArray(input)) return;
+	const raw = input;
+	const key = typeof raw.key === "string" ? raw.key.trim() : "";
+	const path = typeof raw.path === "string" ? raw.path.trim() : "";
+	if (!key && !path) return;
+	const typeRaw = typeof raw.type === "string" ? raw.type.trim() : "";
+	const type = [
+		"string",
+		"secret",
+		"number",
+		"boolean",
+		"textarea"
+	].includes(typeRaw) ? typeRaw : void 0;
+	return {
+		...key ? { key } : {},
+		...path ? { path } : {},
+		...typeof raw.label === "string" && raw.label.trim() ? { label: raw.label.trim() } : {},
+		...type ? { type } : {},
+		...typeof raw.placeholder === "string" ? { placeholder: raw.placeholder } : {},
+		...typeof raw.required === "boolean" ? { required: raw.required } : {}
+	};
+}
+function resolveConfigFieldSpecs(metadataObj) {
+	return (Array.isArray(metadataObj.configFields) ? metadataObj.configFields : Array.isArray(metadataObj.config) ? metadataObj.config : []).map((entry) => parseConfigFieldSpec(entry)).filter((entry) => Boolean(entry));
+}
+function resolveFasedAgentMetadata(frontmatter) {
+	const metadataObj = resolveFasedAgentManifestBlock({ frontmatter });
+	if (!metadataObj) return;
+	const requires = resolveFasedAgentManifestRequires(metadataObj);
+	const install = resolveFasedAgentManifestInstall(metadataObj, parseInstallSpec);
+	const configFields = resolveConfigFieldSpecs(metadataObj);
+	const osRaw = resolveFasedAgentManifestOs(metadataObj);
+	return {
+		always: typeof metadataObj.always === "boolean" ? metadataObj.always : void 0,
+		emoji: typeof metadataObj.emoji === "string" ? metadataObj.emoji : void 0,
+		homepage: typeof metadataObj.homepage === "string" ? metadataObj.homepage : void 0,
+		skillKey: typeof metadataObj.skillKey === "string" ? metadataObj.skillKey : void 0,
+		primaryEnv: typeof metadataObj.primaryEnv === "string" ? metadataObj.primaryEnv : void 0,
+		os: osRaw.length > 0 ? osRaw : void 0,
+		requires,
+		configFields: configFields.length > 0 ? configFields : void 0,
+		install: install.length > 0 ? install : void 0
+	};
+}
+function resolveSkillInvocationPolicy(frontmatter) {
+	return {
+		userInvocable: parseFrontmatterBool(getFrontmatterString(frontmatter, "user-invocable"), true),
+		disableModelInvocation: parseFrontmatterBool(getFrontmatterString(frontmatter, "disable-model-invocation"), false)
+	};
+}
+function resolveSkillKey(skill, entry) {
+	return entry?.metadata?.skillKey ?? skill.name;
+}
+
+//#endregion
+//#region src/agents/skills/source.ts
+function resolveSkillSource(skill) {
+	const compatSkill = skill;
+	const canonical = typeof compatSkill.source === "string" ? compatSkill.source.trim() : "";
+	if (canonical) return canonical;
+	return (typeof compatSkill.sourceInfo?.source === "string" ? compatSkill.sourceInfo.source.trim() : "") || "unknown";
+}
+
+//#endregion
+//#region src/agents/skills/config.ts
+const DEFAULT_CONFIG_VALUES = {
+	"browser.enabled": true,
+	"browser.evaluateEnabled": true
+};
+function isConfigPathTruthy(config, pathStr) {
+	return isConfigPathTruthyWithDefaults(config, pathStr, DEFAULT_CONFIG_VALUES);
+}
+function resolveSkillConfig(config, skillKey) {
+	const skills = config?.skills?.entries;
+	if (!skills || typeof skills !== "object") return;
+	const entry = skills[skillKey];
+	if (!entry || typeof entry !== "object") return;
+	return entry;
+}
+function normalizeAllowlist(input) {
+	if (!input) return;
+	if (!Array.isArray(input)) return;
+	const normalized = normalizeStringEntries(input);
+	return normalized.length > 0 ? normalized : void 0;
+}
+const BUNDLED_SOURCES = new Set(["fased-bundled"]);
+function isBundledSkill(entry) {
+	return BUNDLED_SOURCES.has(resolveSkillSource(entry.skill));
+}
+function isBundledSkillAllowed(entry, allowlist) {
+	if (!allowlist || allowlist.length === 0) return true;
+	if (!isBundledSkill(entry)) return true;
+	const key = resolveSkillKey(entry.skill, entry);
+	return allowlist.includes(key) || allowlist.includes(entry.skill.name);
+}
+function shouldIncludeSkill(params) {
+	const { entry, config, eligibility } = params;
+	const skillConfig = resolveSkillConfig(config, resolveSkillKey(entry.skill, entry));
+	const allowBundled = normalizeAllowlist(config?.skills?.allowBundled);
+	if (skillConfig?.enabled === false) return false;
+	if (!isBundledSkillAllowed(entry, allowBundled)) return false;
+	return evaluateRuntimeEligibility({
+		os: entry.metadata?.os,
+		remotePlatforms: eligibility?.remote?.platforms,
+		always: entry.metadata?.always,
+		requires: entry.metadata?.requires,
+		hasBin: hasBinary,
+		hasRemoteBin: eligibility?.remote?.hasBin,
+		hasAnyRemoteBin: eligibility?.remote?.hasAnyBin,
+		hasEnv: (envName) => Boolean(process.env[envName] || skillConfig?.env?.[envName] || skillConfig?.apiKey && entry.metadata?.primaryEnv === envName),
+		isConfigPathTruthy: (configPath) => isConfigPathTruthy(config, configPath)
+	});
+}
+
+//#endregion
+//#region src/agents/sandbox/sanitize-env-vars.ts
+const BLOCKED_ENV_VAR_PATTERNS = [
+	/^ANTHROPIC_API_KEY$/i,
+	/^OPENAI_API_KEY$/i,
+	/^GEMINI_API_KEY$/i,
+	/^OPENROUTER_API_KEY$/i,
+	/^MINIMAX_API_KEY$/i,
+	/^ELEVENLABS_API_KEY$/i,
+	/^SYNTHETIC_API_KEY$/i,
+	/^TELEGRAM_BOT_TOKEN$/i,
+	/^DISCORD_BOT_TOKEN$/i,
+	/^SLACK_(BOT|APP)_TOKEN$/i,
+	/^LINE_CHANNEL_SECRET$/i,
+	/^LINE_CHANNEL_ACCESS_TOKEN$/i,
+	/^FASED_GATEWAY_(TOKEN|PASSWORD)$/i,
+	/^AWS_(SECRET_ACCESS_KEY|SECRET_KEY|SESSION_TOKEN)$/i,
+	/^(GH|GITHUB)_TOKEN$/i,
+	/^(AZURE|AZURE_OPENAI|COHERE|AI_GATEWAY|OPENROUTER)_API_KEY$/i,
+	/_?(API_KEY|TOKEN|PASSWORD|PRIVATE_KEY|SECRET)$/i
+];
+const ALLOWED_ENV_VAR_PATTERNS = [
+	/^LANG$/,
+	/^LC_.*$/i,
+	/^PATH$/i,
+	/^HOME$/i,
+	/^USER$/i,
+	/^SHELL$/i,
+	/^TERM$/i,
+	/^TZ$/i,
+	/^NODE_ENV$/i
+];
+function validateEnvVarValue(value) {
+	if (value.includes("\0")) return "Contains null bytes";
+	if (value.length > 32768) return "Value exceeds maximum length";
+	if (/^[A-Za-z0-9+/=]{80,}$/.test(value)) return "Value looks like base64-encoded credential data";
+}
+function matchesAnyPattern$1(value, patterns) {
+	return patterns.some((pattern) => pattern.test(value));
+}
+function sanitizeEnvVars(envVars, options = {}) {
+	const allowed = {};
+	const blocked = [];
+	const warnings = [];
+	const blockedPatterns = [...BLOCKED_ENV_VAR_PATTERNS, ...options.customBlockedPatterns ?? []];
+	const allowedPatterns = [...ALLOWED_ENV_VAR_PATTERNS, ...options.customAllowedPatterns ?? []];
+	for (const [rawKey, value] of Object.entries(envVars)) {
+		const key = rawKey.trim();
+		if (!key) continue;
+		if (matchesAnyPattern$1(key, blockedPatterns)) {
+			blocked.push(key);
+			continue;
+		}
+		if (options.strictMode && !matchesAnyPattern$1(key, allowedPatterns)) {
+			blocked.push(key);
+			continue;
+		}
+		const warning = validateEnvVarValue(value);
+		if (warning) {
+			if (warning === "Contains null bytes") {
+				blocked.push(key);
+				continue;
+			}
+			warnings.push(`${key}: ${warning}`);
+		}
+		allowed[key] = value;
+	}
+	return {
+		allowed,
+		blocked,
+		warnings
+	};
+}
+
+//#endregion
+//#region src/agents/skills/env-overrides.ts
+const log$3 = createSubsystemLogger("env-overrides");
+const activeSkillEnvKeys = /* @__PURE__ */ new Set();
+const SKILL_ALWAYS_BLOCKED_ENV_PATTERNS = [/^OPENSSL_CONF$/i];
+function matchesAnyPattern(value, patterns) {
+	return patterns.some((pattern) => pattern.test(value));
+}
+function isAlwaysBlockedSkillEnvKey(key) {
+	return isDangerousHostEnvVarName(key) || matchesAnyPattern(key, SKILL_ALWAYS_BLOCKED_ENV_PATTERNS);
+}
+function sanitizeSkillEnvOverrides(params) {
+	if (Object.keys(params.overrides).length === 0) return {
+		allowed: {},
+		blocked: [],
+		warnings: []
+	};
+	const result = sanitizeEnvVars(params.overrides);
+	const allowed = {};
+	const blocked = /* @__PURE__ */ new Set();
+	const warnings = [...result.warnings];
+	for (const [key, value] of Object.entries(result.allowed)) {
+		if (isAlwaysBlockedSkillEnvKey(key)) {
+			blocked.add(key);
+			continue;
+		}
+		allowed[key] = value;
+	}
+	for (const key of result.blocked) {
+		if (isAlwaysBlockedSkillEnvKey(key) || !params.allowedSensitiveKeys.has(key)) {
+			blocked.add(key);
+			continue;
+		}
+		const value = params.overrides[key];
+		if (!value) continue;
+		const warning = validateEnvVarValue(value);
+		if (warning) {
+			if (warning === "Contains null bytes") {
+				blocked.add(key);
+				continue;
+			}
+			warnings.push(`${key}: ${warning}`);
+		}
+		allowed[key] = value;
+	}
+	return {
+		allowed,
+		blocked: [...blocked],
+		warnings
+	};
+}
+function applySkillConfigEnvOverrides(params) {
+	const { updates, skillConfig, primaryEnv, requiredEnv, skillKey } = params;
+	const allowedSensitiveKeys = /* @__PURE__ */ new Set();
+	const normalizedPrimaryEnv = primaryEnv?.trim();
+	if (normalizedPrimaryEnv) allowedSensitiveKeys.add(normalizedPrimaryEnv);
+	for (const envName of requiredEnv ?? []) {
+		const trimmedEnv = envName.trim();
+		if (trimmedEnv) allowedSensitiveKeys.add(trimmedEnv);
+	}
+	const pendingOverrides = {};
+	if (skillConfig.env) for (const [rawKey, envValue] of Object.entries(skillConfig.env)) {
+		const envKey = rawKey.trim();
+		if (!envKey || !envValue || process.env[envKey]) continue;
+		pendingOverrides[envKey] = envValue;
+	}
+	const resolvedApiKey = typeof skillConfig.apiKey === "string" ? skillConfig.apiKey.trim() : "";
+	if (normalizedPrimaryEnv && resolvedApiKey && !process.env[normalizedPrimaryEnv]) {
+		if (!pendingOverrides[normalizedPrimaryEnv]) pendingOverrides[normalizedPrimaryEnv] = resolvedApiKey;
+	}
+	const sanitized = sanitizeSkillEnvOverrides({
+		overrides: pendingOverrides,
+		allowedSensitiveKeys
+	});
+	if (sanitized.blocked.length > 0) log$3.warn(`Blocked skill env overrides for ${skillKey}: ${sanitized.blocked.join(", ")}`);
+	if (sanitized.warnings.length > 0) log$3.warn(`Suspicious skill env overrides for ${skillKey}: ${sanitized.warnings.join(", ")}`);
+	for (const [envKey, envValue] of Object.entries(sanitized.allowed)) {
+		if (process.env[envKey]) continue;
+		updates.push({
+			key: envKey,
+			prev: process.env[envKey]
+		});
+		process.env[envKey] = envValue;
+		activeSkillEnvKeys.add(envKey);
+	}
+}
+function createEnvReverter(updates) {
+	return () => {
+		for (const update of updates) {
+			if (update.prev === void 0) delete process.env[update.key];
+			else process.env[update.key] = update.prev;
+			activeSkillEnvKeys.delete(update.key);
+		}
+	};
+}
+function applySkillEnvOverrides(params) {
+	const { skills, config } = params;
+	const updates = [];
+	for (const entry of skills) {
+		const skillKey = resolveSkillKey(entry.skill, entry);
+		const skillConfig = resolveSkillConfig(config, skillKey);
+		if (!skillConfig) continue;
+		applySkillConfigEnvOverrides({
+			updates,
+			skillConfig,
+			primaryEnv: entry.metadata?.primaryEnv,
+			requiredEnv: entry.metadata?.requires?.env,
+			skillKey
+		});
+	}
+	return createEnvReverter(updates);
+}
+function applySkillEnvOverridesFromSnapshot(params) {
+	const { snapshot, config } = params;
+	if (!snapshot) return () => {};
+	const updates = [];
+	for (const skill of snapshot.skills) {
+		const skillConfig = resolveSkillConfig(config, skill.name);
+		if (!skillConfig) continue;
+		applySkillConfigEnvOverrides({
+			updates,
+			skillConfig,
+			primaryEnv: skill.primaryEnv,
+			requiredEnv: skill.requiredEnv,
+			skillKey: skill.name
+		});
+	}
+	return createEnvReverter(updates);
+}
+
+//#endregion
+//#region src/agents/skills/bundled-dir.ts
+function looksLikeSkillsDir(dir) {
+	try {
+		const entries = fs.readdirSync(dir, { withFileTypes: true });
+		for (const entry of entries) {
+			if (entry.name.startsWith(".")) continue;
+			const fullPath = path.join(dir, entry.name);
+			if (entry.isFile() && entry.name.endsWith(".md")) return true;
+			if (entry.isDirectory()) {
+				if (fs.existsSync(path.join(fullPath, "SKILL.md"))) return true;
+			}
+		}
+	} catch {
+		return false;
+	}
+	return false;
+}
+function resolveBundledSkillsDir(opts = {}) {
+	const override = process.env.FASED_BUNDLED_SKILLS_DIR?.trim();
+	if (override) return override;
+	try {
+		const execPath = opts.execPath ?? process.execPath;
+		const execDir = path.dirname(execPath);
+		const sibling = path.join(execDir, "skills");
+		if (fs.existsSync(sibling)) return sibling;
+	} catch {}
+	try {
+		const moduleUrl = opts.moduleUrl ?? import.meta.url;
+		const moduleDir = path.dirname(fileURLToPath(moduleUrl));
+		const packageRoot = resolveFasedAgentPackageRootSync({
+			argv1: opts.argv1 ?? process.argv[1],
+			moduleUrl,
+			cwd: opts.cwd ?? process.cwd()
+		});
+		if (packageRoot) {
+			const candidate = path.join(packageRoot, "skills");
+			if (looksLikeSkillsDir(candidate)) return candidate;
+		}
+		let current = moduleDir;
+		for (let depth = 0; depth < 6; depth += 1) {
+			const candidate = path.join(current, "skills");
+			if (looksLikeSkillsDir(candidate)) return candidate;
+			const next = path.dirname(current);
+			if (next === current) break;
+			current = next;
+		}
+	} catch {}
+}
+
+//#endregion
+//#region src/agents/skills/plugin-skills.ts
+const log$2 = createSubsystemLogger("skills");
+function resolvePluginSkillDirs(params) {
+	const workspaceDir = (params.workspaceDir ?? "").trim();
+	if (!workspaceDir) return [];
+	const registry = loadPluginManifestRegistry({
+		workspaceDir,
+		config: params.config
+	});
+	if (registry.plugins.length === 0) return [];
+	const normalizedPlugins = normalizePluginsConfig(params.config?.plugins);
+	const acpEnabled = params.config?.acp?.enabled !== false;
+	const memorySlot = normalizedPlugins.slots.memory;
+	let selectedMemoryPluginId = null;
+	const seen = /* @__PURE__ */ new Set();
+	const resolved = [];
+	for (const record of registry.plugins) {
+		if (!record.skills || record.skills.length === 0) continue;
+		if (!resolveEffectiveEnableState({
+			id: record.id,
+			origin: record.origin,
+			config: normalizedPlugins,
+			rootConfig: params.config
+		}).enabled) continue;
+		if (!acpEnabled && record.id === "acpx") continue;
+		const memoryDecision = resolveMemorySlotDecision({
+			id: record.id,
+			kind: record.kind,
+			slot: memorySlot,
+			selectedId: selectedMemoryPluginId
+		});
+		if (!memoryDecision.enabled) continue;
+		if (memoryDecision.selected && record.kind === "memory") selectedMemoryPluginId = record.id;
+		for (const raw of record.skills) {
+			const trimmed = raw.trim();
+			if (!trimmed) continue;
+			const candidate = path.resolve(record.rootDir, trimmed);
+			if (!fs.existsSync(candidate)) {
+				log$2.warn(`plugin skill path not found (${record.id}): ${candidate}`);
+				continue;
+			}
+			if (seen.has(candidate)) continue;
+			seen.add(candidate);
+			resolved.push(candidate);
+		}
+	}
+	return resolved;
+}
+
+//#endregion
+//#region src/agents/skills/serialize.ts
+const SKILLS_SYNC_QUEUE = /* @__PURE__ */ new Map();
+async function serializeByKey(key, task) {
+	const next = (SKILLS_SYNC_QUEUE.get(key) ?? Promise.resolve()).then(task, task);
+	SKILLS_SYNC_QUEUE.set(key, next);
+	try {
+		return await next;
+	} finally {
+		if (SKILLS_SYNC_QUEUE.get(key) === next) SKILLS_SYNC_QUEUE.delete(key);
+	}
+}
+
+//#endregion
+//#region src/agents/skills/workspace.ts
+const fsp = fs.promises;
+const skillsLogger = createSubsystemLogger("skills");
+const skillCommandDebugOnce = /* @__PURE__ */ new Set();
+/**
+* Replace the user's home directory prefix with `~` in skill file paths
+* to reduce system prompt token usage. Models understand `~` expansion,
+* and the read tool resolves `~` to the home directory.
+*
+* Example: `/Users/alice/.bun/.../skills/github/SKILL.md`
+*       → `~/.bun/.../skills/github/SKILL.md`
+*
+* Saves ~5–6 tokens per skill path × N skills ≈ 400–600 tokens total.
+*/
+function compactSkillPaths(skills) {
+	const home = os.homedir();
+	if (!home) return skills;
+	const prefix = home.endsWith(path.sep) ? home : home + path.sep;
+	return skills.map((s) => ({
+		...s,
+		filePath: s.filePath.startsWith(prefix) ? "~/" + s.filePath.slice(prefix.length) : s.filePath
+	}));
+}
+function debugSkillCommandOnce(messageKey, message, meta) {
+	if (skillCommandDebugOnce.has(messageKey)) return;
+	skillCommandDebugOnce.add(messageKey);
+	skillsLogger.debug(message, meta);
+}
+function filterSkillEntries(entries, config, skillFilter, eligibility) {
+	let filtered = entries.filter((entry) => shouldIncludeSkill({
+		entry,
+		config,
+		eligibility
+	}));
+	if (skillFilter !== void 0) {
+		const normalized = normalizeSkillFilter(skillFilter) ?? [];
+		const label = normalized.length > 0 ? normalized.join(", ") : "(none)";
+		skillsLogger.debug(`Applying skill filter: ${label}`);
+		filtered = normalized.length > 0 ? filtered.filter((entry) => normalized.includes(entry.skill.name) || normalized.includes(resolveSkillKey(entry.skill, entry))) : [];
+		skillsLogger.debug(`After skill filter: ${filtered.map((entry) => entry.skill.name).join(", ") || "(none)"}`);
+	}
+	return filtered;
+}
+function isPathWithinRoot(candidatePath, rootPath) {
+	let candidate = path.resolve(candidatePath);
+	let root = path.resolve(rootPath);
+	try {
+		candidate = fs.realpathSync.native(candidate);
+	} catch {}
+	try {
+		root = fs.realpathSync.native(root);
+	} catch {}
+	const relative = path.relative(root, candidate);
+	return relative === "" || !relative.startsWith("..") && !path.isAbsolute(relative);
+}
+const SKILL_COMMAND_MAX_LENGTH = 32;
+const SKILL_COMMAND_FALLBACK = "skill";
+const SKILL_COMMAND_DESCRIPTION_MAX_LENGTH = 100;
+const DEFAULT_MAX_CANDIDATES_PER_ROOT = 300;
+const DEFAULT_MAX_SKILLS_LOADED_PER_SOURCE = 200;
+const DEFAULT_MAX_SKILLS_IN_PROMPT = 150;
+const DEFAULT_MAX_SKILLS_PROMPT_CHARS = 3e4;
+const DEFAULT_MAX_SKILL_FILE_BYTES = 256e3;
+function sanitizeSkillCommandName(raw) {
+	return raw.toLowerCase().replace(/[^a-z0-9_]+/g, "_").replace(/_+/g, "_").replace(/^_+|_+$/g, "").slice(0, SKILL_COMMAND_MAX_LENGTH) || SKILL_COMMAND_FALLBACK;
+}
+function resolveUniqueSkillCommandName(base, used) {
+	const normalizedBase = base.toLowerCase();
+	if (!used.has(normalizedBase)) return base;
+	for (let index = 2; index < 1e3; index += 1) {
+		const suffix = `_${index}`;
+		const maxBaseLength = Math.max(1, SKILL_COMMAND_MAX_LENGTH - suffix.length);
+		const candidate = `${base.slice(0, maxBaseLength)}${suffix}`;
+		const candidateKey = candidate.toLowerCase();
+		if (!used.has(candidateKey)) return candidate;
+	}
+	return `${base.slice(0, Math.max(1, SKILL_COMMAND_MAX_LENGTH - 2))}_x`;
+}
+function resolveSkillsLimits(config) {
+	const limits = config?.skills?.limits;
+	return {
+		maxCandidatesPerRoot: limits?.maxCandidatesPerRoot ?? DEFAULT_MAX_CANDIDATES_PER_ROOT,
+		maxSkillsLoadedPerSource: limits?.maxSkillsLoadedPerSource ?? DEFAULT_MAX_SKILLS_LOADED_PER_SOURCE,
+		maxSkillsInPrompt: limits?.maxSkillsInPrompt ?? DEFAULT_MAX_SKILLS_IN_PROMPT,
+		maxSkillsPromptChars: limits?.maxSkillsPromptChars ?? DEFAULT_MAX_SKILLS_PROMPT_CHARS,
+		maxSkillFileBytes: limits?.maxSkillFileBytes ?? DEFAULT_MAX_SKILL_FILE_BYTES
+	};
+}
+function listChildDirectories(dir) {
+	try {
+		const entries = fs.readdirSync(dir, { withFileTypes: true });
+		const dirs = [];
+		for (const entry of entries) {
+			if (entry.name.startsWith(".")) continue;
+			if (entry.name === "node_modules") continue;
+			const fullPath = path.join(dir, entry.name);
+			if (entry.isDirectory()) {
+				dirs.push(entry.name);
+				continue;
+			}
+			if (entry.isSymbolicLink()) try {
+				if (fs.statSync(fullPath).isDirectory()) dirs.push(entry.name);
+			} catch {}
+		}
+		return dirs;
+	} catch {
+		return [];
+	}
+}
+function resolveNestedSkillsRoot(dir, opts) {
+	const nested = path.join(dir, "skills");
+	try {
+		if (!fs.existsSync(nested) || !fs.statSync(nested).isDirectory()) return { baseDir: dir };
+	} catch {
+		return { baseDir: dir };
+	}
+	const nestedDirs = listChildDirectories(nested);
+	const scanLimit = Math.max(0, opts?.maxEntriesToScan ?? 100);
+	const toScan = scanLimit === 0 ? [] : nestedDirs.slice(0, Math.min(nestedDirs.length, scanLimit));
+	for (const name of toScan) {
+		const skillMd = path.join(nested, name, "SKILL.md");
+		if (fs.existsSync(skillMd)) return {
+			baseDir: nested,
+			note: `Detected nested skills root at ${nested}`
+		};
+	}
+	return { baseDir: dir };
+}
+function unwrapLoadedSkills(loaded) {
+	if (Array.isArray(loaded)) return loaded;
+	if (loaded && typeof loaded === "object" && "skills" in loaded) {
+		const skills = loaded.skills;
+		if (Array.isArray(skills)) return skills;
+	}
+	return [];
+}
+function loadSkillEntries(workspaceDir, opts) {
+	const limits = resolveSkillsLimits(opts?.config);
+	const loadSkills = (params) => {
+		const baseDir = resolveNestedSkillsRoot(params.dir, { maxEntriesToScan: limits.maxCandidatesPerRoot }).baseDir;
+		const rootSkillMd = path.join(baseDir, "SKILL.md");
+		if (fs.existsSync(rootSkillMd)) {
+			try {
+				const size = fs.statSync(rootSkillMd).size;
+				if (size > limits.maxSkillFileBytes) {
+					skillsLogger.warn("Skipping skills root due to oversized SKILL.md.", {
+						dir: baseDir,
+						filePath: rootSkillMd,
+						size,
+						maxSkillFileBytes: limits.maxSkillFileBytes
+					});
+					return [];
+				}
+			} catch {
+				return [];
+			}
+			return unwrapLoadedSkills(loadSkillsFromDir({
+				dir: baseDir,
+				source: params.source
+			}));
+		}
+		const childDirs = listChildDirectories(baseDir);
+		const suspicious = childDirs.length > limits.maxCandidatesPerRoot;
+		const maxCandidates = Math.max(0, limits.maxSkillsLoadedPerSource);
+		const limitedChildren = childDirs.slice().sort().slice(0, maxCandidates);
+		if (suspicious) skillsLogger.warn("Skills root looks suspiciously large, truncating discovery.", {
+			dir: params.dir,
+			baseDir,
+			childDirCount: childDirs.length,
+			maxCandidatesPerRoot: limits.maxCandidatesPerRoot,
+			maxSkillsLoadedPerSource: limits.maxSkillsLoadedPerSource
+		});
+		else if (childDirs.length > maxCandidates) skillsLogger.warn("Skills root has many entries, truncating discovery.", {
+			dir: params.dir,
+			baseDir,
+			childDirCount: childDirs.length,
+			maxSkillsLoadedPerSource: limits.maxSkillsLoadedPerSource
+		});
+		const loadedSkills = [];
+		for (const name of limitedChildren) {
+			const skillDir = path.join(baseDir, name);
+			const skillMd = path.join(skillDir, "SKILL.md");
+			if (!fs.existsSync(skillMd)) continue;
+			try {
+				const size = fs.statSync(skillMd).size;
+				if (size > limits.maxSkillFileBytes) {
+					skillsLogger.warn("Skipping skill due to oversized SKILL.md.", {
+						skill: name,
+						filePath: skillMd,
+						size,
+						maxSkillFileBytes: limits.maxSkillFileBytes
+					});
+					continue;
+				}
+			} catch {
+				continue;
+			}
+			const loaded = loadSkillsFromDir({
+				dir: skillDir,
+				source: params.source
+			});
+			loadedSkills.push(...unwrapLoadedSkills(loaded));
+			if (loadedSkills.length >= limits.maxSkillsLoadedPerSource) break;
+		}
+		if (loadedSkills.length > limits.maxSkillsLoadedPerSource) return loadedSkills.slice().sort((a, b) => a.name.localeCompare(b.name)).slice(0, limits.maxSkillsLoadedPerSource);
+		return loadedSkills;
+	};
+	const managedSkillsDir = opts?.managedSkillsDir ?? path.join(CONFIG_DIR, "skills");
+	const workspaceSkillsDir = path.resolve(workspaceDir, "skills");
+	const bundledSkillsDir = opts?.bundledSkillsDir ?? resolveBundledSkillsDir();
+	const extraDirs = (opts?.config?.skills?.load?.extraDirs ?? []).map((d) => typeof d === "string" ? d.trim() : "").filter(Boolean);
+	const pluginSkillDirs = resolvePluginSkillDirs({
+		workspaceDir,
+		config: opts?.config
+	});
+	const mergedExtraDirs = [...extraDirs, ...pluginSkillDirs];
+	const bundledSkills = bundledSkillsDir ? loadSkills({
+		dir: bundledSkillsDir,
+		source: "fased-bundled"
+	}) : [];
+	const extraSkills = mergedExtraDirs.flatMap((dir) => {
+		return loadSkills({
+			dir: resolveUserPath(dir),
+			source: "fased-extra"
+		});
+	});
+	const managedSkills = loadSkills({
+		dir: managedSkillsDir,
+		source: "fased-managed"
+	});
+	const personalAgentsSkills = loadSkills({
+		dir: path.resolve(os.homedir(), ".agents", "skills"),
+		source: "agents-skills-personal"
+	});
+	const projectAgentsSkills = loadSkills({
+		dir: path.resolve(workspaceDir, ".agents", "skills"),
+		source: "agents-skills-project"
+	});
+	const workspaceSkills = loadSkills({
+		dir: workspaceSkillsDir,
+		source: "fased-workspace"
+	});
+	const merged = /* @__PURE__ */ new Map();
+	for (const skill of extraSkills) merged.set(skill.name, skill);
+	for (const skill of bundledSkills) merged.set(skill.name, skill);
+	for (const skill of managedSkills) merged.set(skill.name, skill);
+	for (const skill of personalAgentsSkills) merged.set(skill.name, skill);
+	for (const skill of projectAgentsSkills) merged.set(skill.name, skill);
+	for (const skill of workspaceSkills) merged.set(skill.name, skill);
+	return Array.from(merged.values()).map((skill) => {
+		let frontmatter = {};
+		try {
+			frontmatter = parseFrontmatter(fs.readFileSync(skill.filePath, "utf-8"));
+		} catch {}
+		return {
+			skill,
+			frontmatter,
+			metadata: resolveFasedAgentMetadata(frontmatter),
+			invocation: resolveSkillInvocationPolicy(frontmatter)
+		};
+	});
+}
+function applySkillsPromptLimits(params) {
+	const limits = resolveSkillsLimits(params.config);
+	const total = params.skills.length;
+	const byCount = params.skills.slice(0, Math.max(0, limits.maxSkillsInPrompt));
+	let skillsForPrompt = byCount;
+	let truncated = total > byCount.length;
+	let truncatedReason = truncated ? "count" : null;
+	const fits = (skills) => {
+		return formatSkillsForPrompt(skills).length <= limits.maxSkillsPromptChars;
+	};
+	if (!fits(skillsForPrompt)) {
+		let lo = 0;
+		let hi = skillsForPrompt.length;
+		while (lo < hi) {
+			const mid = Math.ceil((lo + hi) / 2);
+			if (fits(skillsForPrompt.slice(0, mid))) lo = mid;
+			else hi = mid - 1;
+		}
+		skillsForPrompt = skillsForPrompt.slice(0, lo);
+		truncated = true;
+		truncatedReason = "chars";
+	}
+	return {
+		skillsForPrompt,
+		truncated,
+		truncatedReason
+	};
+}
+function buildWorkspaceSkillSnapshot(workspaceDir, opts) {
+	const { eligible, prompt, resolvedSkills } = resolveWorkspaceSkillPromptState(workspaceDir, opts);
+	const skillFilter = resolveEffectiveSkillFilter(opts);
+	return {
+		prompt,
+		skills: eligible.map((entry) => ({
+			name: entry.skill.name,
+			primaryEnv: entry.metadata?.primaryEnv,
+			requiredEnv: entry.metadata?.requires?.env?.slice()
+		})),
+		...skillFilter === void 0 ? {} : { skillFilter },
+		resolvedSkills,
+		version: opts?.snapshotVersion
+	};
+}
+function buildWorkspaceSkillsPrompt(workspaceDir, opts) {
+	return resolveWorkspaceSkillPromptState(workspaceDir, opts).prompt;
+}
+function resolveEffectiveSkillFilter(opts) {
+	if (opts?.skillFilter !== void 0) return normalizeSkillFilter(opts.skillFilter) ?? [];
+	if (opts?.agentId !== void 0) return resolveEffectiveAgentSkillFilter(opts.config, opts.agentId);
+}
+function resolveWorkspaceSkillPromptState(workspaceDir, opts) {
+	const eligible = filterSkillEntries(opts?.entries ?? loadSkillEntries(workspaceDir, opts), opts?.config, resolveEffectiveSkillFilter(opts), opts?.eligibility);
+	const promptEntries = eligible.filter((entry) => entry.invocation?.disableModelInvocation !== true);
+	const remoteNote = opts?.eligibility?.remote?.note?.trim();
+	const resolvedSkills = promptEntries.map((entry) => entry.skill);
+	const { skillsForPrompt, truncated } = applySkillsPromptLimits({
+		skills: resolvedSkills,
+		config: opts?.config
+	});
+	return {
+		eligible,
+		prompt: [
+			remoteNote,
+			truncated ? `⚠️ Skills truncated: included ${skillsForPrompt.length} of ${resolvedSkills.length}. Run \`fased skills check\` to audit.` : "",
+			formatSkillsForPrompt(compactSkillPaths(skillsForPrompt))
+		].filter(Boolean).join("\n"),
+		resolvedSkills
+	};
+}
+function resolveSkillsPromptForRun(params) {
+	const snapshotPrompt = params.skillsSnapshot?.prompt?.trim();
+	if (snapshotPrompt) return snapshotPrompt;
+	if (params.entries && params.entries.length > 0) {
+		const prompt = buildWorkspaceSkillsPrompt(params.workspaceDir, {
+			entries: params.entries,
+			config: params.config,
+			agentId: params.agentId
+		});
+		return prompt.trim() ? prompt : "";
+	}
+	return "";
+}
+function loadWorkspaceSkillEntries(workspaceDir, opts) {
+	return loadSkillEntries(workspaceDir, opts);
+}
+function resolveUniqueSyncedSkillDirName(base, used) {
+	if (!used.has(base)) {
+		used.add(base);
+		return base;
+	}
+	for (let index = 2; index < 1e4; index += 1) {
+		const candidate = `${base}-${index}`;
+		if (!used.has(candidate)) {
+			used.add(candidate);
+			return candidate;
+		}
+	}
+	let fallbackIndex = 1e4;
+	let fallback = `${base}-${fallbackIndex}`;
+	while (used.has(fallback)) {
+		fallbackIndex += 1;
+		fallback = `${base}-${fallbackIndex}`;
+	}
+	used.add(fallback);
+	return fallback;
+}
+function resolveSyncedSkillDestinationPath(params) {
+	const sourceDirName = path.basename(params.entry.skill.baseDir).trim();
+	if (!sourceDirName || sourceDirName === "." || sourceDirName === "..") return null;
+	return resolveSandboxPath({
+		filePath: resolveUniqueSyncedSkillDirName(sourceDirName, params.usedDirNames),
+		cwd: params.targetSkillsDir,
+		root: params.targetSkillsDir
+	}).resolved;
+}
+async function syncSkillsToWorkspace(params) {
+	const sourceDir = resolveUserPath(params.sourceWorkspaceDir);
+	const targetDir = resolveUserPath(params.targetWorkspaceDir);
+	if (sourceDir === targetDir) return;
+	await serializeByKey(`syncSkills:${targetDir}`, async () => {
+		const targetSkillsDir = path.join(targetDir, "skills");
+		const entries = filterSkillEntries(loadSkillEntries(sourceDir, {
+			config: params.config,
+			managedSkillsDir: params.managedSkillsDir,
+			bundledSkillsDir: params.bundledSkillsDir
+		}), params.config, resolveEffectiveSkillFilter(params), params.eligibility).filter((entry) => isPathWithinRoot(entry.skill.baseDir, sourceDir));
+		await fsp.rm(targetSkillsDir, {
+			recursive: true,
+			force: true
+		});
+		await fsp.mkdir(targetSkillsDir, { recursive: true });
+		const usedDirNames = /* @__PURE__ */ new Set();
+		for (const entry of entries) {
+			let dest = null;
+			try {
+				dest = resolveSyncedSkillDestinationPath({
+					targetSkillsDir,
+					entry,
+					usedDirNames
+				});
+			} catch (error) {
+				const message = error instanceof Error ? error.message : JSON.stringify(error);
+				skillsLogger.warn(`Failed to resolve safe destination for ${entry.skill.name}: ${message}`);
+				continue;
+			}
+			if (!dest) {
+				skillsLogger.warn(`Failed to resolve safe destination for ${entry.skill.name}: invalid source directory name`);
+				continue;
+			}
+			try {
+				await fsp.cp(entry.skill.baseDir, dest, {
+					recursive: true,
+					force: true,
+					filter: (source) => {
+						const base = path.basename(source);
+						return base !== ".git" && base !== "node_modules";
+					}
+				});
+			} catch (error) {
+				const message = error instanceof Error ? error.message : JSON.stringify(error);
+				skillsLogger.warn(`Failed to copy ${entry.skill.name} to sandbox: ${message}`);
+			}
+		}
+	});
+}
+function buildWorkspaceSkillCommandSpecs(workspaceDir, opts) {
+	const userInvocable = filterSkillEntries(opts?.entries ?? loadSkillEntries(workspaceDir, opts), opts?.config, resolveEffectiveSkillFilter(opts), opts?.eligibility).filter((entry) => entry.invocation?.userInvocable !== false);
+	const used = /* @__PURE__ */ new Set();
+	for (const reserved of opts?.reservedNames ?? []) used.add(reserved.toLowerCase());
+	const specs = [];
+	for (const entry of userInvocable) {
+		const rawName = entry.skill.name;
+		const base = sanitizeSkillCommandName(rawName);
+		if (base !== rawName) debugSkillCommandOnce(`sanitize:${rawName}:${base}`, `Sanitized skill command name "${rawName}" to "/${base}".`, {
+			rawName,
+			sanitized: `/${base}`
+		});
+		const unique = resolveUniqueSkillCommandName(base, used);
+		if (unique !== base) debugSkillCommandOnce(`dedupe:${rawName}:${unique}`, `De-duplicated skill command name for "${rawName}" to "/${unique}".`, {
+			rawName,
+			deduped: `/${unique}`
+		});
+		used.add(unique.toLowerCase());
+		const rawDescription = entry.skill.description?.trim() || rawName;
+		const description = rawDescription.length > SKILL_COMMAND_DESCRIPTION_MAX_LENGTH ? rawDescription.slice(0, SKILL_COMMAND_DESCRIPTION_MAX_LENGTH - 1) + "…" : rawDescription;
+		const dispatch = (() => {
+			const kindRaw = (entry.frontmatter?.["command-dispatch"] ?? entry.frontmatter?.["command_dispatch"] ?? "").trim().toLowerCase();
+			if (!kindRaw) return;
+			if (kindRaw !== "tool") return;
+			const toolName = (entry.frontmatter?.["command-tool"] ?? entry.frontmatter?.["command_tool"] ?? "").trim();
+			if (!toolName) {
+				debugSkillCommandOnce(`dispatch:missingTool:${rawName}`, `Skill command "/${unique}" requested tool dispatch but did not provide command-tool. Ignoring dispatch.`, {
+					skillName: rawName,
+					command: unique
+				});
+				return;
+			}
+			const argModeRaw = (entry.frontmatter?.["command-arg-mode"] ?? entry.frontmatter?.["command_arg_mode"] ?? "").trim().toLowerCase();
+			if (!(!argModeRaw || argModeRaw === "raw" ? "raw" : null)) debugSkillCommandOnce(`dispatch:badArgMode:${rawName}:${argModeRaw}`, `Skill command "/${unique}" requested tool dispatch but has unknown command-arg-mode. Falling back to raw.`, {
+				skillName: rawName,
+				command: unique,
+				argMode: argModeRaw
+			});
+			return {
+				kind: "tool",
+				toolName,
+				argMode: "raw"
+			};
+		})();
+		specs.push({
+			name: unique,
+			skillName: rawName,
+			description,
+			...dispatch ? { dispatch } : {}
+		});
+	}
+	return specs;
+}
+
+//#endregion
+//#region src/agents/skills/refresh-state.ts
+const listeners = /* @__PURE__ */ new Set();
+const workspaceVersions = /* @__PURE__ */ new Map();
+let globalVersion = 0;
+let listenerErrorHandler;
+function bumpVersion(current) {
+	const now = Date.now();
+	return now <= current ? current + 1 : now;
+}
+function emit(event) {
+	for (const listener of listeners) try {
+		listener(event);
+	} catch (err) {
+		listenerErrorHandler?.(err);
+	}
+}
+function setSkillsChangeListenerErrorHandler(handler) {
+	listenerErrorHandler = handler;
+}
+function bumpSkillsSnapshotVersion(params) {
+	const reason = params?.reason ?? "manual";
+	const changedPath = params?.changedPath;
+	if (params?.workspaceDir) {
+		const next = bumpVersion(workspaceVersions.get(params.workspaceDir) ?? 0);
+		workspaceVersions.set(params.workspaceDir, next);
+		emit({
+			workspaceDir: params.workspaceDir,
+			reason,
+			changedPath
+		});
+		return next;
+	}
+	globalVersion = bumpVersion(globalVersion);
+	emit({
+		reason,
+		changedPath
+	});
+	return globalVersion;
+}
+function getSkillsSnapshotVersion(workspaceDir) {
+	if (!workspaceDir) return globalVersion;
+	const local = workspaceVersions.get(workspaceDir) ?? 0;
+	return Math.max(globalVersion, local);
+}
+
+//#endregion
+//#region src/agents/skills/refresh.ts
+const log$1 = createSubsystemLogger("gateway/skills");
+const watchers = /* @__PURE__ */ new Map();
+setSkillsChangeListenerErrorHandler((err) => {
+	log$1.warn(`skills change listener failed: ${String(err)}`);
+});
+const DEFAULT_SKILLS_WATCH_IGNORED = [
+	/(^|[\\/])\.git([\\/]|$)/,
+	/(^|[\\/])node_modules([\\/]|$)/,
+	/(^|[\\/])dist([\\/]|$)/,
+	/(^|[\\/])\.venv([\\/]|$)/,
+	/(^|[\\/])venv([\\/]|$)/,
+	/(^|[\\/])__pycache__([\\/]|$)/,
+	/(^|[\\/])\.mypy_cache([\\/]|$)/,
+	/(^|[\\/])\.pytest_cache([\\/]|$)/,
+	/(^|[\\/])build([\\/]|$)/,
+	/(^|[\\/])\.cache([\\/]|$)/
+];
+function resolveWatchPaths(workspaceDir, config) {
+	const paths = [];
+	if (workspaceDir.trim()) {
+		paths.push(path.join(workspaceDir, "skills"));
+		paths.push(path.join(workspaceDir, ".agents", "skills"));
+	}
+	paths.push(path.join(CONFIG_DIR, "skills"));
+	paths.push(path.join(os.homedir(), ".agents", "skills"));
+	const extraDirs = (config?.skills?.load?.extraDirs ?? []).map((d) => typeof d === "string" ? d.trim() : "").filter(Boolean).map((dir) => resolveUserPath(dir));
+	paths.push(...extraDirs);
+	const pluginSkillDirs = resolvePluginSkillDirs({
+		workspaceDir,
+		config
+	});
+	paths.push(...pluginSkillDirs);
+	return paths;
+}
+function toWatchGlobRoot(raw) {
+	return raw.replaceAll("\\", "/").replace(/\/+$/, "");
+}
+function resolveWatchTargets(workspaceDir, config) {
+	const targets = /* @__PURE__ */ new Set();
+	for (const root of resolveWatchPaths(workspaceDir, config)) {
+		const globRoot = toWatchGlobRoot(root);
+		targets.add(`${globRoot}/SKILL.md`);
+		targets.add(`${globRoot}/*/SKILL.md`);
+	}
+	return Array.from(targets).toSorted();
+}
+function ensureSkillsWatcher(params) {
+	const workspaceDir = params.workspaceDir.trim();
+	if (!workspaceDir) return;
+	const watchEnabled = params.config?.skills?.load?.watch !== false;
+	const debounceMsRaw = params.config?.skills?.load?.watchDebounceMs;
+	const debounceMs = typeof debounceMsRaw === "number" && Number.isFinite(debounceMsRaw) ? Math.max(0, debounceMsRaw) : 250;
+	const existing = watchers.get(workspaceDir);
+	if (!watchEnabled) {
+		if (existing) {
+			watchers.delete(workspaceDir);
+			if (existing.timer) clearTimeout(existing.timer);
+			existing.watcher.close().catch(() => {});
+		}
+		return;
+	}
+	const watchTargets = resolveWatchTargets(workspaceDir, params.config);
+	const pathsKey = watchTargets.join("|");
+	if (existing && existing.pathsKey === pathsKey && existing.debounceMs === debounceMs) return;
+	if (existing) {
+		watchers.delete(workspaceDir);
+		if (existing.timer) clearTimeout(existing.timer);
+		existing.watcher.close().catch(() => {});
+	}
+	const watcher = chokidar.watch(watchTargets, {
+		ignoreInitial: true,
+		awaitWriteFinish: {
+			stabilityThreshold: debounceMs,
+			pollInterval: 100
+		},
+		ignored: DEFAULT_SKILLS_WATCH_IGNORED
+	});
+	const state = {
+		watcher,
+		pathsKey,
+		debounceMs
+	};
+	const schedule = (changedPath) => {
+		state.pendingPath = changedPath ?? state.pendingPath;
+		if (state.timer) clearTimeout(state.timer);
+		state.timer = setTimeout(() => {
+			const pendingPath = state.pendingPath;
+			state.pendingPath = void 0;
+			state.timer = void 0;
+			bumpSkillsSnapshotVersion({
+				workspaceDir,
+				reason: "watch",
+				changedPath: pendingPath
+			});
+		}, debounceMs);
+	};
+	watcher.on("add", (p) => schedule(p));
+	watcher.on("change", (p) => schedule(p));
+	watcher.on("unlink", (p) => schedule(p));
+	watcher.on("error", (err) => {
+		log$1.warn(`skills watcher error (${workspaceDir}): ${String(err)}`);
+	});
+	watchers.set(workspaceDir, state);
+}
+
+//#endregion
+//#region src/infra/node-pairing.ts
+const PENDING_TTL_MS = 300 * 1e3;
+const withLock = createAsyncLock();
+
+//#endregion
+//#region src/infra/skills-remote.ts
+const log = createSubsystemLogger("gateway/skills-remote");
+const remoteNodes = /* @__PURE__ */ new Map();
+function isMacPlatform(platform, deviceFamily) {
+	const platformNorm = String(platform ?? "").trim().toLowerCase();
+	const familyNorm = String(deviceFamily ?? "").trim().toLowerCase();
+	if (platformNorm.includes("mac")) return true;
+	if (platformNorm.includes("darwin")) return true;
+	if (familyNorm === "mac") return true;
+	return false;
+}
+function supportsSystemRun(commands) {
+	return Array.isArray(commands) && commands.includes("system.run");
+}
+function getRemoteSkillEligibility() {
+	const macNodes = [...remoteNodes.values()].filter((node) => isMacPlatform(node.platform, node.deviceFamily) && supportsSystemRun(node.commands));
+	if (macNodes.length === 0) return;
+	const bins = /* @__PURE__ */ new Set();
+	for (const node of macNodes) for (const bin of node.bins) bins.add(bin);
+	const labels = macNodes.map((node) => node.displayName ?? node.nodeId).filter(Boolean);
+	return {
+		platforms: ["darwin"],
+		hasBin: (bin) => bins.has(bin),
+		hasAnyBin: (required) => required.some((bin) => bins.has(bin)),
+		note: labels.length > 0 ? `Remote macOS node available (${labels.join(", ")}). Run macOS-only skills via nodes.run on that node.` : "Remote macOS node available. Run macOS-only skills via nodes.run on that node."
+	};
+}
+
+//#endregion
+//#region src/auto-reply/skill-commands.ts
+var skill_commands_exports = /* @__PURE__ */ __exportAll({
+	listReservedChatSlashCommandNames: () => listReservedChatSlashCommandNames,
+	listSkillCommandsForAgents: () => listSkillCommandsForAgents,
+	listSkillCommandsForWorkspace: () => listSkillCommandsForWorkspace,
+	resolveSkillCommandInvocation: () => resolveSkillCommandInvocation
+});
+function listReservedChatSlashCommandNames(extraNames = []) {
+	const reserved = /* @__PURE__ */ new Set();
+	for (const command of listChatCommands()) {
+		if (command.nativeName) reserved.add(command.nativeName.toLowerCase());
+		for (const alias of command.textAliases) {
+			const trimmed = alias.trim();
+			if (!trimmed.startsWith("/")) continue;
+			reserved.add(trimmed.slice(1).toLowerCase());
+		}
+	}
+	for (const name of extraNames) {
+		const trimmed = name.trim().toLowerCase();
+		if (trimmed) reserved.add(trimmed);
+	}
+	return reserved;
+}
+function listSkillCommandsForWorkspace(params) {
+	return buildWorkspaceSkillCommandSpecs(params.workspaceDir, {
+		config: params.cfg,
+		skillFilter: params.skillFilter,
+		eligibility: { remote: getRemoteSkillEligibility() },
+		reservedNames: listReservedChatSlashCommandNames()
+	});
+}
+function listSkillCommandsForAgents(params) {
+	const used = listReservedChatSlashCommandNames();
+	const entries = [];
+	const agentIds = params.agentIds ?? listAgentIds(params.cfg);
+	const visitedDirs = /* @__PURE__ */ new Set();
+	for (const agentId of agentIds) {
+		const workspaceDir = resolveAgentWorkspaceDir(params.cfg, agentId);
+		if (!fs.existsSync(workspaceDir)) continue;
+		const canonicalDir = fs.realpathSync(workspaceDir);
+		if (visitedDirs.has(canonicalDir)) continue;
+		visitedDirs.add(canonicalDir);
+		const commands = buildWorkspaceSkillCommandSpecs(workspaceDir, {
+			config: params.cfg,
+			eligibility: { remote: getRemoteSkillEligibility() },
+			reservedNames: used
+		});
+		for (const command of commands) {
+			used.add(command.name.toLowerCase());
+			entries.push(command);
+		}
+	}
+	return entries;
+}
+function normalizeSkillCommandLookup(value) {
+	return value.trim().toLowerCase().replace(/[\s_]+/g, "-");
+}
+function findSkillCommand(skillCommands, rawName) {
+	const trimmed = rawName.trim();
+	if (!trimmed) return;
+	const lowered = trimmed.toLowerCase();
+	const normalized = normalizeSkillCommandLookup(trimmed);
+	return skillCommands.find((entry) => {
+		if (entry.name.toLowerCase() === lowered) return true;
+		if (entry.skillName.toLowerCase() === lowered) return true;
+		return normalizeSkillCommandLookup(entry.name) === normalized || normalizeSkillCommandLookup(entry.skillName) === normalized;
+	});
+}
+function resolveSkillCommandInvocation(params) {
+	const trimmed = params.commandBodyNormalized.trim();
+	if (!trimmed.startsWith("/")) return null;
+	const match = trimmed.match(/^\/([^\s]+)(?:\s+([\s\S]+))?$/);
+	if (!match) return null;
+	const commandName = match[1]?.trim().toLowerCase();
+	if (!commandName) return null;
+	if (commandName === "skill") {
+		const remainder = match[2]?.trim();
+		if (!remainder) return null;
+		const skillMatch = remainder.match(/^([^\s]+)(?:\s+([\s\S]+))?$/);
+		if (!skillMatch) return null;
+		const skillCommand = findSkillCommand(params.skillCommands, skillMatch[1] ?? "");
+		if (!skillCommand) return null;
+		return {
+			command: skillCommand,
+			args: skillMatch[2]?.trim() || void 0
+		};
+	}
+	const command = params.skillCommands.find((entry) => entry.name.toLowerCase() === commandName);
+	if (!command) return null;
+	return {
+		command,
+		args: match[2]?.trim() || void 0
+	};
+}
+
+//#endregion
+export { skill_commands_exports as a, getSkillsSnapshotVersion as c, resolveSkillsPromptForRun as d, syncSkillsToWorkspace as f, sanitizeEnvVars as h, resolveSkillCommandInvocation as i, buildWorkspaceSkillSnapshot as l, applySkillEnvOverridesFromSnapshot as m, listSkillCommandsForAgents as n, getRemoteSkillEligibility as o, applySkillEnvOverrides as p, listSkillCommandsForWorkspace as r, ensureSkillsWatcher as s, listReservedChatSlashCommandNames as t, loadWorkspaceSkillEntries as u };