@fased/fased 0.1.61 → 0.1.64

package/dist/infra/boundary-path.js

@@ -1,8 +1,8 @@
 import { isNotFoundPathError, isPathInside } from "./path-guards.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fs from "node:fs/promises";
 
 //#region src/infra/boundary-path.ts
 const BOUNDARY_PATH_ALIAS_POLICIES = {
@@ -114,7 +114,7 @@ async function resolveBoundaryPathLexicalAsync(params) {
 		lexicalCursor = path.join(lexicalCursor, segment);
 		let stat;
 		try {
-			stat = await fs$1.lstat(lexicalCursor);
+			stat = await fs.lstat(lexicalCursor);
 		} catch (error) {
 			if (isNotFoundPathError(error)) {
 				const missingSuffix = segments.slice(idx);
@@ -189,7 +189,7 @@ function resolveBoundaryPathLexicalSync(params) {
 		lexicalCursor = path.join(lexicalCursor, segment);
 		let stat;
 		try {
-			stat = fs.lstatSync(lexicalCursor);
+			stat = syncFs.lstatSync(lexicalCursor);
 		} catch (error) {
 			if (isNotFoundPathError(error)) {
 				const missingSuffix = segments.slice(idx);
@@ -294,7 +294,7 @@ async function resolvePathViaExistingAncestor(targetPath) {
 		return normalized;
 	}
 	try {
-		const resolvedAncestor = path.resolve(await fs$1.realpath(cursor));
+		const resolvedAncestor = path.resolve(await fs.realpath(cursor));
 		if (missingSuffix.length === 0) {
 			return resolvedAncestor;
 		}
@@ -307,7 +307,7 @@ function resolvePathViaExistingAncestorSync(targetPath) {
 	const normalized = path.resolve(targetPath);
 	let cursor = normalized;
 	const missingSuffix = [];
-	while (!isFilesystemRoot(cursor) && !fs.existsSync(cursor)) {
+	while (!isFilesystemRoot(cursor) && !syncFs.existsSync(cursor)) {
 		missingSuffix.unshift(path.basename(cursor));
 		const parent = path.dirname(cursor);
 		if (parent === cursor) {
@@ -315,11 +315,11 @@ function resolvePathViaExistingAncestorSync(targetPath) {
 		}
 		cursor = parent;
 	}
-	if (!fs.existsSync(cursor)) {
+	if (!syncFs.existsSync(cursor)) {
 		return normalized;
 	}
 	try {
-		const resolvedAncestor = path.resolve(fs.realpathSync(cursor));
+		const resolvedAncestor = path.resolve(syncFs.realpathSync(cursor));
 		if (missingSuffix.length === 0) {
 			return resolvedAncestor;
 		}
@@ -330,7 +330,7 @@ function resolvePathViaExistingAncestorSync(targetPath) {
 }
 async function getPathKind(absolutePath, preserveFinalSymlink) {
 	try {
-		const stat = preserveFinalSymlink ? await fs$1.lstat(absolutePath) : await fs$1.stat(absolutePath);
+		const stat = preserveFinalSymlink ? await fs.lstat(absolutePath) : await fs.stat(absolutePath);
 		return {
 			exists: true,
 			kind: toResolvedKind(stat)
@@ -347,7 +347,7 @@ async function getPathKind(absolutePath, preserveFinalSymlink) {
 }
 function getPathKindSync(absolutePath, preserveFinalSymlink) {
 	try {
-		const stat = preserveFinalSymlink ? fs.lstatSync(absolutePath) : fs.statSync(absolutePath);
+		const stat = preserveFinalSymlink ? syncFs.lstatSync(absolutePath) : syncFs.statSync(absolutePath);
 		return {
 			exists: true,
 			kind: toResolvedKind(stat)
@@ -408,7 +408,7 @@ function isFilesystemRoot(candidate) {
 }
 async function pathExists(targetPath) {
 	try {
-		await fs$1.lstat(targetPath);
+		await fs.lstat(targetPath);
 		return true;
 	} catch (error) {
 		if (isNotFoundPathError(error)) {
@@ -419,24 +419,24 @@ async function pathExists(targetPath) {
 }
 async function resolveSymlinkHopPath(symlinkPath) {
 	try {
-		return path.resolve(await fs$1.realpath(symlinkPath));
+		return path.resolve(await fs.realpath(symlinkPath));
 	} catch (error) {
 		if (!isNotFoundPathError(error)) {
 			throw error;
 		}
-		const linkTarget = await fs$1.readlink(symlinkPath);
+		const linkTarget = await fs.readlink(symlinkPath);
 		const linkAbsolute = path.resolve(path.dirname(symlinkPath), linkTarget);
 		return resolvePathViaExistingAncestor(linkAbsolute);
 	}
 }
 function resolveSymlinkHopPathSync(symlinkPath) {
 	try {
-		return path.resolve(fs.realpathSync(symlinkPath));
+		return path.resolve(syncFs.realpathSync(symlinkPath));
 	} catch (error) {
 		if (!isNotFoundPathError(error)) {
 			throw error;
 		}
-		const linkTarget = fs.readlinkSync(symlinkPath);
+		const linkTarget = syncFs.readlinkSync(symlinkPath);
 		const linkAbsolute = path.resolve(path.dirname(symlinkPath), linkTarget);
 		return resolvePathViaExistingAncestorSync(linkAbsolute);
 	}

package/dist/infra/brew.js

@@ -1,11 +1,11 @@
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 
 //#region src/infra/brew.ts
 function isExecutable(filePath) {
 	try {
-		fs.accessSync(filePath, fs.constants.X_OK);
+		syncFs.accessSync(filePath, syncFs.constants.X_OK);
 		return true;
 	} catch {
 		return false;

package/dist/infra/control-ui-assets.js

@@ -2,7 +2,7 @@ import { defaultRuntime } from "../runtime.js";
 import { runCommandWithTimeout } from "../process/exec.js";
 import { resolveFasedAgentPackageRoot, resolveFasedAgentPackageRootSync } from "./fased-root.js";
 import { fileURLToPath } from "node:url";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/infra/control-ui-assets.ts
@@ -21,7 +21,7 @@ async function resolveControlUiDistIndexHealth(opts = {}) {
 	});
 	return {
 		indexPath,
-		exists: Boolean(indexPath && fs.existsSync(indexPath))
+		exists: Boolean(indexPath && syncFs.existsSync(indexPath))
 	};
 }
 function resolveControlUiRepoRoot(argv1 = process.argv[1]) {
@@ -33,13 +33,13 @@ function resolveControlUiRepoRoot(argv1 = process.argv[1]) {
 	const srcIndex = parts.lastIndexOf("src");
 	if (srcIndex !== -1) {
 		const root = parts.slice(0, srcIndex).join(path.sep);
-		if (fs.existsSync(path.join(root, "ui", "vite.config.ts"))) {
+		if (syncFs.existsSync(path.join(root, "ui", "vite.config.ts"))) {
 			return root;
 		}
 	}
 	let dir = path.dirname(normalized);
 	for (let i = 0; i < 8; i++) {
-		if (fs.existsSync(path.join(dir, "package.json")) && fs.existsSync(path.join(dir, "ui", "vite.config.ts"))) {
+		if (syncFs.existsSync(path.join(dir, "package.json")) && syncFs.existsSync(path.join(dir, "ui", "vite.config.ts"))) {
 			return dir;
 		}
 		const parent = path.dirname(dir);
@@ -72,12 +72,12 @@ async function resolveControlUiDistIndexPath(argv1OrOpts) {
 	for (let i = 0; i < 8; i++) {
 		const pkgJsonPath = path.join(dir, "package.json");
 		const indexPath = path.join(dir, "dist", "control-ui", "index.html");
-		if (fs.existsSync(pkgJsonPath)) {
+		if (syncFs.existsSync(pkgJsonPath)) {
 			try {
-				const raw = fs.readFileSync(pkgJsonPath, "utf-8");
+				const raw = syncFs.readFileSync(pkgJsonPath, "utf-8");
 				const parsed = JSON.parse(raw);
 				if (parsed.name === "fased") {
-					return fs.existsSync(indexPath) ? indexPath : null;
+					return syncFs.existsSync(indexPath) ? indexPath : null;
 				}
 				return null;
 			} catch {
@@ -101,13 +101,13 @@ function addCandidate(candidates, value) {
 function resolveControlUiRootOverrideSync(rootOverride) {
 	const resolved = path.resolve(rootOverride);
 	try {
-		const stats = fs.statSync(resolved);
+		const stats = syncFs.statSync(resolved);
 		if (stats.isFile()) {
 			return path.basename(resolved) === "index.html" ? path.dirname(resolved) : null;
 		}
 		if (stats.isDirectory()) {
 			const indexPath = path.join(resolved, "index.html");
-			return fs.existsSync(indexPath) ? resolved : null;
+			return syncFs.existsSync(indexPath) ? resolved : null;
 		}
 	} catch {
 		return null;
@@ -123,7 +123,7 @@ function resolveControlUiRootSync(opts = {}) {
 	const execDir = (() => {
 		try {
 			const execPath = opts.execPath ?? process.execPath;
-			return path.dirname(fs.realpathSync(execPath));
+			return path.dirname(syncFs.realpathSync(execPath));
 		} catch {
 			return null;
 		}
@@ -149,7 +149,7 @@ function resolveControlUiRootSync(opts = {}) {
 	addCandidate(candidates, path.join(cwd, "dist", "control-ui"));
 	for (const dir of candidates) {
 		const indexPath = path.join(dir, "index.html");
-		if (fs.existsSync(indexPath)) {
+		if (syncFs.existsSync(indexPath)) {
 			return dir;
 		}
 	}
@@ -185,14 +185,14 @@ async function ensureControlUiAssetsBuilt(runtime = defaultRuntime, opts) {
 		};
 	}
 	const indexPath = resolveControlUiDistIndexPathForRoot(repoRoot);
-	if (fs.existsSync(indexPath)) {
+	if (syncFs.existsSync(indexPath)) {
 		return {
 			ok: true,
 			built: false
 		};
 	}
 	const uiScript = path.join(repoRoot, "scripts", "ui.js");
-	if (!fs.existsSync(uiScript)) {
+	if (!syncFs.existsSync(uiScript)) {
 		return {
 			ok: false,
 			built: false,
@@ -215,7 +215,7 @@ async function ensureControlUiAssetsBuilt(runtime = defaultRuntime, opts) {
 			message: `Control UI build failed: ${summarizeCommandOutput(build.stderr) ?? `exit ${build.code}`}`
 		};
 	}
-	if (!fs.existsSync(indexPath)) {
+	if (!syncFs.existsSync(indexPath)) {
 		return {
 			ok: false,
 			built: true,

package/dist/infra/device-auth-store.js

@@ -1,6 +1,6 @@
 import { resolveStateDir } from "../config/paths.js";
 import { normalizeDeviceAuthRole, normalizeDeviceAuthScopes } from "../shared/device-auth.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/infra/device-auth-store.ts
@@ -10,10 +10,10 @@ function resolveDeviceAuthPath(env = process.env) {
 }
 function readStore(filePath) {
 	try {
-		if (!fs.existsSync(filePath)) {
+		if (!syncFs.existsSync(filePath)) {
 			return null;
 		}
-		const raw = fs.readFileSync(filePath, "utf8");
+		const raw = syncFs.readFileSync(filePath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (parsed?.version !== 1 || typeof parsed.deviceId !== "string") {
 			return null;
@@ -27,10 +27,10 @@ function readStore(filePath) {
 	}
 }
 function writeStore(filePath, store) {
-	fs.mkdirSync(path.dirname(filePath), { recursive: true });
-	fs.writeFileSync(filePath, `${JSON.stringify(store, null, 2)}\n`, { mode: 384 });
+	syncFs.mkdirSync(path.dirname(filePath), { recursive: true });
+	syncFs.writeFileSync(filePath, `${JSON.stringify(store, null, 2)}\n`, { mode: 384 });
 	try {
-		fs.chmodSync(filePath, 384);
+		syncFs.chmodSync(filePath, 384);
 	} catch {}
 }
 function loadDeviceAuthToken(params) {
@@ -88,11 +88,11 @@ function clearDeviceAuthToken(params) {
 }
 function clearDeviceAuthStore(env = process.env) {
 	const filePath = resolveDeviceAuthPath(env);
-	if (!fs.existsSync(filePath)) {
+	if (!syncFs.existsSync(filePath)) {
 		return false;
 	}
 	try {
-		fs.unlinkSync(filePath);
+		syncFs.unlinkSync(filePath);
 		return true;
 	} catch {
 		return false;

package/dist/infra/device-identity.js

@@ -1,5 +1,5 @@
 import { resolveStateDir } from "../config/paths.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import crypto from "node:crypto";
 
@@ -8,7 +8,7 @@ function resolveDefaultIdentityPath() {
 	return path.join(resolveStateDir(), "identity", "device.json");
 }
 function ensureDir(filePath) {
-	fs.mkdirSync(path.dirname(filePath), { recursive: true });
+	syncFs.mkdirSync(path.dirname(filePath), { recursive: true });
 }
 const ED25519_SPKI_PREFIX = Buffer.from("302a300506032b6570032100", "hex");
 function base64UrlEncode(buf) {
@@ -56,8 +56,8 @@ function createEphemeralDeviceIdentity() {
 }
 function loadOrCreateDeviceIdentity(filePath = resolveDefaultIdentityPath()) {
 	try {
-		if (fs.existsSync(filePath)) {
-			const raw = fs.readFileSync(filePath, "utf8");
+		if (syncFs.existsSync(filePath)) {
+			const raw = syncFs.readFileSync(filePath, "utf8");
 			const parsed = JSON.parse(raw);
 			if (parsed?.version === 1 && typeof parsed.deviceId === "string" && typeof parsed.publicKeyPem === "string" && typeof parsed.privateKeyPem === "string") {
 				const derivedId = fingerprintPublicKey(parsed.publicKeyPem);
@@ -66,9 +66,9 @@ function loadOrCreateDeviceIdentity(filePath = resolveDefaultIdentityPath()) {
 						...parsed,
 						deviceId: derivedId
 					};
-					fs.writeFileSync(filePath, `${JSON.stringify(updated, null, 2)}\n`, { mode: 384 });
+					syncFs.writeFileSync(filePath, `${JSON.stringify(updated, null, 2)}\n`, { mode: 384 });
 					try {
-						fs.chmodSync(filePath, 384);
+						syncFs.chmodSync(filePath, 384);
 					} catch {}
 					return {
 						deviceId: derivedId,
@@ -93,9 +93,9 @@ function loadOrCreateDeviceIdentity(filePath = resolveDefaultIdentityPath()) {
 		privateKeyPem: identity.privateKeyPem,
 		createdAtMs: Date.now()
 	};
-	fs.writeFileSync(filePath, `${JSON.stringify(stored, null, 2)}\n`, { mode: 384 });
+	syncFs.writeFileSync(filePath, `${JSON.stringify(stored, null, 2)}\n`, { mode: 384 });
 	try {
-		fs.chmodSync(filePath, 384);
+		syncFs.chmodSync(filePath, 384);
 	} catch {}
 	return identity;
 }

package/dist/infra/dotenv.js

@@ -1,7 +1,7 @@
 import { resolveRequiredHomeDir } from "./home-dir.js";
 import { resolveConfigDir } from "../utils.js";
 import { isDangerousHostEnvOverrideVarName, isDangerousHostEnvVarName, normalizeEnvVarKey } from "./host-env-security.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import dotenv from "dotenv";
@@ -84,7 +84,7 @@ function shouldBlockWorkspaceDotEnvKey(key) {
 function readDotEnvFile(params) {
 	let content;
 	try {
-		content = fs.readFileSync(params.filePath, "utf8");
+		content = syncFs.readFileSync(params.filePath, "utf8");
 	} catch (error) {
 		if (!params.quiet) {
 			const code = error && typeof error === "object" && "code" in error ? String(error.code) : undefined;

package/dist/infra/exec-approvals.js

@@ -4,7 +4,7 @@ import { DEFAULT_SAFE_BINS, matchAllowlist, parseExecArgvToken, resolveAllowlist
 import { analyzeArgvCommand, analyzeShellCommand, buildEnforcedShellCommand, isWindowsPlatform, splitCommandChain, splitCommandChainWithOperators } from "./exec-approvals-analysis.js";
 import { evaluateExecAllowlist, evaluateShellAllowlist, isSafeBinUsage, normalizeSafeBins, resolveAllowAlwaysPatterns, resolveSafeBins } from "./exec-approvals-allowlist.js";
 import { requestJsonlSocket } from "./jsonl-socket.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import crypto from "node:crypto";
 
@@ -61,7 +61,7 @@ function mergeLegacyAgent(current, legacy) {
 }
 function ensureDir(filePath) {
 	const dir = path.dirname(filePath);
-	fs.mkdirSync(dir, { recursive: true });
+	syncFs.mkdirSync(dir, { recursive: true });
 }
 function coerceAllowlistEntries(allowlist) {
 	if (!Array.isArray(allowlist) || allowlist.length === 0) {
@@ -162,7 +162,7 @@ function generateToken() {
 }
 function readExecApprovalsSnapshot() {
 	const filePath = resolveExecApprovalsPath();
-	if (!fs.existsSync(filePath)) {
+	if (!syncFs.existsSync(filePath)) {
 		const file = normalizeExecApprovals({
 			version: 1,
 			agents: {}
@@ -175,7 +175,7 @@ function readExecApprovalsSnapshot() {
 			hash: hashExecApprovalsRaw(null)
 		};
 	}
-	const raw = fs.readFileSync(filePath, "utf8");
+	const raw = syncFs.readFileSync(filePath, "utf8");
 	let parsed = null;
 	try {
 		parsed = JSON.parse(raw);
@@ -197,13 +197,13 @@ function readExecApprovalsSnapshot() {
 function loadExecApprovals() {
 	const filePath = resolveExecApprovalsPath();
 	try {
-		if (!fs.existsSync(filePath)) {
+		if (!syncFs.existsSync(filePath)) {
 			return normalizeExecApprovals({
 				version: 1,
 				agents: {}
 			});
 		}
-		const raw = fs.readFileSync(filePath, "utf8");
+		const raw = syncFs.readFileSync(filePath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (parsed?.version !== 1) {
 			return normalizeExecApprovals({
@@ -222,9 +222,9 @@ function loadExecApprovals() {
 function saveExecApprovals(file) {
 	const filePath = resolveExecApprovalsPath();
 	ensureDir(filePath);
-	fs.writeFileSync(filePath, `${JSON.stringify(file, null, 2)}\n`, { mode: 384 });
+	syncFs.writeFileSync(filePath, `${JSON.stringify(file, null, 2)}\n`, { mode: 384 });
 	try {
-		fs.chmodSync(filePath, 384);
+		syncFs.chmodSync(filePath, 384);
 	} catch {}
 }
 function ensureExecApprovals() {

package/dist/infra/exec-command-resolution.js

@@ -1,6 +1,6 @@
 import { expandHomePrefix } from "./home-dir.js";
 import { resolveDispatchWrapperExecutionPlan } from "./exec-wrapper-resolution.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/infra/exec-command-resolution.ts
@@ -15,12 +15,12 @@ const DEFAULT_SAFE_BINS = [
 ];
 function isExecutableFile(filePath) {
 	try {
-		const stat = fs.statSync(filePath);
+		const stat = syncFs.statSync(filePath);
 		if (!stat.isFile()) {
 			return false;
 		}
 		if (process.platform !== "win32") {
-			fs.accessSync(filePath, fs.constants.X_OK);
+			syncFs.accessSync(filePath, syncFs.constants.X_OK);
 		}
 		return true;
 	} catch {
@@ -111,7 +111,7 @@ function normalizeMatchTarget(value) {
 }
 function tryRealpath(value) {
 	try {
-		return fs.realpathSync(value);
+		return syncFs.realpathSync(value);
 	} catch {
 		return null;
 	}

package/dist/infra/exec-safe-bin-trust.js

@@ -1,4 +1,4 @@
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/infra/exec-safe-bin-trust.ts
@@ -61,7 +61,7 @@ function listWritableExplicitTrustedSafeBinDirs(entries) {
 	for (const dir of resolved) {
 		let stat;
 		try {
-			stat = fs.statSync(dir);
+			stat = syncFs.statSync(dir);
 		} catch {
 			continue;
 		}

package/dist/infra/fased-root.js

@@ -1,13 +1,13 @@
 import { fileURLToPath } from "node:url";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fs from "node:fs/promises";
 
 //#region src/infra/fased-root.ts
 const CORE_PACKAGE_NAMES = new Set(["fased", "@fased/fased"]);
 async function readPackageName(dir) {
 	try {
-		const raw = await fs$1.readFile(path.join(dir, "package.json"), "utf-8");
+		const raw = await fs.readFile(path.join(dir, "package.json"), "utf-8");
 		const parsed = JSON.parse(raw);
 		return typeof parsed.name === "string" ? parsed.name : null;
 	} catch {
@@ -16,7 +16,7 @@ async function readPackageName(dir) {
 }
 function readPackageNameSync(dir) {
 	try {
-		const raw = fs.readFileSync(path.join(dir, "package.json"), "utf-8");
+		const raw = syncFs.readFileSync(path.join(dir, "package.json"), "utf-8");
 		const parsed = JSON.parse(raw);
 		return typeof parsed.name === "string" ? parsed.name : null;
 	} catch {
@@ -56,7 +56,7 @@ function candidateDirsFromArgv1(argv1) {
 	const normalized = path.resolve(argv1);
 	const candidates = [path.dirname(normalized)];
 	try {
-		const resolved = fs.realpathSync(normalized);
+		const resolved = syncFs.realpathSync(normalized);
 		if (resolved !== normalized) {
 			candidates.push(path.dirname(resolved));
 		}

package/dist/infra/fasedhub.js

@@ -7,6 +7,7 @@ import { createHash } from "node:crypto";
 //#region src/infra/fasedhub.ts
 const DEFAULT_CLAWHUB_REGISTRY = "https://clawhub.com";
 const DEFAULT_FETCH_TIMEOUT_MS = 3e4;
+const MAX_SKILL_ARCHIVE_BYTES = 25 * 1024 * 1024;
 var FasedHubRequestError = class extends Error {
 	constructor(params) {
 		super(`ClawHub ${params.path} failed (${params.status}): ${params.body}`);
@@ -123,6 +124,61 @@ function formatSha256Integrity(bytes) {
 	const digest = createHash("sha256").update(bytes).digest("base64");
 	return `sha256-${digest}`;
 }
+function normalizeExpectedSha256(value) {
+	const normalized = value?.trim().toLowerCase();
+	return normalized && /^[a-f0-9]{64}$/u.test(normalized) ? normalized : undefined;
+}
+function sha256HexFromIntegrity(value) {
+	const normalized = value?.trim();
+	if (!normalized?.startsWith("sha256-")) {
+		return undefined;
+	}
+	try {
+		const digest = Buffer.from(normalized.slice("sha256-".length), "base64");
+		return digest.length === 32 ? digest.toString("hex") : undefined;
+	} catch {
+		return undefined;
+	}
+}
+async function readBoundedResponseBytes(response, maxBytes) {
+	const declaredLength = Number(response.headers.get("content-length"));
+	if (Number.isFinite(declaredLength) && declaredLength > maxBytes) {
+		throw new Error(`ClawHub skill archive exceeds the ${maxBytes}-byte download limit`);
+	}
+	if (!response.body) {
+		const bytes = new Uint8Array(await response.arrayBuffer());
+		if (bytes.byteLength > maxBytes) {
+			throw new Error(`ClawHub skill archive exceeds the ${maxBytes}-byte download limit`);
+		}
+		return bytes;
+	}
+	const chunks = [];
+	const reader = response.body.getReader();
+	let total = 0;
+	try {
+		while (true) {
+			const { done, value } = await reader.read();
+			if (done) {
+				break;
+			}
+			total += value.byteLength;
+			if (total > maxBytes) {
+				await reader.cancel();
+				throw new Error(`ClawHub skill archive exceeds the ${maxBytes}-byte download limit`);
+			}
+			chunks.push(value);
+		}
+	} finally {
+		reader.releaseLock();
+	}
+	const bytes = new Uint8Array(total);
+	let offset = 0;
+	for (const chunk of chunks) {
+		bytes.set(chunk, offset);
+		offset += chunk.byteLength;
+	}
+	return bytes;
+}
 function sanitizeTempFileName(fileName) {
 	const base = path.basename(fileName).replace(/[^a-zA-Z0-9._-]+/g, "-");
 	const normalized = base.replace(/^-+|-+$/g, "");
@@ -193,7 +249,12 @@ async function downloadFasedHubSkillArchive(params) {
 			body: await readErrorBody(response)
 		});
 	}
-	const bytes = new Uint8Array(await response.arrayBuffer());
+	const bytes = await readBoundedResponseBytes(response, MAX_SKILL_ARCHIVE_BYTES);
+	const sha256 = createHash("sha256").update(bytes).digest("hex");
+	const expectedSha256 = normalizeExpectedSha256(params.expectedSha256) ?? sha256HexFromIntegrity(params.expectedIntegrity);
+	if (expectedSha256 && expectedSha256 !== sha256) {
+		throw new Error(`ClawHub skill archive digest mismatch: expected ${expectedSha256}, received ${sha256}`);
+	}
 	const target = await createTempDownloadTarget({
 		prefix: "clawhub-skill",
 		fileName: `${params.slug}.zip`
@@ -202,6 +263,8 @@ async function downloadFasedHubSkillArchive(params) {
 	return {
 		archivePath: target.path,
 		integrity: formatSha256Integrity(bytes),
+		sha256,
+		integrityVerified: Boolean(expectedSha256),
 		cleanup: target.cleanup
 	};
 }