@hasna/skills 0.1.70 → 0.1.72

package/dist/sdk/index.js

@@ -22937,19 +22937,15 @@ var init_dist_es9 = __esm(() => {
   init_fromIni();
 });
 
-// ../events/dist/index.js
+// ../../node_modules/.bun/@hasna+events@0.1.16/node_modules/@hasna/events/dist/index.js
 import { chmod, mkdir, readFile, rename, writeFile as writeFile2 } from "fs/promises";
 import { Buffer as Buffer2 } from "buffer";
-import { existsSync as existsSync14 } from "fs";
-import { homedir as homedir5 } from "os";
-import { join as join16 } from "path";
+import { existsSync as existsSync15 } from "fs";
+import { homedir as homedir6 } from "os";
+import { join as join18 } from "path";
 import { createHmac as createHmac3, timingSafeEqual as timingSafeEqual2 } from "crypto";
-import { lookup as dnsLookup } from "dns/promises";
-import { isIP } from "net";
 import { randomUUID as randomUUID5 } from "crypto";
 import { spawn } from "child_process";
-import { request as nodeHttpRequest } from "http";
-import { request as nodeHttpsRequest } from "https";
 import { randomUUID as randomUUID22 } from "crypto";
 function getPathValue(input, path) {
   return path.split(".").reduce((value, part) => {
@@ -23047,7 +23043,7 @@ function channelMatchesEvent(channel, event) {
   return channel.filters.some((filter) => eventMatchesFilter(event, filter));
 }
 function getEventsDataDir(override) {
-  return override || process.env[HASNA_EVENTS_DIR_ENV] || process.env[HASNA_EVENTS_HOME_ENV] || join16(homedir5(), ".hasna", "events");
+  return override || process.env[HASNA_EVENTS_DIR_ENV] || process.env[HASNA_EVENTS_HOME_ENV] || join18(homedir6(), ".hasna", "events");
 }
 
 class JsonEventsStore {
@@ -23056,12 +23052,12 @@ class JsonEventsStore {
   channelsPath;
   eventsPath;
   deliveriesPath;
-  constructor(dataDir = getEventsDataDir()) {
-    this.dataDir = dataDir;
-    this.runtime = localJsonRuntime(dataDir);
-    this.channelsPath = join16(dataDir, "channels.json");
-    this.eventsPath = join16(dataDir, "events.json");
-    this.deliveriesPath = join16(dataDir, "deliveries.json");
+  constructor(dataDir2 = getEventsDataDir()) {
+    this.dataDir = dataDir2;
+    this.runtime = localJsonRuntime(dataDir2);
+    this.channelsPath = join18(dataDir2, "channels.json");
+    this.eventsPath = join18(dataDir2, "events.json");
+    this.deliveriesPath = join18(dataDir2, "deliveries.json");
   }
   async init() {
     await mkdir(this.dataDir, { recursive: true, mode: 448 });
@@ -23178,7 +23174,7 @@ class JsonEventsStore {
     };
   }
   async ensureArrayFile(path) {
-    if (!existsSync14(path)) {
+    if (!existsSync15(path)) {
       await writeFile2(path, `[]
 `, { encoding: "utf-8", mode: 384 });
     }
@@ -23208,7 +23204,7 @@ class JsonEventsStore {
     });
   }
 }
-function localJsonRuntime(dataDir = getEventsDataDir()) {
+function localJsonRuntime(dataDir2 = getEventsDataDir()) {
   return {
     mode: "local-files",
     name: "json-events-store",
@@ -23221,7 +23217,7 @@ function localJsonRuntime(dataDir = getEventsDataDir()) {
     durable: true,
     idempotency: "best-effort-local",
     replayCursors: true,
-    description: `Local JSON files in ${dataDir}; no SQLite, Postgres, S3, or AWS runtime is configured by this store.`
+    description: `Local JSON files in ${dataDir2}; no SQLite, Postgres, S3, or AWS runtime is configured by this store.`
   };
 }
 function encodeLocalJsonEventCursor(offset, options = {}) {
@@ -23292,177 +23288,6 @@ function signPayload(secret, timestamp, body) {
   const digest2 = createHmac3("sha256", secret).update(buildSignatureBase(timestamp, body)).digest("hex");
   return `sha256=${digest2}`;
 }
-function isPrivateAddress(address) {
-  const normalized = stripZoneId(address);
-  const version2 = isIP(normalized);
-  if (version2 === 4) {
-    const integer = ipv4ToInt(normalized);
-    if (integer === undefined)
-      return true;
-    return IPV4_PRIVATE_RANGES.some(([low, high]) => integer >= low && integer <= high);
-  }
-  if (version2 === 6) {
-    const groups = ipv6Groups(normalized);
-    if (!groups)
-      return true;
-    for (const prefix of IPV6_SPECIAL_PREFIXES) {
-      if (!ipv6MatchesPrefix(groups, prefix.groups, prefix.bits))
-        continue;
-      if (prefix.bits === 96 && groups[5] === 65535) {
-        return isPrivateAddress(ipv4IntToString(groups[6] << 16 | groups[7]));
-      }
-      if (prefix.bits === 16 && groups[0] === 8194) {
-        return isPrivateAddress(ipv4IntToString(groups[1] << 16 | groups[2]));
-      }
-      return true;
-    }
-    return false;
-  }
-  return true;
-}
-async function resolveWebhookTarget(url, policy = {}) {
-  const hostname = normalizeHostname(url.hostname);
-  const allowlist = (policy.allowPrivateHosts ?? []).map((entry) => normalizeHostname(entry.toLowerCase()));
-  if (allowlist.includes(hostname)) {
-    const version22 = isIP(hostname);
-    if (version22 === 4 || version22 === 6) {
-      return { hostname, addresses: [hostname] };
-    }
-    const lookup2 = policy.lookup ?? defaultTargetLookup;
-    let resolved2;
-    try {
-      resolved2 = await lookup2(hostname);
-    } catch {
-      throw new Error(`Webhook target ${hostname} could not be resolved`);
-    }
-    if (!Array.isArray(resolved2) || resolved2.length === 0) {
-      throw new Error(`Webhook target ${hostname} resolved to no addresses`);
-    }
-    const addresses = resolved2.map((entry) => normalizeHostname(entry.address));
-    return { hostname, addresses };
-  }
-  const version2 = isIP(hostname);
-  if (version2 === 4 || version2 === 6) {
-    if (isPrivateAddress(hostname)) {
-      throw new Error(`Webhook target ${hostname} is a private or special-use address`);
-    }
-    return { hostname, addresses: [hostname] };
-  }
-  const lookup = policy.lookup ?? defaultTargetLookup;
-  let resolved;
-  try {
-    resolved = await lookup(hostname);
-  } catch {
-    throw new Error(`Webhook target ${hostname} could not be resolved`);
-  }
-  if (!Array.isArray(resolved) || resolved.length === 0) {
-    throw new Error(`Webhook target ${hostname} resolved to no addresses`);
-  }
-  const allowed = [];
-  for (const entry of resolved) {
-    const address = normalizeHostname(entry.address);
-    if (isPrivateAddress(address)) {
-      if (allowlist.includes(address)) {
-        allowed.push(address);
-        continue;
-      }
-      throw new Error(`Webhook target ${hostname} resolves to private or special-use address ${address}`);
-    }
-    allowed.push(address);
-  }
-  if (allowed.length === 0) {
-    throw new Error(`Webhook target ${hostname} resolved to no public addresses`);
-  }
-  return { hostname, addresses: allowed };
-}
-function normalizeMaxRedirects(value) {
-  if (value === undefined)
-    return DEFAULT_MAX_REDIRECTS;
-  if (!Number.isInteger(value) || value < 0)
-    throw new Error("webhookTargetPolicy.maxRedirects must be a non-negative integer");
-  return value;
-}
-function normalizeHostname(hostname) {
-  const lower = hostname.toLowerCase();
-  if (lower.startsWith("[") && lower.endsWith("]"))
-    return lower.slice(1, -1);
-  return lower;
-}
-function stripZoneId(address) {
-  const percent = address.indexOf("%");
-  return percent === -1 ? address : address.slice(0, percent);
-}
-function ipv4ToInt(address) {
-  const parts = address.split(".");
-  if (parts.length !== 4)
-    return;
-  let value = 0;
-  for (const part of parts) {
-    if (!/^\d{1,3}$/.test(part))
-      return;
-    const octet = Number(part);
-    if (octet > 255)
-      return;
-    value = value << 8 | octet;
-  }
-  return value >>> 0;
-}
-function ipv4IntToString(integer) {
-  return [
-    integer >>> 24 & 255,
-    integer >>> 16 & 255,
-    integer >>> 8 & 255,
-    integer & 255
-  ].join(".");
-}
-function ipv6Groups(address) {
-  const raw = stripZoneId(address);
-  const doubleColon = raw.indexOf("::");
-  const headText = doubleColon === -1 ? raw : raw.slice(0, doubleColon);
-  const tailText = doubleColon === -1 ? "" : raw.slice(doubleColon + 2);
-  const parseGroups = (text) => {
-    if (text === "")
-      return [];
-    const out = [];
-    for (const part of text.split(":")) {
-      if (part.includes(".")) {
-        const v4 = ipv4ToInt(part);
-        if (v4 === undefined)
-          return;
-        out.push(v4 >>> 16 & 65535, v4 & 65535);
-      } else {
-        if (!/^[0-9a-fA-F]{1,4}$/.test(part))
-          return;
-        out.push(parseInt(part, 16));
-      }
-    }
-    return out;
-  };
-  const head = parseGroups(headText);
-  if (!head)
-    return;
-  const tail = parseGroups(tailText);
-  if (!tail)
-    return;
-  const total = head.length + tail.length;
-  if (doubleColon === -1) {
-    return total === 8 ? head : undefined;
-  }
-  if (total >= 8)
-    return;
-  return [...head, ...new Array(8 - total).fill(0), ...tail];
-}
-function ipv6MatchesPrefix(groups, prefixGroups, prefixBits) {
-  let remaining = prefixBits;
-  for (let index = 0;index < prefixGroups.length && remaining > 0; index += 1) {
-    const take = Math.min(16, remaining);
-    const mask = 65535 << 16 - take & 65535;
-    if ((groups[index] & mask) !== (prefixGroups[index] & mask))
-      return false;
-    remaining -= take;
-  }
-  return true;
-}
 function now() {
   return new Date().toISOString();
 }
@@ -23493,18 +23318,9 @@ function buildWebhookRequest(event, channel, options = {}) {
   }
   return { body, headers };
 }
-function normalizeWebhookUrl(raw) {
-  const url = new URL(raw);
-  if (url.username !== "" || url.password !== "") {
-    url.username = "";
-    url.password = "";
-  }
-  return url.toString();
-}
 async function dispatchWebhook(event, channel, options = {}) {
   if (!channel.webhook)
     throw new Error(`Channel ${channel.id} has no webhook config`);
-  const webhookUrl = normalizeWebhookUrl(channel.webhook.url);
   const startedAt = now();
   let secret = channel.webhook.secret;
   if (channel.webhook.secretRef) {
@@ -23521,14 +23337,10 @@ async function dispatchWebhook(event, channel, options = {}) {
   }
   const timestamp = (options.now?.() ?? new Date).toISOString();
   const { body, headers } = buildWebhookRequest(event, channel, { secret, timestamp });
-  const validateTargets = options.webhookTargetPolicy !== undefined || options.fetchImpl === undefined;
-  if (validateTargets) {
-    return dispatchValidatedWebhook(event, channel, { body, headers, startedAt, options });
-  }
   const controller = new AbortController;
   const timeout = setTimeout(() => controller.abort(), channel.webhook.timeoutMs ?? 15000);
   try {
-    const response = await (options.fetchImpl ?? fetch)(webhookUrl, {
+    const response = await (options.fetchImpl ?? fetch)(channel.webhook.url, {
       method: "POST",
       headers,
       body,
@@ -23556,130 +23368,6 @@ async function dispatchWebhook(event, channel, options = {}) {
     clearTimeout(timeout);
   }
 }
-function isRedirectStatus(status) {
-  return status === 301 || status === 302 || status === 303 || status === 307 || status === 308;
-}
-function redirectKeepsBody(status) {
-  return status === 307 || status === 308;
-}
-async function pinnedNativeRequest(target, addresses, method, headers, body, signal, tls) {
-  const isHttps = target.protocol === "https:";
-  if (!isHttps && target.protocol !== "http:") {
-    throw new Error(`Webhook target uses unsupported protocol ${target.protocol}`);
-  }
-  const defaultPort = isHttps ? 443 : 80;
-  const port = target.port ? Number(target.port) : defaultPort;
-  const requestOptions = {
-    hostname: target.hostname,
-    port,
-    path: `${target.pathname}${target.search}`,
-    method,
-    headers,
-    ...tls?.ca ? { ca: tls.ca } : {},
-    lookup: (hostname, _options, callback) => {
-      const entries = addresses.map((address) => ({
-        address,
-        family: address.includes(":") ? 6 : 4
-      }));
-      callback(null, entries);
-    }
-  };
-  return new Promise((resolve2, reject) => {
-    const request = isHttps ? nodeHttpsRequest(requestOptions, onResponse) : nodeHttpRequest(requestOptions, onResponse);
-    const onAbort = () => {
-      const error = new Error("The operation was aborted.");
-      error.name = "AbortError";
-      request.destroy(error);
-    };
-    if (signal.aborted)
-      onAbort();
-    else
-      signal.addEventListener("abort", onAbort, { once: true });
-    request.on("error", reject);
-    if (body !== undefined)
-      request.write(body);
-    request.end();
-    function onResponse(response) {
-      const chunks = [];
-      response.on("data", (chunk) => chunks.push(Buffer.from(chunk)));
-      response.on("error", reject);
-      response.on("end", () => {
-        const headersRecord = {};
-        for (const [name, value] of Object.entries(response.headers)) {
-          if (typeof value === "string")
-            headersRecord[name] = value;
-          else if (Array.isArray(value))
-            headersRecord[name] = value.join(", ");
-        }
-        resolve2(new Response(Buffer.concat(chunks), { status: response.statusCode ?? 200, headers: headersRecord }));
-      });
-    }
-  });
-}
-async function dispatchValidatedWebhook(event, channel, input) {
-  const { body, headers, startedAt, options } = input;
-  const webhook = channel.webhook;
-  if (!webhook)
-    throw new Error(`Channel ${channel.id} has no webhook config`);
-  const policy = options.webhookTargetPolicy ?? {};
-  const maxRedirects = normalizeMaxRedirects(policy.maxRedirects);
-  const controller = new AbortController;
-  const timeout = setTimeout(() => controller.abort(), webhook.timeoutMs ?? 15000);
-  try {
-    let target = new URL(normalizeWebhookUrl(webhook.url));
-    let requestHeaders = headers;
-    let method = "POST";
-    let requestBody = body;
-    let redirectsFollowed = 0;
-    for (;; ) {
-      const resolved = await resolveWebhookTarget(target, policy).catch((error) => {
-        throw new Error(`Webhook target rejected by SSRF guard: ${error.message}`);
-      });
-      const response = options.fetchImpl ? await options.fetchImpl(target, {
-        method,
-        headers: requestHeaders,
-        body: requestBody,
-        signal: controller.signal,
-        redirect: "manual"
-      }) : await pinnedNativeRequest(target, resolved.addresses, method, requestHeaders, requestBody, controller.signal, options.tls);
-      const location = response.headers.get("location");
-      if (isRedirectStatus(response.status) && location) {
-        if (redirectsFollowed >= maxRedirects) {
-          return failedAttempt(startedAt, `Webhook target exceeded ${maxRedirects} redirects`);
-        }
-        redirectsFollowed += 1;
-        const next = new URL(location, target);
-        target = next;
-        if (!redirectKeepsBody(response.status)) {
-          method = "GET";
-          requestBody = undefined;
-          requestHeaders = Object.fromEntries(Object.entries(requestHeaders).filter(([name]) => name.toLowerCase() !== "content-type" && name.toLowerCase() !== "content-length"));
-        }
-        continue;
-      }
-      const responseBody = truncate(await response.text());
-      return {
-        attempt: 1,
-        status: response.ok ? "success" : "failed",
-        startedAt,
-        completedAt: now(),
-        responseStatus: response.status,
-        responseBody,
-        error: response.ok ? undefined : `Webhook returned HTTP ${response.status}`
-      };
-    }
-  } catch (error) {
-    return {
-      attempt: 1,
-      status: "failed",
-      startedAt,
-      completedAt: now(),
-      error: error instanceof Error ? error.message : String(error)
-    };
-  } finally {
-    clearTimeout(timeout);
-  }
-}
 function failedAttempt(startedAt, error) {
   return {
     attempt: 1,
@@ -23708,7 +23396,7 @@ async function dispatchCommand(event, channel) {
     HASNA_EVENT_SCHEMA_VERSION: event.schemaVersion,
     HASNA_EVENT_JSON: eventJson
   };
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     const child = spawn(channel.command.command, channel.command.args ?? [], {
       cwd: channel.command.cwd,
       env,
@@ -23726,7 +23414,7 @@ async function dispatchCommand(event, channel) {
     });
     child.on("error", (error) => {
       clearTimeout(timeout);
-      resolve2({
+      resolve3({
         attempt: 1,
         status: "failed",
         startedAt,
@@ -23739,7 +23427,7 @@ async function dispatchCommand(event, channel) {
     child.on("close", (code, signal) => {
       clearTimeout(timeout);
       const success = code === 0;
-      resolve2({
+      resolve3({
         attempt: 1,
         status: success ? "success" : "failed",
         startedAt,
@@ -23875,9 +23563,7 @@ class EventsClient {
     this.transportOptions = {
       fetchImpl: options.fetchImpl,
       secretResolver: options.secretResolver,
-      now: options.now,
-      tls: options.tls,
-      webhookTargetPolicy: options.webhookTargetPolicy
+      now: options.now
     };
     this.catalog = options.catalog ?? defaultEventTypeCatalog;
     this.validateCatalogTypes = options.validateCatalogTypes ?? false;
@@ -24082,44 +23768,9 @@ function normalizeRetryPolicy(policy) {
     multiplier: Math.max(1, policy?.multiplier ?? 2)
   };
 }
-var HASNA_EVENTS_DIR_ENV = "HASNA_EVENTS_DIR", HASNA_EVENTS_HOME_ENV = "HASNA_EVENTS_HOME", LOCAL_JSON_EVENT_CURSOR_PREFIX = "local-json-v1:", DEFAULT_EVENT_PAGE_LIMIT = 100, MAX_EVENT_PAGE_LIMIT = 1000, DEFAULT_SIGNATURE_TOLERANCE_MS, DEFAULT_MAX_REDIRECTS = 5, IPV4_PRIVATE_RANGES, IPV6_SPECIAL_PREFIXES, defaultTargetLookup = async (hostname) => {
-  return dnsLookup(hostname, { all: true, verbatim: false });
-}, EventValidationError, defaultEventTypeCatalog, APP_EVENT_V1_MAX_DATA_BYTES;
+var HASNA_EVENTS_DIR_ENV = "HASNA_EVENTS_DIR", HASNA_EVENTS_HOME_ENV = "HASNA_EVENTS_HOME", LOCAL_JSON_EVENT_CURSOR_PREFIX = "local-json-v1:", DEFAULT_EVENT_PAGE_LIMIT = 100, MAX_EVENT_PAGE_LIMIT = 1000, DEFAULT_SIGNATURE_TOLERANCE_MS, EventValidationError, defaultEventTypeCatalog, APP_EVENT_V1_MAX_DATA_BYTES;
 var init_dist = __esm(() => {
   DEFAULT_SIGNATURE_TOLERANCE_MS = 5 * 60 * 1000;
-  IPV4_PRIVATE_RANGES = [
-    [0, 16777215],
-    [167772160, 184549375],
-    [1681915904, 1686110207],
-    [2130706432, 2147483647],
-    [2851995648, 2852061183],
-    [2886729728, 2887778303],
-    [3221225472, 3221225727],
-    [3221225984, 3221226239],
-    [3227017984, 3227018239],
-    [3232235520, 3232301055],
-    [3323068416, 3323199487],
-    [3325256704, 3325256959],
-    [3405803776, 3405804031],
-    [3758096384, 4294967295]
-  ];
-  IPV6_SPECIAL_PREFIXES = [
-    { groups: [0, 0, 0, 0, 0, 0, 0, 0], bits: 128 },
-    { groups: [0, 0, 0, 0, 0, 0, 0, 1], bits: 128 },
-    { groups: [0, 0, 0, 0, 0, 65535, 0, 0], bits: 96 },
-    { groups: [100, 65435, 0, 0, 0, 0, 0, 0], bits: 96 },
-    { groups: [256, 0, 0, 0, 0, 0, 0, 0], bits: 64 },
-    { groups: [8193, 0, 0, 0, 0, 0, 0, 0], bits: 32 },
-    { groups: [8193, 2, 0, 0, 0, 0, 0, 0], bits: 48 },
-    { groups: [8193, 16, 0, 0, 0, 0, 0, 0], bits: 28 },
-    { groups: [8193, 3512, 0, 0, 0, 0, 0, 0], bits: 32 },
-    { groups: [8194, 0, 0, 0, 0, 0, 0, 0], bits: 16 },
-    { groups: [16383, 0, 0, 0, 0, 0, 0, 0], bits: 20 },
-    { groups: [64512, 0, 0, 0, 0, 0, 0, 0], bits: 7 },
-    { groups: [65152, 0, 0, 0, 0, 0, 0, 0], bits: 10 },
-    { groups: [65216, 0, 0, 0, 0, 0, 0, 0], bits: 10 },
-    { groups: [65280, 0, 0, 0, 0, 0, 0, 0], bits: 8 }
-  ];
   EventValidationError = class EventValidationError extends Error {
     eventType;
     issues;
@@ -24154,6 +23805,128 @@ var cachedClient;
 var init_event_sink = __esm(() => {
   init_dist();
 });
+// package.json
+var package_default = {
+  name: "@hasna/skills",
+  version: "0.1.72",
+  description: "Skills library for AI coding agents",
+  type: "module",
+  bin: {
+    skills: "bin/index.js",
+    "skills-mcp": "bin/mcp.js",
+    "skills-server": "bin/server.js",
+    "skills-worker": "bin/worker.js",
+    "skills-migrate": "bin/migrate.js"
+  },
+  exports: {
+    ".": {
+      import: "./dist/index.js",
+      types: "./dist/index.d.ts"
+    },
+    "./storage": {
+      import: "./dist/storage.js",
+      types: "./dist/storage.d.ts"
+    },
+    "./sdk": {
+      import: "./dist/sdk/index.js",
+      types: "./dist/sdk/index.d.ts"
+    },
+    "./admin-contract": {
+      import: "./dist/admin-contract.js",
+      types: "./dist/admin-contract.d.ts"
+    }
+  },
+  files: [
+    "dist/",
+    "!dist/**/*.test.d.ts",
+    "!dist/test-preload.d.ts",
+    "!dist/platform",
+    "bin/",
+    "migrations/",
+    "docs/skill-standard.md",
+    "schemas/",
+    "LICENSE",
+    "README.md"
+  ],
+  main: "./dist/index.js",
+  types: "./dist/index.d.ts",
+  scripts: {
+    clean: "rm -rf bin/ dist/",
+    build: "bun run clean && bun build ./src/cli/index.tsx --outdir ./bin --target bun && bun build ./src/mcp/index.ts --outfile ./bin/mcp.js --target bun && bun build ./src/server/index.ts --outfile ./bin/server.js --target bun && bun build ./src/server/worker.ts --outfile ./bin/worker.js --target bun && bun build ./src/server/migrate.ts --outfile ./bin/migrate.js --target bun && bun build ./src/index.ts ./src/storage.ts ./src/sdk/index.ts ./src/admin-contract.ts --outdir ./dist --target bun && tsc --emitDeclarationOnly --declaration --outDir dist",
+    "build:js": "rm -rf dist && bun build ./src/index.ts ./src/storage.ts ./src/sdk/index.ts ./src/admin-contract.ts --outdir ./dist --target bun && tsc --emitDeclarationOnly --declaration --outDir dist",
+    test: "bun test --timeout 30000",
+    dev: "bun run ./src/cli/index.tsx",
+    "dev:watch": "bun --watch run ./src/cli/index.tsx",
+    "dev:mcp": "bun --watch run ./src/mcp/index.ts",
+    "dev:server": "bun --watch run ./src/server/index.ts",
+    "dev:worker": "bun --watch run ./src/server/worker.ts",
+    "docker:check": "bash scripts/docker-build-check.sh",
+    migrate: "bun run ./src/server/migrate.ts",
+    typecheck: "tsc --noEmit",
+    "verify:release": "bun run scripts/release-guard.ts",
+    prepare: "bun run build:js",
+    prepack: "bun run build && bun run verify:release",
+    prepublishOnly: "bun run typecheck && bun run test",
+    postinstall: "mkdir -p $HOME/.hasna/skills/custom 2>/dev/null || true"
+  },
+  keywords: [
+    "skills",
+    "ai",
+    "agent",
+    "cli",
+    "typescript",
+    "bun",
+    "claude",
+    "codex",
+    "gemini",
+    "mcp",
+    "model-context-protocol",
+    "open-source",
+    "skills-library",
+    "automation"
+  ],
+  author: "Hasna",
+  license: "Apache-2.0",
+  devDependencies: {
+    "@types/bun": "latest",
+    "@types/node": "25.2.3",
+    "@types/react": "^18.2.0",
+    "bun-types": "1.3.14",
+    "react-devtools-core": "^7.0.1",
+    typescript: "^5",
+    yaml: "^2.9.0"
+  },
+  dependencies: {
+    "@aws-sdk/client-ecs": "^3.1079.0",
+    "@aws-sdk/client-s3": "^3.1079.0",
+    "@hasna/events": "0.1.16",
+    "@hasna/paths": "0.1.0",
+    "@modelcontextprotocol/sdk": "^1.26.0",
+    chalk: "^5.3.0",
+    commander: "^12.1.0",
+    ink: "^5.0.1",
+    "ink-select-input": "^6.0.0",
+    "ink-spinner": "^5.0.0",
+    "ink-text-input": "^6.0.0",
+    react: "^18.2.0",
+    zod: "^4.3.6"
+  },
+  engines: {
+    bun: ">=1.0.0"
+  },
+  publishConfig: {
+    registry: "https://registry.npmjs.org",
+    access: "public"
+  },
+  repository: {
+    type: "git",
+    url: "git+https://github.com/hasna/apps.git"
+  },
+  homepage: "https://github.com/hasna/skills",
+  bugs: {
+    url: "https://github.com/hasna/skills/issues"
+  }
+};
 
 // src/lib/remote-run-contract.ts
 var REMOTE_SKILL_RUN_CONTRACT_VERSION = 1;
@@ -33325,7 +33098,7 @@ var WriteGetObjectResponse$ = [
 class CreateSessionCommand extends command(_ep4, _mw0, "CreateSession", CreateSession$) {
 }
 // ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/package.json
-var package_default = {
+var package_default2 = {
   name: "@aws-sdk/client-s3",
   version: "3.1112.0",
   description: "AWS SDK for JavaScript S3 Client for Node.js, Browser and React Native",
@@ -33875,7 +33648,7 @@ var getRuntimeConfig3 = (config) => {
     authSchemePreference: config?.authSchemePreference ?? import_config28.loadConfig(import_httpAuthSchemes3.NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, loaderConfig),
     bodyLengthChecker: config?.bodyLengthChecker ?? import_serde4.calculateBodyLength,
     credentialDefaultProvider: config?.credentialDefaultProvider ?? defaultProvider,
-    defaultUserAgentProvider: config?.defaultUserAgentProvider ?? import_client19.createDefaultUserAgentProvider({ serviceId: clientSharedValues.serviceId, clientVersion: package_default.version }),
+    defaultUserAgentProvider: config?.defaultUserAgentProvider ?? import_client19.createDefaultUserAgentProvider({ serviceId: clientSharedValues.serviceId, clientVersion: package_default2.version }),
     disableS3ExpressSessionAuth: config?.disableS3ExpressSessionAuth ?? import_config28.loadConfig($NODE_DISABLE_S3_EXPRESS_SESSION_AUTH_OPTIONS, loaderConfig),
     eventStreamSerdeProvider: config?.eventStreamSerdeProvider ?? import_event_streams.eventStreamSerdeProvider,
     maxAttempts: config?.maxAttempts ?? import_config28.loadConfig(import_retry3.NODE_MAX_ATTEMPT_CONFIG_OPTIONS, config),
@@ -34322,13 +34095,12 @@ import { mkdirSync as mkdirSync3 } from "fs";
 import { dirname as dirname5 } from "path";
 
 // src/server/database-url.ts
-import { isAbsolute, join as join3 } from "path";
+import { isAbsolute, join as join5 } from "path";
 import { fileURLToPath } from "url";
 
 // src/lib/config.ts
-import { existsSync, readFileSync as readFileSync2, writeFileSync, mkdirSync, copyFileSync, readdirSync, statSync } from "fs";
-import { join as join2, dirname as dirname2 } from "path";
-import { homedir as homedir2 } from "os";
+import { existsSync as existsSync2, readFileSync as readFileSync2, writeFileSync, mkdirSync, copyFileSync, readdirSync, statSync } from "fs";
+import { join as join4, dirname as dirname2 } from "path";
 
 // src/lib/retired-settings.ts
 var RETIRED_ENV_SUFFIXES = ["_STORAGE_MODE", "_DEPLOYMENT_MODE", "_CLOUD_MODE"];
@@ -34376,6 +34148,123 @@ function assertNoRetiredConfigKeys(config, source) {
   }
 }
 
+// src/lib/app-home.ts
+import { existsSync } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join3, resolve } from "path";
+
+// ../../node_modules/.bun/@hasna+paths@0.1.0/node_modules/@hasna/paths/dist/index.js
+import { homedir as homedir2 } from "os";
+import { join as join2 } from "path";
+var KIND_ENV = {
+  config: "HASNA_CONFIG_HOME",
+  data: "HASNA_DATA_HOME",
+  state: "HASNA_STATE_HOME",
+  cache: "HASNA_CACHE_HOME"
+};
+var APP_SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+function assertApp(app) {
+  if (typeof app !== "string" || app.length === 0) {
+    throw new TypeError("paths: app must be a non-empty string");
+  }
+  if (!APP_SLUG_RE.test(app)) {
+    throw new TypeError(`paths: invalid app slug "${app}" \u2014 expected lowercase kebab-case ([a-z0-9]+(-[a-z0-9]+)*)`);
+  }
+}
+function envOf(options) {
+  return options.env ?? process.env;
+}
+function envValue(options, kind) {
+  const value = envOf(options)[KIND_ENV[kind]];
+  return typeof value === "string" && value.length > 0 ? value : undefined;
+}
+function isMacOS(platform) {
+  return platform === "darwin";
+}
+function baseDir(kind, options) {
+  const override = envValue(options, kind);
+  if (override)
+    return override;
+  const home = options.home ?? homedir2();
+  const platform = options.platform ?? process.platform;
+  if (isMacOS(platform)) {
+    switch (kind) {
+      case "config":
+      case "data":
+        return join2(home, "Library", "Application Support", "Hasna");
+      case "cache":
+        return join2(home, "Library", "Caches", "Hasna");
+      case "state":
+        return join2(home, "Library", "Logs", "Hasna");
+    }
+  }
+  switch (kind) {
+    case "config":
+      return join2(home, ".config", "hasna");
+    case "data":
+      return join2(home, ".local", "share", "hasna");
+    case "state":
+      return join2(home, ".local", "state", "hasna");
+    case "cache":
+      return join2(home, ".cache", "hasna");
+  }
+}
+function resolvePath(kind, options) {
+  assertApp(options.app);
+  const appSegment = options.internal === true ? join2("internal", options.app) : options.app;
+  return join2(baseDir(kind, options), appSegment);
+}
+function dataDir(options) {
+  return resolvePath("data", options);
+}
+
+// src/lib/app-home.ts
+var DATA_DIR_ENV = "HASNA_SKILLS_DIR";
+var HASNA_SKILLS_HOME_ENV = "HASNA_SKILLS_HOME";
+var SKILLS_HOME_ENV = "SKILLS_HOME";
+var DEFAULT_SQLITE_FILENAME = "server.db";
+var GLOBAL_CONFIG_FILENAME = "config.json";
+function effectiveHome() {
+  return process.env["HOME"] || process.env["USERPROFILE"] || homedir3() || "/tmp";
+}
+function legacyDataRoot() {
+  return join3(effectiveHome(), ".hasna", "skills");
+}
+function resolverDataRoot(home = effectiveHome()) {
+  return dataDir({ app: "skills", home });
+}
+function adoptResolverDataRoot(resolved, env = process.env) {
+  const dataOverride = env.HASNA_DATA_HOME;
+  if (typeof dataOverride === "string" && dataOverride.trim().length > 0)
+    return true;
+  return existsSync(join3(resolved, DEFAULT_SQLITE_FILENAME)) || existsSync(join3(resolved, GLOBAL_CONFIG_FILENAME));
+}
+function exactDataRoot() {
+  for (const key of [DATA_DIR_ENV, HASNA_SKILLS_HOME_ENV, SKILLS_HOME_ENV]) {
+    const dir = process.env[key]?.trim();
+    if (dir)
+      return resolve(dir);
+  }
+  return;
+}
+function hasExactOverride(env = process.env) {
+  return Boolean(env[DATA_DIR_ENV]?.trim()) || Boolean(env[HASNA_SKILLS_HOME_ENV]?.trim()) || Boolean(env[SKILLS_HOME_ENV]?.trim());
+}
+function hasOperatorOverride(env = process.env) {
+  return hasExactOverride(env) || Boolean(env.HASNA_DATA_HOME?.trim());
+}
+function getDataRoot() {
+  const exact = exactDataRoot();
+  if (exact)
+    return exact;
+  const resolved = resolverDataRoot();
+  return adoptResolverDataRoot(resolved) ? resolve(resolved) : resolve(legacyDataRoot());
+}
+function skillsDataRootForHome(home) {
+  const resolved = resolverDataRoot(home);
+  return adoptResolverDataRoot(resolved) ? resolve(resolved) : resolve(join3(home, ".hasna", "skills"));
+}
+
 // src/lib/config.ts
 var ENUM_KEYS = {
   defaultAgent: ["claude", "codex", "gemini", "pi", "opencode", "all"],
@@ -34390,19 +34279,19 @@ function allowedValues(key) {
   return ENUM_KEYS[key];
 }
 function mergeDirectoryContents(sourceDir, targetDir) {
-  if (!existsSync(sourceDir))
+  if (!existsSync2(sourceDir))
     return;
   mkdirSync(targetDir, { recursive: true });
   for (const entry of readdirSync(sourceDir)) {
-    const sourcePath = join2(sourceDir, entry);
-    const targetPath = join2(targetDir, entry);
+    const sourcePath = join4(sourceDir, entry);
+    const targetPath = join4(targetDir, entry);
     try {
       const sourceStat = statSync(sourcePath);
       if (sourceStat.isDirectory()) {
         mergeDirectoryContents(sourcePath, targetPath);
         continue;
       }
-      if (!existsSync(targetPath))
+      if (!existsSync2(targetPath))
         copyFileSync(sourcePath, targetPath);
     } catch {}
   }
@@ -34427,44 +34316,40 @@ function normalizeConfigValue(key, value) {
     return value.trim() ? value : undefined;
   return;
 }
-var DATA_DIR_ENV = "HASNA_SKILLS_DIR";
 var INSTALLED_SKILLS_DIRNAME = "installed";
 var SKILLS_CACHE_DIRNAME = "skills";
 var LAYOUT_MIGRATION_RECORD = ".layout-migration.json";
 function isOwnerLayoutMigrated(appDir) {
-  return existsSync(join2(appDir, SKILLS_CACHE_DIRNAME, LAYOUT_MIGRATION_RECORD));
+  return existsSync2(join4(appDir, SKILLS_CACHE_DIRNAME, LAYOUT_MIGRATION_RECORD));
 }
 function getDataDir() {
-  const override = process.env[DATA_DIR_ENV];
-  if (override) {
-    try {
-      mkdirSync(override, { recursive: true });
-    } catch {}
-    return override;
-  }
-  const home = process.env["HOME"] || process.env["USERPROFILE"] || homedir2();
-  const newDir = join2(home, ".hasna", "skills");
-  const oldDir = join2(home, ".skills");
-  const oldConfigFile = join2(home, ".skillsrc");
-  mkdirSync(newDir, { recursive: true });
+  const root3 = getDataRoot();
   try {
-    mergeDirectoryContents(oldDir, newDir);
+    mkdirSync(root3, { recursive: true });
   } catch {}
-  if (existsSync(oldConfigFile) && !existsSync(join2(newDir, "config.json"))) {
+  if (hasOperatorOverride())
+    return root3;
+  const home = effectiveHome();
+  const oldDir = join4(home, ".skills");
+  const oldConfigFile = join4(home, ".skillsrc");
+  try {
+    mergeDirectoryContents(oldDir, root3);
+  } catch {}
+  if (existsSync2(oldConfigFile) && !existsSync2(join4(root3, "config.json"))) {
     try {
-      copyFileSync(oldConfigFile, join2(newDir, "config.json"));
+      copyFileSync(oldConfigFile, join4(root3, "config.json"));
     } catch {}
   }
-  return newDir;
+  return root3;
 }
 function getConfigPath(scope) {
   if (scope === "global") {
-    return join2(getDataDir(), "config.json");
+    return join4(getDataDir(), "config.json");
   }
-  return join2(process.cwd(), "skills.config.json");
+  return join4(process.cwd(), "skills.config.json");
 }
 function readConfigFile(path) {
-  if (!existsSync(path))
+  if (!existsSync2(path))
     return {};
   let parsed;
   try {
@@ -34500,7 +34385,7 @@ function saveConfig(key, value, scope = "project") {
   }
   const filePath = getConfigPath(scope);
   let existing = {};
-  if (existsSync(filePath)) {
+  if (existsSync2(filePath)) {
     try {
       existing = JSON.parse(readFileSync2(filePath, "utf-8"));
       if (typeof existing !== "object" || existing === null || Array.isArray(existing)) {
@@ -34511,7 +34396,7 @@ function saveConfig(key, value, scope = "project") {
     }
   } else {
     const dir = dirname2(filePath);
-    if (!existsSync(dir)) {
+    if (!existsSync2(dir)) {
       mkdirSync(dir, { recursive: true });
     }
   }
@@ -34525,7 +34410,7 @@ function unsetConfig(key, scope = "project") {
     throw new Error(`Unknown config key: ${key}. Valid keys: ${validKeys().join(", ")}`);
   }
   const filePath = getConfigPath(scope);
-  if (!existsSync(filePath))
+  if (!existsSync2(filePath))
     return false;
   let existing;
   try {
@@ -34545,14 +34430,14 @@ function unsetConfig(key, scope = "project") {
 }
 
 // src/server/database-url.ts
-var DEFAULT_SQLITE_FILENAME = "server.db";
+var DEFAULT_SQLITE_FILENAME2 = "server.db";
 var SQLITE_MEMORY_PATH = ":memory:";
 var POSTGRES_SCHEMES = new Set(["postgres", "postgresql"]);
 var SQLITE_SCHEMES = new Set(["sqlite", "sqlite3", "file"]);
 var MEMORY_SCHEMES = new Set(["memory"]);
 var SQLITE_EXTENSIONS = [".db", ".sqlite", ".sqlite3", ".db3"];
 function defaultSqlitePath() {
-  return join3(getDataDir(), DEFAULT_SQLITE_FILENAME);
+  return join5(getDataDir(), DEFAULT_SQLITE_FILENAME2);
 }
 function resolveDatabaseTarget(raw) {
   const value = raw?.trim();
@@ -34579,7 +34464,7 @@ function resolveDatabaseTarget(raw) {
     throw new Error(`unsupported database scheme "${scheme}:". Supported: postgres://, postgresql://, sqlite:, file:, ` + `an absolute or relative path to a .db/.sqlite file, ":memory:", or "memory:" (non-durable, tests only). ` + `Leave the setting empty to use the default SQLite database at ${defaultSqlitePath()}.`);
   }
   if (looksLikeSqlitePath(value)) {
-    const path = isAbsolute(value) ? value : join3(process.cwd(), value);
+    const path = isAbsolute(value) ? value : join5(process.cwd(), value);
     return { kind: "sqlite", path, durable: true, label: `sqlite (${path})` };
   }
   throw new Error(`could not resolve a database backend from "${value}". Use postgres://\u2026, sqlite:\u2026, an absolute or ` + `relative path ending in ${SQLITE_EXTENSIONS.join("/")}, ":memory:", or leave it empty for the ` + `default SQLite database at ${defaultSqlitePath()}.`);
@@ -34603,7 +34488,7 @@ function sqlitePathFromUrl(value, scheme) {
     }
     return rest.slice(2).replace(/^\/\/+/, "/");
   }
-  return isAbsolute(rest) ? rest : join3(process.cwd(), rest);
+  return isAbsolute(rest) ? rest : join5(process.cwd(), rest);
 }
 function looksLikeSqlitePath(value) {
   if (value.includes("/"))
@@ -34615,7 +34500,7 @@ function looksLikeSqlitePath(value) {
 import { Database } from "bun:sqlite";
 import { randomUUID as randomUUID2 } from "crypto";
 import { mkdirSync as mkdirSync2, readFileSync as readFileSync3, readdirSync as readdirSync2 } from "fs";
-import { dirname as dirname4, join as join5 } from "path";
+import { dirname as dirname4, join as join7 } from "path";
 
 // src/server/auth.ts
 import { createHash as createHash4 } from "crypto";
@@ -34648,16 +34533,16 @@ function publicPrincipal(partial = {}) {
 }
 
 // src/server/migrations-dir.ts
-import { existsSync as existsSync2 } from "fs";
-import { dirname as dirname3, join as join4 } from "path";
+import { existsSync as existsSync3 } from "fs";
+import { dirname as dirname3, join as join6 } from "path";
 var MIGRATION_DIALECTS = ["postgres", "sqlite"];
 var MAX_WALK_UP = 6;
 function findMigrationsRoot(startDirs = defaultStartDirs()) {
   for (const start of startDirs) {
     let dir = start;
     for (let level = 0;level < MAX_WALK_UP; level += 1) {
-      const candidate = join4(dir, "migrations");
-      if (MIGRATION_DIALECTS.some((dialect) => existsSync2(join4(candidate, dialect))))
+      const candidate = join6(dir, "migrations");
+      if (MIGRATION_DIALECTS.some((dialect) => existsSync3(join6(candidate, dialect))))
         return candidate;
       const parent = dirname3(dir);
       if (parent === dir)
@@ -34671,8 +34556,8 @@ function resolveMigrationsDir(dialect, root3 = findMigrationsRoot()) {
   if (!root3) {
     throw new Error(`could not locate the migrations directory for dialect "${dialect}". ` + `Expected a migrations/${dialect}/ folder alongside the package root.`);
   }
-  const dir = join4(root3, dialect);
-  if (!existsSync2(dir)) {
+  const dir = join6(root3, dialect);
+  if (!existsSync3(dir)) {
     throw new Error(`migrations directory not found: ${dir}`);
   }
   return dir;
@@ -35417,7 +35302,7 @@ function applySqliteMigrations(db, migrationsDir = resolveMigrationsDir("sqlite"
   const appliedNow = [];
   for (const file of files) {
     const version2 = file.replace(/\.sql$/, "");
-    const text = readFileSync3(join5(migrationsDir, file), "utf8");
+    const text = readFileSync3(join7(migrationsDir, file), "utf8");
     const apply = db.transaction(() => {
       const already = db.query("SELECT 1 AS present FROM schema_migrations WHERE version = ? LIMIT 1").get(version2);
       if (already)
@@ -36887,17 +36772,17 @@ function mergeSkillRegistryLists(...groups) {
 }
 
 // src/server/registry.ts
-import { existsSync as existsSync13, readFileSync as readFileSync13 } from "fs";
-import { resolve, sep as sep2 } from "path";
+import { existsSync as existsSync14, readFileSync as readFileSync13 } from "fs";
+import { resolve as resolve2, sep as sep2 } from "path";
 
 // src/lib/registry.ts
-import { existsSync as existsSync8, readFileSync as readFileSync8, readdirSync as readdirSync7 } from "fs";
-import { join as join11 } from "path";
+import { existsSync as existsSync9, readFileSync as readFileSync8, readdirSync as readdirSync7 } from "fs";
+import { join as join13 } from "path";
 
 // src/lib/portable-skills.ts
 import {
   cpSync as cpSync2,
-  existsSync as existsSync7,
+  existsSync as existsSync8,
   mkdirSync as mkdirSync5,
   mkdtempSync,
   readdirSync as readdirSync6,
@@ -36906,7 +36791,7 @@ import {
   statSync as statSync6,
   writeFileSync as writeFileSync3
 } from "fs";
-import { basename as basename2, dirname as dirname7, isAbsolute as isAbsolute3, join as join10, normalize as normalize2 } from "path";
+import { basename as basename2, dirname as dirname7, isAbsolute as isAbsolute3, join as join12, normalize as normalize2 } from "path";
 
 // src/lib/registry-data/development-tools.ts
 var DEVELOPMENT_TOOLS_SKILLS = [
@@ -37626,8 +37511,8 @@ var SKILLS = [
 ];
 
 // src/lib/hosted-skill-set.ts
-import { existsSync as existsSync3, readFileSync as readFileSync4, readdirSync as readdirSync3, statSync as statSync2 } from "fs";
-import { join as join6 } from "path";
+import { existsSync as existsSync4, readFileSync as readFileSync4, readdirSync as readdirSync3, statSync as statSync2 } from "fs";
+import { join as join8 } from "path";
 var HOSTED_RUNTIMES = new Set(["hosted"]);
 var HOSTED_SOURCES = new Set(["remote", "private-hosted"]);
 function normalizeMarker(value) {
@@ -37640,8 +37525,8 @@ function isHostedMetadataPackage(pkg) {
   return HOSTED_RUNTIMES.has(normalizeMarker(skills.runtime)) || HOSTED_SOURCES.has(normalizeMarker(skills.source));
 }
 function isHostedMetadataSkillDir(skillDir) {
-  const pkgPath = join6(skillDir, "package.json");
-  if (!existsSync3(pkgPath))
+  const pkgPath = join8(skillDir, "package.json");
+  if (!existsSync4(pkgPath))
     return false;
   try {
     return isHostedMetadataPackage(JSON.parse(readFileSync4(pkgPath, "utf8")));
@@ -37665,8 +37550,8 @@ var BRACE_SOURCE_EXCLUSION = new RegExp(`^!skills/\\{(${SLUG}(?:,${SLUG})+)\\}/s
 var SINGLE_SOURCE_EXCLUSION = new RegExp(`^!skills/(${SLUG})/src$`);
 
 // src/lib/skill-validation.ts
-import { existsSync as existsSync4, lstatSync, readFileSync as readFileSync5, readdirSync as readdirSync4, statSync as statSync3 } from "fs";
-import { isAbsolute as isAbsolute2, join as join7, normalize } from "path";
+import { existsSync as existsSync5, lstatSync, readFileSync as readFileSync5, readdirSync as readdirSync4, statSync as statSync3 } from "fs";
+import { isAbsolute as isAbsolute2, join as join9, normalize } from "path";
 var VALID_SKILL_KINDS = ["executable", "instruction"];
 var DOC_FILES = ["SKILL.md", "README.md", "CLAUDE.md"];
 var RESERVED_SKILL_ENTRIES = new Set([
@@ -37804,7 +37689,7 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
     binCommands: [],
     docFiles: []
   };
-  if (!existsSync4(skillPath)) {
+  if (!existsSync5(skillPath)) {
     add(issues, "skill.dir_missing", `Skill directory not found: ${skillPath}`);
     return {
       name: bareName,
@@ -37819,7 +37704,7 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
     add(issues, "skill.name_invalid", `Skill name '${bareName}' must use lowercase letters, numbers, dots, underscores, or hyphens`);
   }
   for (const entry of readdirSync4(skillPath).sort()) {
-    const entryPath = join7(skillPath, entry);
+    const entryPath = join9(skillPath, entry);
     if (RESERVED_SKILL_ENTRIES.has(entry)) {
       add(issues, "skill.reserved_file", `Reserved file '${entry}' is not allowed in skill packages`);
     }
@@ -37831,14 +37716,14 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
     }
   }
   for (const docFile of DOC_FILES) {
-    if (existsSync4(join7(skillPath, docFile)))
+    if (existsSync5(join9(skillPath, docFile)))
       metadata.docFiles.push(docFile);
   }
   if (metadata.docFiles.length === 0) {
     add(issues, "skill.docs_missing", "Missing documentation file: expected SKILL.md, README.md, or CLAUDE.md");
   }
-  const skillMdPath = join7(skillPath, "SKILL.md");
-  if (existsSync4(skillMdPath)) {
+  const skillMdPath = join9(skillPath, "SKILL.md");
+  if (existsSync5(skillMdPath)) {
     const frontmatter = parseSkillFrontmatter(readFileSync5(skillMdPath, "utf-8"));
     if (!frontmatter) {
       add(warnings, "skill.frontmatter_missing", "SKILL.md has no YAML frontmatter");
@@ -37881,8 +37766,8 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
   }
   metadata.kind = resolvedKind;
   const isInstruction = resolvedKind === "instruction";
-  const pkgPath = join7(skillPath, "package.json");
-  if (!existsSync4(pkgPath)) {
+  const pkgPath = join9(skillPath, "package.json");
+  if (!existsSync5(pkgPath)) {
     if (!isInstruction)
       add(issues, "package.missing", "Missing package.json");
   } else {
@@ -37940,8 +37825,8 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
               add(issues, "package.bin_target_unsafe", `package.json bin '${command3}' target '${target}' must stay inside the skill directory`);
               continue;
             }
-            const targetPath = join7(skillPath, target);
-            if (!existsSync4(targetPath)) {
+            const targetPath = join9(skillPath, target);
+            if (!existsSync5(targetPath)) {
               add(warnings, "package.bin_target_missing", `package.json bin '${command3}' target '${target}' is not present before build`);
             } else if (statSync3(targetPath).isDirectory()) {
               add(issues, "package.bin_target_directory", `package.json bin '${command3}' target '${target}' must point to a file, not a directory`);
@@ -37958,17 +37843,17 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
     metadata.runtime = "none";
   } else {
     metadata.runtime = hostedMetadata ? "hosted" : "local";
-    const srcDir = join7(skillPath, "src");
+    const srcDir = join9(skillPath, "src");
     if (hostedMetadata) {
-      if (existsSync4(srcDir)) {
+      if (existsSync5(srcDir)) {
         add(issues, "skill.hosted_source_forbidden", "Hosted metadata skills must not include local implementation source");
       }
-    } else if (!existsSync4(srcDir)) {
+    } else if (!existsSync5(srcDir)) {
       add(issues, "skill.src_missing", "Missing src/ directory");
-    } else if (!existsSync4(join7(srcDir, "index.ts")) && !existsSync4(join7(srcDir, "index.js"))) {
+    } else if (!existsSync5(join9(srcDir, "index.ts")) && !existsSync5(join9(srcDir, "index.js"))) {
       add(issues, "skill.src_index_missing", "Missing src/index.ts or src/index.js");
     } else {
-      const indexPath = existsSync4(join7(srcDir, "index.ts")) ? join7(srcDir, "index.ts") : join7(srcDir, "index.js");
+      const indexPath = existsSync5(join9(srcDir, "index.ts")) ? join9(srcDir, "index.ts") : join9(srcDir, "index.js");
       const size = statSync3(indexPath).size;
       if (size < 50)
         add(warnings, "skill.src_index_minimal", `Source entry point is very small (${size}B)`);
@@ -37992,8 +37877,8 @@ function validateRegistryConsistency(registry, skillsDir) {
     seen.add(name);
     return false;
   })));
-  const skillDirs = existsSync4(skillsDir) ? readdirSync4(skillsDir).filter((entry) => {
-    const fullPath = join7(skillsDir, entry);
+  const skillDirs = existsSync5(skillsDir) ? readdirSync4(skillsDir).filter((entry) => {
+    const fullPath = join9(skillsDir, entry);
     return !entry.startsWith(".") && entry !== "_common" && statSync3(fullPath).isDirectory();
   }) : [];
   const directoryNames = new Set(skillDirs);
@@ -38010,8 +37895,8 @@ function validateRegistryConsistency(registry, skillsDir) {
 
 // src/lib/skill-hash.ts
 import { createHash as createHash7 } from "crypto";
-import { existsSync as existsSync5, readdirSync as readdirSync5, readFileSync as readFileSync6, statSync as statSync4 } from "fs";
-import { join as join8, sep } from "path";
+import { existsSync as existsSync6, readdirSync as readdirSync5, readFileSync as readFileSync6, statSync as statSync4 } from "fs";
+import { join as join10, sep } from "path";
 var CONTENT_HASH_ALGORITHM = "sha256";
 var HASH_EXCLUDE_DIRS = new Set([".git", "node_modules", "dist", "build", ".turbo"]);
 var HASH_COVERAGE = [
@@ -38070,8 +37955,8 @@ function collectBundleFiles(skillPath) {
     if (seen.has(entry))
       continue;
     seen.add(entry);
-    const absolute = join8(skillPath, entry);
-    if (!existsSync5(absolute))
+    const absolute = join10(skillPath, entry);
+    if (!existsSync6(absolute))
       continue;
     if (statSync4(absolute).isDirectory())
       collectDirectory(files, absolute, entry);
@@ -38084,7 +37969,7 @@ function collectDirectory(files, dir, rel) {
   for (const entry of readdirSync5(dir).sort()) {
     if (entry.startsWith("."))
       continue;
-    const absolute = join8(dir, entry);
+    const absolute = join10(dir, entry);
     const childRel = `${rel}/${entry}`;
     let stats;
     try {
@@ -38304,14 +38189,14 @@ function validateRuntimeContract(manifest, issues, strict) {
 // src/lib/portable-skills-files.ts
 import {
   cpSync,
-  existsSync as existsSync6,
+  existsSync as existsSync7,
   lstatSync as lstatSync2,
   mkdirSync as mkdirSync4,
   readFileSync as readFileSync7,
   realpathSync,
   writeFileSync as writeFileSync2
 } from "fs";
-import { basename, dirname as dirname6, join as join9, relative } from "path";
+import { basename, dirname as dirname6, join as join11, relative } from "path";
 var ANY_SEGMENT_COPY_EXCLUDES = new Set([
   ".git",
   ".DS_Store",
@@ -38354,12 +38239,12 @@ function normalizePortableSkillName(name) {
   return normalized;
 }
 function readPortableSkillManifest(skillPath, fallbackName = basename(skillPath)) {
-  const skillJsonPath = join9(skillPath, "skill.json");
-  const skillMdPath = join9(skillPath, "SKILL.md");
-  const pkgPath = join9(skillPath, "package.json");
-  const jsonManifest = existsSync6(skillJsonPath) ? readJsonObject(skillJsonPath) : undefined;
-  const frontmatter = existsSync6(skillMdPath) ? parseSkillFrontmatter(readFileSync7(skillMdPath, "utf-8")) ?? undefined : undefined;
-  const pkg = existsSync6(pkgPath) ? readJsonObject(pkgPath) : undefined;
+  const skillJsonPath = join11(skillPath, "skill.json");
+  const skillMdPath = join11(skillPath, "SKILL.md");
+  const pkgPath = join11(skillPath, "package.json");
+  const jsonManifest = existsSync7(skillJsonPath) ? readJsonObject(skillJsonPath) : undefined;
+  const frontmatter = existsSync7(skillMdPath) ? parseSkillFrontmatter(readFileSync7(skillMdPath, "utf-8")) ?? undefined : undefined;
+  const pkg = existsSync7(pkgPath) ? readJsonObject(pkgPath) : undefined;
   const name = normalizePortableSkillName(stringField(jsonManifest, "name") ?? frontmatter?.name ?? stringValue(pkg?.name) ?? fallbackName);
   const description = stringField(jsonManifest, "description") ?? frontmatter?.description ?? stringValue(pkg?.description) ?? `${name} skill`;
   const version2 = stringField(jsonManifest, "version") ?? frontmatter?.version ?? stringValue(pkg?.version) ?? PORTABLE_SKILL_DEFAULT_VERSION;
@@ -38405,7 +38290,7 @@ function createInstructionManifest(name, options) {
 }
 function writeInstructionSkillTemplate(skillPath, manifest) {
   mkdirSync4(skillPath, { recursive: true });
-  writeFileSync2(join9(skillPath, "SKILL.md"), renderInstructionSkillMd(manifest));
+  writeFileSync2(join11(skillPath, "SKILL.md"), renderInstructionSkillMd(manifest));
   writeSkillJsonWithHash(skillPath, manifest);
 }
 function renderInstructionSkillMd(manifest) {
@@ -38454,12 +38339,12 @@ function createPortableManifest(name, options) {
   };
 }
 function writePortableSkillTemplate(skillPath, manifest) {
-  mkdirSync4(join9(skillPath, "src"), { recursive: true });
-  writeFileSync2(join9(skillPath, "SKILL.md"), renderSkillMd(manifest));
-  writeFileSync2(join9(skillPath, "AGENTS.md"), renderAgentsMd(manifest));
-  writeFileSync2(join9(skillPath, "package.json"), renderPackageJson(manifest));
-  writeFileSync2(join9(skillPath, "tsconfig.json"), renderTsconfig());
-  writeFileSync2(join9(skillPath, "src", "index.ts"), renderEntrypoint(manifest));
+  mkdirSync4(join11(skillPath, "src"), { recursive: true });
+  writeFileSync2(join11(skillPath, "SKILL.md"), renderSkillMd(manifest));
+  writeFileSync2(join11(skillPath, "AGENTS.md"), renderAgentsMd(manifest));
+  writeFileSync2(join11(skillPath, "package.json"), renderPackageJson(manifest));
+  writeFileSync2(join11(skillPath, "tsconfig.json"), renderTsconfig());
+  writeFileSync2(join11(skillPath, "src", "index.ts"), renderEntrypoint(manifest));
   writeSkillJsonWithHash(skillPath, manifest);
 }
 function fillContractDefaults(manifest, entrypoint) {
@@ -38484,7 +38369,7 @@ function writeSkillJsonWithHash(skillPath, manifest) {
       content_hash: undefined
     }
   };
-  writeFileSync2(join9(skillPath, "skill.json"), `${JSON.stringify({ ...existing, ...renderSkillJsonObject(withoutHash) }, null, 2)}
+  writeFileSync2(join11(skillPath, "skill.json"), `${JSON.stringify({ ...existing, ...renderSkillJsonObject(withoutHash) }, null, 2)}
 `);
   const hash = computeContentHash(skillPath);
   const withHash = {
@@ -38494,13 +38379,13 @@ function writeSkillJsonWithHash(skillPath, manifest) {
       content_hash: hash
     }
   };
-  writeFileSync2(join9(skillPath, "skill.json"), `${JSON.stringify({ ...existing, ...renderSkillJsonObject(withHash) }, null, 2)}
+  writeFileSync2(join11(skillPath, "skill.json"), `${JSON.stringify({ ...existing, ...renderSkillJsonObject(withHash) }, null, 2)}
 `);
   return withHash;
 }
 function readExistingSkillJson(skillPath) {
-  const path = join9(skillPath, "skill.json");
-  if (!existsSync6(path))
+  const path = join11(skillPath, "skill.json");
+  if (!existsSync7(path))
     return {};
   try {
     const parsed = JSON.parse(readFileSync7(path, "utf-8"));
@@ -38533,28 +38418,28 @@ function ensurePortableSkillFiles(skillPath, manifest) {
     tags: next.tags?.length ? next.tags : ["custom", next.name]
   };
   const entry = next.commands[0]?.entry ?? "src/index.ts";
-  if (entry && !existsSync6(join9(skillPath, entry))) {
-    mkdirSync4(dirname6(join9(skillPath, entry)), { recursive: true });
-    writeFileSync2(join9(skillPath, entry), renderEntrypoint(next));
+  if (entry && !existsSync7(join11(skillPath, entry))) {
+    mkdirSync4(dirname6(join11(skillPath, entry)), { recursive: true });
+    writeFileSync2(join11(skillPath, entry), renderEntrypoint(next));
   }
-  if (!existsSync6(join9(skillPath, "SKILL.md")))
-    writeFileSync2(join9(skillPath, "SKILL.md"), renderSkillMd(next));
+  if (!existsSync7(join11(skillPath, "SKILL.md")))
+    writeFileSync2(join11(skillPath, "SKILL.md"), renderSkillMd(next));
   else
-    writeFileSync2(join9(skillPath, "SKILL.md"), ensureSkillMdFrontmatter(readFileSync7(join9(skillPath, "SKILL.md"), "utf-8"), next));
-  if (!existsSync6(join9(skillPath, "AGENTS.md")))
-    writeFileSync2(join9(skillPath, "AGENTS.md"), renderAgentsMd(next));
+    writeFileSync2(join11(skillPath, "SKILL.md"), ensureSkillMdFrontmatter(readFileSync7(join11(skillPath, "SKILL.md"), "utf-8"), next));
+  if (!existsSync7(join11(skillPath, "AGENTS.md")))
+    writeFileSync2(join11(skillPath, "AGENTS.md"), renderAgentsMd(next));
   ensurePackageJson(skillPath, next);
-  if (!existsSync6(join9(skillPath, "tsconfig.json")))
-    writeFileSync2(join9(skillPath, "tsconfig.json"), renderTsconfig());
+  if (!existsSync7(join11(skillPath, "tsconfig.json")))
+    writeFileSync2(join11(skillPath, "tsconfig.json"), renderTsconfig());
   writeSkillJsonWithHash(skillPath, next);
   return readPortableSkillManifest(skillPath, next.name);
 }
 function ensurePackageJson(skillPath, manifest) {
-  const pkgPath = join9(skillPath, "package.json");
+  const pkgPath = join11(skillPath, "package.json");
   const first = manifest.commands[0] ?? { name: manifest.name, entry: "src/index.ts" };
   const commandName = normalizePortableSkillName(first.name || manifest.name);
   const entry = (first.entry ?? "src/index.ts").replace(/^\.\//, "");
-  if (!existsSync6(pkgPath)) {
+  if (!existsSync7(pkgPath)) {
     writeFileSync2(pkgPath, renderPackageJson(manifest));
     return;
   }
@@ -38597,8 +38482,8 @@ function ensureInstructionSkillFiles(skillPath, manifest) {
     inputs: [],
     commands: []
   };
-  if (!existsSync6(join9(skillPath, "SKILL.md"))) {
-    writeFileSync2(join9(skillPath, "SKILL.md"), renderSkillMd(next));
+  if (!existsSync7(join11(skillPath, "SKILL.md"))) {
+    writeFileSync2(join11(skillPath, "SKILL.md"), renderSkillMd(next));
   }
   writeSkillJsonWithHash(skillPath, next);
   return readPortableSkillManifest(skillPath, next.name);
@@ -38890,18 +38775,18 @@ var LEGACY_CUSTOM_DIRNAME = "custom";
 function getPortableSkillsRoot(options = {}) {
   if (options.rootDir)
     return options.rootDir;
-  const appDir = options.homeDir ? join10(options.homeDir, ".hasna", "skills") : getDataDir();
-  const cache3 = join10(appDir, SKILLS_CACHE_DIRNAME);
+  const appDir = options.homeDir ? join12(options.homeDir, ".hasna", "skills") : getDataDir();
+  const cache3 = join12(appDir, SKILLS_CACHE_DIRNAME);
   if (isOwnerLayoutMigrated(appDir) && safeIsDirectory(cache3))
     return cache3;
-  const installed = join10(appDir, INSTALLED_SKILLS_DIRNAME);
+  const installed = join12(appDir, INSTALLED_SKILLS_DIRNAME);
   migrateLegacySkillLayout(appDir, installed);
   return installed;
 }
 function looksLikeSkillDirectory(path) {
   if (!safeIsDirectory(path))
     return false;
-  return existsSync7(join10(path, "SKILL.md")) || existsSync7(join10(path, "skill.json")) || existsSync7(join10(path, "package.json"));
+  return existsSync8(join12(path, "SKILL.md")) || existsSync8(join12(path, "skill.json")) || existsSync8(join12(path, "package.json"));
 }
 function migrateLegacySkillLayout(appDir, installed) {
   if (!safeIsDirectory(appDir))
@@ -38911,7 +38796,7 @@ function migrateLegacySkillLayout(appDir, installed) {
     for (const entry of readdirSync6(appDir)) {
       if (entry.startsWith(".") || entry === INSTALLED_SKILLS_DIRNAME)
         continue;
-      const path = join10(appDir, entry);
+      const path = join12(appDir, entry);
       if (entry === LEGACY_CUSTOM_DIRNAME) {
         if (!safeIsDirectory(path))
           continue;
@@ -38919,7 +38804,7 @@ function migrateLegacySkillLayout(appDir, installed) {
           for (const nested of readdirSync6(path)) {
             if (nested.startsWith("."))
               continue;
-            const nestedPath = join10(path, nested);
+            const nestedPath = join12(path, nested);
             if (looksLikeSkillDirectory(nestedPath))
               candidates.push({ from: nestedPath, name: nested });
           }
@@ -38933,10 +38818,10 @@ function migrateLegacySkillLayout(appDir, installed) {
     return;
   }
   for (const { from, name } of candidates) {
-    const target = join10(installed, name);
-    if (existsSync7(target))
+    const target = join12(installed, name);
+    if (existsSync8(target))
       continue;
-    const staging = join10(installed, `.migrating-${name}-${process.pid}`);
+    const staging = join12(installed, `.migrating-${name}-${process.pid}`);
     try {
       rmSync(staging, { recursive: true, force: true });
       cpSync2(from, staging, { recursive: true, errorOnExist: false });
@@ -38949,7 +38834,7 @@ function migrateLegacySkillLayout(appDir, installed) {
   }
 }
 function getPortableSkillPath(name, options = {}) {
-  return join10(getPortableSkillsRoot(options), normalizePortableSkillName(name));
+  return join12(getPortableSkillsRoot(options), normalizePortableSkillName(name));
 }
 function findPortableSkill(name, options = {}) {
   let normalized;
@@ -38959,7 +38844,7 @@ function findPortableSkill(name, options = {}) {
     return null;
   }
   const path = getPortableSkillPath(normalized, options);
-  if (!existsSync7(path) || !statSync6(path).isDirectory())
+  if (!existsSync8(path) || !statSync6(path).isDirectory())
     return null;
   try {
     return summarizePortableSkill(path, normalized);
@@ -38975,7 +38860,7 @@ function listPortableSkills(options = {}) {
   for (const entry of readdirSync6(root3).sort()) {
     if (entry.startsWith("."))
       continue;
-    const path = join10(root3, entry);
+    const path = join12(root3, entry);
     if (!safeIsDirectory(path))
       continue;
     try {
@@ -39009,8 +38894,8 @@ function isOfficialSkillName(name) {
 function scaffoldPortableSkill(name, options = {}) {
   const skillName = normalizePortableSkillName(name);
   const root3 = getPortableSkillsRoot(options);
-  const skillPath = join10(root3, skillName);
-  if (existsSync7(skillPath)) {
+  const skillPath = join12(root3, skillName);
+  if (existsSync8(skillPath)) {
     if (!options.overwrite)
       throw new Error(`Skill '${skillName}' already exists at ${skillPath}`);
     rmSync(skillPath, { recursive: true, force: true });
@@ -39028,7 +38913,7 @@ function scaffoldPortableSkill(name, options = {}) {
 }
 function portPortableSkillDirectory(sourceDir, options = {}) {
   const absoluteSource = normalize2(sourceDir);
-  if (!existsSync7(absoluteSource) || !statSync6(absoluteSource).isDirectory()) {
+  if (!existsSync8(absoluteSource) || !statSync6(absoluteSource).isDirectory()) {
     throw new Error(`Import directory not found: ${sourceDir}`);
   }
   const continueOnError = options.continueOnError ?? true;
@@ -39041,7 +38926,7 @@ function portPortableSkillDirectory(sourceDir, options = {}) {
   const skipped = [];
   const entries = readdirSync6(absoluteSource, { withFileTypes: true }).map((entry) => entry.name).filter((entryName) => !entryName.startsWith(".")).sort();
   for (const entryName of entries) {
-    const childPath = join10(absoluteSource, entryName);
+    const childPath = join12(absoluteSource, entryName);
     if (!safeIsDirectory(childPath))
       continue;
     if (!isSkillCandidate(childPath)) {
@@ -39070,11 +38955,11 @@ function portPortableSkillDirectory(sourceDir, options = {}) {
   };
 }
 function isSkillCandidate(dir) {
-  return existsSync7(join10(dir, "SKILL.md")) || existsSync7(join10(dir, "skill.json")) || existsSync7(join10(dir, "package.json"));
+  return existsSync8(join12(dir, "SKILL.md")) || existsSync8(join12(dir, "skill.json")) || existsSync8(join12(dir, "package.json"));
 }
 function portPortableSkill(sourcePath, options = {}) {
   const absoluteSource = normalize2(sourcePath);
-  if (!existsSync7(absoluteSource) || !statSync6(absoluteSource).isDirectory()) {
+  if (!existsSync8(absoluteSource) || !statSync6(absoluteSource).isDirectory()) {
     throw new Error(`Skill source directory not found: ${sourcePath}`);
   }
   const inferred = readPortableSkillManifest(absoluteSource, basename2(absoluteSource));
@@ -39086,8 +38971,8 @@ function portPortableSkill(sourcePath, options = {}) {
     throw new Error(`${via} Importing it would shadow the official '${skillName}'. ` + `Pass --name to choose a different name, or --allow-shadow to override deliberately.`);
   }
   const root3 = getPortableSkillsRoot(options);
-  const destination = join10(root3, skillName);
-  if (existsSync7(destination)) {
+  const destination = join12(root3, skillName);
+  if (existsSync8(destination)) {
     if (!options.overwrite)
       throw new Error(`Skill '${skillName}' already exists at ${destination}`);
     rmSync(destination, { recursive: true, force: true });
@@ -39129,10 +39014,10 @@ function buildCorpusManifest(input, name) {
 function writeCorpusSkill(input, options = {}) {
   const name = normalizePortableSkillName(input.name);
   const root3 = getPortableSkillsRoot(options);
-  const skillPath = join10(root3, name);
-  const created = !existsSync7(skillPath);
+  const skillPath = join12(root3, name);
+  const created = !existsSync8(skillPath);
   mkdirSync5(skillPath, { recursive: true });
-  writeFileSync3(join10(skillPath, "SKILL.md"), input.skillMd);
+  writeFileSync3(join12(skillPath, "SKILL.md"), input.skillMd);
   const manifest = buildCorpusManifest(input, name);
   writeSkillJsonWithHash(skillPath, manifest);
   return { name, path: skillPath, manifest, created };
@@ -39140,19 +39025,19 @@ function writeCorpusSkill(input, options = {}) {
 function installCorpusSkillAtomically(input, options = {}) {
   const name = normalizePortableSkillName(input.name);
   const root3 = getPortableSkillsRoot(options);
-  const target = join10(root3, name);
-  const created = !existsSync7(target);
+  const target = join12(root3, name);
+  const created = !existsSync8(target);
   mkdirSync5(root3, { recursive: true });
-  const staging = mkdtempSync(join10(root3, `.pull-${name}-`));
+  const staging = mkdtempSync(join12(root3, `.pull-${name}-`));
   let moved = false;
   let backup = null;
   try {
-    writeFileSync3(join10(staging, "SKILL.md"), input.skillMd);
+    writeFileSync3(join12(staging, "SKILL.md"), input.skillMd);
     const manifest = buildCorpusManifest(input, name);
     writeSkillJsonWithHash(staging, manifest);
-    if (existsSync7(target)) {
-      backup = mkdtempSync(join10(root3, `.pull-backup-${name}-`));
-      renameSync(target, join10(backup, name));
+    if (existsSync8(target)) {
+      backup = mkdtempSync(join12(root3, `.pull-backup-${name}-`));
+      renameSync(target, join12(backup, name));
       moved = true;
     }
     renameSync(staging, target);
@@ -39161,9 +39046,9 @@ function installCorpusSkillAtomically(input, options = {}) {
     return { name, path: target, manifest, created };
   } catch (error) {
     rmSync(staging, { recursive: true, force: true });
-    if (moved && backup && existsSync7(join10(backup, name))) {
+    if (moved && backup && existsSync8(join12(backup, name))) {
       try {
-        renameSync(join10(backup, name), target);
+        renameSync(join12(backup, name), target);
       } catch {}
     }
     throw error;
@@ -39175,10 +39060,10 @@ function validatePortableSkillDirectory(name, skillPath) {
   const issues = [...base.issues];
   const warnings = [...base.warnings];
   let manifest;
-  if (existsSync7(skillPath)) {
-    const skillJsonPath = join10(skillPath, "skill.json");
-    const skillMdPath = join10(skillPath, "SKILL.md");
-    if (!existsSync7(skillJsonPath) && !existsSync7(skillMdPath)) {
+  if (existsSync8(skillPath)) {
+    const skillJsonPath = join12(skillPath, "skill.json");
+    const skillMdPath = join12(skillPath, "SKILL.md");
+    if (!existsSync8(skillJsonPath) && !existsSync8(skillMdPath)) {
       add3(issues, "portable.manifest_missing", "Missing portable manifest: expected SKILL.md frontmatter and/or skill.json");
     }
     try {
@@ -39197,7 +39082,7 @@ function validatePortableSkillDirectory(name, skillPath) {
         add3(issues, "portable.version_missing", "Portable manifest missing version");
       }
       const contractIssues = validatePortableManifestContract(manifest, {
-        strict: existsSync7(join10(skillPath, "skill.json")),
+        strict: existsSync8(join12(skillPath, "skill.json")),
         skillPath
       });
       for (const issue of contractIssues)
@@ -39233,8 +39118,8 @@ function validatePortableSkillDirectory(name, skillPath) {
               add3(issues, "portable.command_entry_unsafe", `Command '${command3.name}' entry '${command3.entry}' must stay inside the skill directory`);
               continue;
             }
-            const entryPath = join10(skillPath, command3.entry);
-            if (!existsSync7(entryPath))
+            const entryPath = join12(skillPath, command3.entry);
+            if (!existsSync8(entryPath))
               add3(issues, "portable.command_entry_missing", `Command '${command3.name}' entry '${command3.entry}' is missing`);
             else if (statSync6(entryPath).isDirectory())
               add3(issues, "portable.command_entry_directory", `Command '${command3.name}' entry '${command3.entry}' must be a file`);
@@ -39244,7 +39129,7 @@ function validatePortableSkillDirectory(name, skillPath) {
     } catch (error) {
       add3(issues, "portable.manifest_invalid", error.message);
     }
-    if (manifest?.kind !== "instruction" && !existsSync7(join10(skillPath, "AGENTS.md"))) {
+    if (manifest?.kind !== "instruction" && !existsSync8(join12(skillPath, "AGENTS.md"))) {
       add3(issues, "portable.agents_missing", "Missing AGENTS.md with build-out instructions for coding agents");
     }
   }
@@ -39280,13 +39165,13 @@ async function runPortableSkill(name, args, options = {}) {
   if (!isSafeRelativePath2(command3.entry)) {
     return { exitCode: 1, error: `Portable skill '${name}' command entry is unsafe` };
   }
-  const entryPath = join10(skill.path, command3.entry);
-  if (!existsSync7(entryPath)) {
+  const entryPath = join12(skill.path, command3.entry);
+  if (!existsSync8(entryPath)) {
     return { exitCode: 1, error: `Entry point '${command3.entry}' not found in portable skill '${name}'` };
   }
-  const pkgPath = join10(skill.path, "package.json");
-  const nodeModules = join10(skill.path, "node_modules");
-  if (existsSync7(pkgPath) && !existsSync7(nodeModules) && hasPackageDependencies(pkgPath)) {
+  const pkgPath = join12(skill.path, "package.json");
+  const nodeModules = join12(skill.path, "node_modules");
+  if (existsSync8(pkgPath) && !existsSync8(nodeModules) && hasPackageDependencies(pkgPath)) {
     const install = Bun.spawn(["bun", "install", "--no-save"], {
       cwd: skill.path,
       stdout: "pipe",
@@ -39508,7 +39393,7 @@ function parseSkillMdFrontmatter(content) {
   return Object.keys(result).length > 0 ? result : null;
 }
 function discoverSkillsInDir(dir, source = "custom") {
-  if (!existsSync8(dir))
+  if (!existsSync9(dir))
     return [];
   const result = [];
   try {
@@ -39516,8 +39401,8 @@ function discoverSkillsInDir(dir, source = "custom") {
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const skillMdPath = join11(dir, entry.name, "SKILL.md");
-      if (!existsSync8(skillMdPath))
+      const skillMdPath = join13(dir, entry.name, "SKILL.md");
+      if (!existsSync9(skillMdPath))
         continue;
       let content;
       try {
@@ -39536,7 +39421,7 @@ function discoverSkillsInDir(dir, source = "custom") {
         category: fm.category || "Development Tools",
         tags: fm.tags || [],
         ...fm.kind ? { kind: fm.kind } : {},
-        ...isHostedMetadataSkillDir(join11(dir, entry.name)) ? { serverOwned: true } : {},
+        ...isHostedMetadataSkillDir(join13(dir, entry.name)) ? { serverOwned: true } : {},
         source
       });
     }
@@ -39545,16 +39430,16 @@ function discoverSkillsInDir(dir, source = "custom") {
 }
 function findExtensionSkillPath(name) {
   const config = loadConfig4();
-  if (!config.extensionsDir || !existsSync8(config.extensionsDir))
+  if (!config.extensionsDir || !existsSync9(config.extensionsDir))
     return null;
   try {
     const entries = readdirSync7(config.extensionsDir, { withFileTypes: true });
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const skillDir = join11(config.extensionsDir, entry.name);
-      const skillMdPath = join11(skillDir, "SKILL.md");
-      if (!existsSync8(skillMdPath))
+      const skillDir = join13(config.extensionsDir, entry.name);
+      const skillMdPath = join13(skillDir, "SKILL.md");
+      if (!existsSync9(skillMdPath))
         continue;
       let content;
       try {
@@ -39586,12 +39471,12 @@ function loadRegistry(cwd) {
   if (registryCache && registryCacheKey === rootKey && now - registryCacheTime < REGISTRY_CACHE_TTL) {
     return registryCache;
   }
-  const dataDir = getDataDir();
+  const dataDir2 = getDataDir();
   const config = loadConfig4();
   const official = SKILLS.map((s2) => ({ ...s2, source: "official" }));
   const extensions = config.extensionsDir ? discoverSkillsInDir(config.extensionsDir, "extension") : [];
   const portableCustom = listPortableSkillMetas();
-  const legacyCustom = discoverSkillsInDir(join11(dataDir, "custom"));
+  const legacyCustom = discoverSkillsInDir(join13(dataDir2, "custom"));
   const globalCustom = mergeCustomSkills([...legacyCustom, ...portableCustom]);
   registryCache = mergeSkillRegistryLists(official, extensions, globalCustom);
   registryCacheTime = now;
@@ -39639,19 +39524,19 @@ function getAllTags() {
 }
 
 // src/lib/skillinfo.ts
-import { existsSync as existsSync12, readFileSync as readFileSync12 } from "fs";
-import { join as join15 } from "path";
+import { existsSync as existsSync13, readFileSync as readFileSync12 } from "fs";
+import { join as join17 } from "path";
 
 // src/lib/installer.ts
-import { existsSync as existsSync11, readFileSync as readFileSync11, rmSync as rmSync3 } from "fs";
-import { dirname as dirname9, join as join14 } from "path";
-import { homedir as homedir4 } from "os";
+import { existsSync as existsSync12, readFileSync as readFileSync11, rmSync as rmSync3 } from "fs";
+import { dirname as dirname9, join as join16 } from "path";
+import { homedir as homedir5 } from "os";
 import { fileURLToPath as fileURLToPath2 } from "url";
 
 // src/lib/agent-sync.ts
 import {
   cpSync as cpSync3,
-  existsSync as existsSync9,
+  existsSync as existsSync10,
   mkdirSync as mkdirSync6,
   mkdtempSync as mkdtempSync2,
   readFileSync as readFileSync9,
@@ -39661,8 +39546,8 @@ import {
   statSync as statSync7,
   writeFileSync as writeFileSync4
 } from "fs";
-import { homedir as homedir3 } from "os";
-import { basename as basename3, dirname as dirname8, join as join12 } from "path";
+import { homedir as homedir4 } from "os";
+import { basename as basename3, dirname as dirname8, join as join14 } from "path";
 // src/lib/home-migration.ts
 function resolveCorpusRoot(options = {}) {
   return getPortableSkillsRoot(options);
@@ -39684,12 +39569,12 @@ function resolveSyncAgents(arg) {
   }
   return [arg];
 }
-function agentGlobalSkillsDir(agent, homeDir = homedir3()) {
+function agentGlobalSkillsDir(agent, homeDir = homedir4()) {
   switch (agent) {
     case "opencode":
-      return join12(homeDir, ".config", "opencode", "skills");
+      return join14(homeDir, ".config", "opencode", "skills");
     default:
-      return join12(homeDir, `.${agent}`, "skills");
+      return join14(homeDir, `.${agent}`, "skills");
   }
 }
 function adaptSkillMdForAgent(skillMd, agent) {
@@ -39748,8 +39633,8 @@ function resolveSyncCorpus(options = {}) {
 function packageSourceRoots(source) {
   const roots = [];
   for (const sub of ["skills"]) {
-    const candidate = join12(source, sub);
-    if (existsSync9(candidate) && isDirectory(candidate))
+    const candidate = join14(source, sub);
+    if (existsSync10(candidate) && isDirectory(candidate))
       roots.push(candidate);
   }
   if (roots.length > 0)
@@ -39764,10 +39649,10 @@ function containsSkillDirectories(path) {
     return false;
   }
   return entries.some((entry) => {
-    const candidate = join12(path, entry);
+    const candidate = join14(path, entry);
     if (!isDirectory(candidate))
       return false;
-    return existsSync9(join12(candidate, "SKILL.md")) || existsSync9(join12(candidate, "skill.json")) || existsSync9(join12(candidate, "package.json"));
+    return existsSync10(join14(candidate, "SKILL.md")) || existsSync10(join14(candidate, "skill.json")) || existsSync10(join14(candidate, "package.json"));
   });
 }
 function isDirectory(path) {
@@ -39780,7 +39665,7 @@ function isDirectory(path) {
 function syncSkillsToAgents(options = {}) {
   const requested = normalizeRequested(options.names);
   const agents = options.agents?.length ? options.agents : [...SYNC_AGENTS];
-  const homeDir = options.homeDir ?? homedir3();
+  const homeDir = options.homeDir ?? homedir4();
   const { roots, source } = resolveSyncCorpus(options);
   const corpus = listPortableSkillsAcrossRoots(roots);
   const byName = new Map(corpus.map((skill) => [skill.name, skill]));
@@ -39806,7 +39691,7 @@ function syncSkillsToAgents(options = {}) {
         actions.push({
           skill: name,
           agent,
-          path: join12(agentGlobalSkillsDir(agent, homeDir), name, "SKILL.md"),
+          path: join14(agentGlobalSkillsDir(agent, homeDir), name, "SKILL.md"),
           action: "skip",
           reason: "not found in this machine's corpus"
         });
@@ -39835,8 +39720,8 @@ function syncSkillsToAgents(options = {}) {
   return { actions };
 }
 function writeManagedAgentSkill(params) {
-  const homeDir = params.homeDir ?? homedir3();
-  const dir = join12(agentGlobalSkillsDir(params.agent, homeDir), params.skill);
+  const homeDir = params.homeDir ?? homedir4();
+  const dir = join14(agentGlobalSkillsDir(params.agent, homeDir), params.skill);
   const result = writeManagedSkillDir(dir, params.skillMd, {
     skill: params.skill,
     source: params.source,
@@ -39853,11 +39738,11 @@ function writeManagedAgentSkill(params) {
   };
 }
 function writeManagedSkillDir(dir, skillMd, options) {
-  const skillMdPath = join12(dir, "SKILL.md");
-  const markerPath = join12(dir, SYNC_MARKER_FILE);
-  const dirExists = existsSync9(dir);
-  const managed = existsSync9(markerPath);
-  const hasSkillMd = existsSync9(skillMdPath);
+  const skillMdPath = join14(dir, "SKILL.md");
+  const markerPath = join14(dir, SYNC_MARKER_FILE);
+  const dirExists = existsSync10(dir);
+  const managed = existsSync10(markerPath);
+  const hasSkillMd = existsSync10(skillMdPath);
   if (dirExists && !managed && !hasSkillMd) {
     return {
       action: "skip",
@@ -39892,11 +39777,11 @@ function writeManagedSkillDir(dir, skillMd, options) {
     return { action, path: skillMdPath };
   const parentDir = dirname8(dir);
   mkdirSync6(parentDir, { recursive: true });
-  const transactionDir = mkdtempSync2(join12(parentDir, `.hasna-skills-write-${basename3(dir)}-`));
-  const candidateDir = join12(transactionDir, "candidate");
-  const backupDir = join12(transactionDir, "backup");
-  const candidateSkillMdPath = join12(candidateDir, "SKILL.md");
-  const candidateMarkerPath = join12(candidateDir, SYNC_MARKER_FILE);
+  const transactionDir = mkdtempSync2(join14(parentDir, `.hasna-skills-write-${basename3(dir)}-`));
+  const candidateDir = join14(transactionDir, "candidate");
+  const backupDir = join14(transactionDir, "backup");
+  const candidateSkillMdPath = join14(candidateDir, "SKILL.md");
+  const candidateMarkerPath = join14(candidateDir, SYNC_MARKER_FILE);
   const marker = {
     managedBy: SYNC_MARKER_MANAGED_BY,
     skill: options.skill,
@@ -39923,9 +39808,9 @@ function writeManagedSkillDir(dir, skillMd, options) {
     }
     renameDirectory(candidateDir, dir);
   } catch (error) {
-    if (originalMoved && existsSync9(backupDir)) {
+    if (originalMoved && existsSync10(backupDir)) {
       try {
-        if (existsSync9(dir))
+        if (existsSync10(dir))
           rmSync2(dir, { recursive: true, force: true });
         renameDirectory(backupDir, dir);
         originalMoved = false;
@@ -39944,17 +39829,17 @@ function writeManagedSkillDir(dir, skillMd, options) {
   }
   return { action, path: skillMdPath };
 }
-function removeManagedAgentSkill(skill, agent, homeDir = homedir3()) {
-  const dir = join12(agentGlobalSkillsDir(agent, homeDir), skill);
-  if (!existsSync9(join12(dir, SYNC_MARKER_FILE)))
+function removeManagedAgentSkill(skill, agent, homeDir = homedir4()) {
+  const dir = join14(agentGlobalSkillsDir(agent, homeDir), skill);
+  if (!existsSync10(join14(dir, SYNC_MARKER_FILE)))
     return false;
   rmSync2(dir, { recursive: true, force: true });
   return true;
 }
 function sourceSkillMd(skillPath, name, description, kind, preferBundledDocs = false) {
   if (kind === undefined || kind === "instruction" || preferBundledDocs) {
-    const skillMdPath = join12(skillPath, "SKILL.md");
-    if (existsSync9(skillMdPath))
+    const skillMdPath = join14(skillPath, "SKILL.md");
+    if (existsSync10(skillMdPath))
       return readFileSync9(skillMdPath, "utf-8");
   }
   return pointerSkillMd(name, description);
@@ -39985,8 +39870,8 @@ function normalizeSkillName(name) {
 }
 
 // src/lib/project-state.ts
-import { existsSync as existsSync10, mkdirSync as mkdirSync7, readFileSync as readFileSync10, writeFileSync as writeFileSync5 } from "fs";
-import { join as join13 } from "path";
+import { existsSync as existsSync11, mkdirSync as mkdirSync7, readFileSync as readFileSync10, writeFileSync as writeFileSync5 } from "fs";
+import { join as join15 } from "path";
 var VALID_PIN_SOURCES = [
   "official",
   "custom",
@@ -40001,14 +39886,14 @@ var SKILLS_PROJECT_DIR = ".skills";
 var PROJECT_CONFIG_FILE = "project.json";
 var DEFAULT_EXPORT_DIR = ".skills/exports";
 function getProjectStateDir(targetDir = process.cwd()) {
-  return join13(targetDir, SKILLS_PROJECT_DIR);
+  return join15(targetDir, SKILLS_PROJECT_DIR);
 }
 function getProjectConfigPath(targetDir = process.cwd()) {
-  return join13(getProjectStateDir(targetDir), PROJECT_CONFIG_FILE);
+  return join15(getProjectStateDir(targetDir), PROJECT_CONFIG_FILE);
 }
 function loadProjectConfig(targetDir = process.cwd()) {
   const path = getProjectConfigPath(targetDir);
-  if (!existsSync10(path))
+  if (!existsSync11(path))
     return null;
   try {
     return normalizeProjectConfig(JSON.parse(readFileSync10(path, "utf-8")));
@@ -40129,12 +40014,12 @@ var __dirname2 = dirname9(fileURLToPath2(import.meta.url));
 function findSkillsDir() {
   let dir = __dirname2;
   for (let i3 = 0;i3 < 5; i3++) {
-    const candidate = join14(dir, "skills");
-    if (existsSync11(candidate) && !dir.includes(".skills"))
+    const candidate = join16(dir, "skills");
+    if (existsSync12(candidate) && !dir.includes(".skills"))
       return candidate;
     dir = dirname9(dir);
   }
-  return join14(__dirname2, "..", "skills");
+  return join16(__dirname2, "..", "skills");
 }
 var SKILLS_DIR = findSkillsDir();
 function getSkillPath(name) {
@@ -40142,25 +40027,25 @@ function getSkillPath(name) {
   const portable = findPortableSkill(skillName);
   if (portable)
     return portable.path;
-  const legacyCustomPath = join14(getDataDir(), "custom", skillName);
-  if (existsSync11(legacyCustomPath))
+  const legacyCustomPath = join16(getDataDir(), "custom", skillName);
+  if (existsSync12(legacyCustomPath))
     return legacyCustomPath;
   const extensionPath = findExtensionSkillPath(skillName);
   if (extensionPath)
     return extensionPath;
-  return join14(SKILLS_DIR, skillName);
+  return join16(SKILLS_DIR, skillName);
 }
 function getCanonicalSkillName(name) {
   return getSkill(name)?.name ?? resolveSkillAlias(normalizeSkillSlug(name));
 }
 function skillExists(name) {
-  return existsSync11(getSkillPath(name));
+  return existsSync12(getSkillPath(name));
 }
 function installSkill(name, options = {}) {
   const { targetDir = process.cwd(), overwrite = false } = options;
   const canonicalName = getCanonicalSkillName(name);
   const skillName = normalizeSkillName(canonicalName);
-  if (!existsSync11(getSkillPath(name))) {
+  if (!existsSync12(getSkillPath(name))) {
     const knownOfficial = Boolean(getSkill(name));
     return {
       skill: canonicalName,
@@ -40187,7 +40072,7 @@ function installSkill(name, options = {}) {
 }
 function installSkillSource(name, _options = {}) {
   const canonicalName = getCanonicalSkillName(name);
-  if (!existsSync11(getSkillPath(name))) {
+  if (!existsSync12(getSkillPath(name))) {
     return { skill: canonicalName, success: false, error: `Skill '${name}' not found`, mode: "source" };
   }
   return {
@@ -40208,11 +40093,11 @@ function installSkillManifest(manifest, _options = {}) {
 }
 function createLocalSkillManifest(name, generateSkillMd) {
   const sourcePath = getSkillPath(name);
-  if (!existsSync11(sourcePath))
+  if (!existsSync12(sourcePath))
     return null;
   let skillMd = "";
-  const skillMdPath = join14(sourcePath, "SKILL.md");
-  if (existsSync11(skillMdPath)) {
+  const skillMdPath = join16(sourcePath, "SKILL.md");
+  if (existsSync12(skillMdPath)) {
     skillMd = readFileSync11(skillMdPath, "utf-8");
   } else if (generateSkillMd) {
     skillMd = generateSkillMd(name) ?? "";
@@ -40285,20 +40170,20 @@ function getAgentSkillsDir(agent, scope = "global", projectDir) {
   const base = projectDir || process.cwd();
   switch (agent) {
     case "pi":
-      return scope === "project" ? join14(base, ".pi", "skills") : join14(homedir4(), ".pi", "agent", "skills");
+      return scope === "project" ? join16(base, ".pi", "skills") : join16(homedir5(), ".pi", "agent", "skills");
     case "opencode":
-      return scope === "project" ? join14(base, ".opencode", "skills") : join14(homedir4(), ".config", "opencode", "skills");
+      return scope === "project" ? join16(base, ".opencode", "skills") : join16(homedir5(), ".config", "opencode", "skills");
     default:
-      return scope === "project" ? join14(base, `.${agent}`, "skills") : join14(homedir4(), `.${agent}`, "skills");
+      return scope === "project" ? join16(base, `.${agent}`, "skills") : join16(homedir5(), `.${agent}`, "skills");
   }
 }
 function getAgentSkillPath(name, agent, scope = "global", projectDir) {
   const skillName = normalizeSkillName(getCanonicalSkillName(name));
-  return join14(getAgentSkillsDir(agent, scope, projectDir), skillName);
+  return join16(getAgentSkillsDir(agent, scope, projectDir), skillName);
 }
 function installSkillForAgent(name, options, generateSkillMd) {
   const canonicalName = getCanonicalSkillName(name);
-  if (!existsSync11(getSkillPath(name))) {
+  if (!existsSync12(getSkillPath(name))) {
     return { skill: canonicalName, success: false, error: `Skill '${name}' not found` };
   }
   const scope = options.scope ?? "global";
@@ -40322,15 +40207,15 @@ function removeSkillForAgent(name, options) {
   const canonicalName = getCanonicalSkillName(name);
   const scope = options.scope ?? "global";
   const dir = getAgentSkillPath(canonicalName, options.agent, scope, options.projectDir);
-  if (!existsSync11(join14(dir, SYNC_MARKER_FILE)))
+  if (!existsSync12(join16(dir, SYNC_MARKER_FILE)))
     return false;
   rmSync3(dir, { recursive: true, force: true });
   return true;
 }
 function resolveAgentSkillMd(name, generateSkillMd) {
   const sourcePath = getSkillPath(name);
-  const skillMdPath = join14(sourcePath, "SKILL.md");
-  if (existsSync11(skillMdPath))
+  const skillMdPath = join16(sourcePath, "SKILL.md");
+  if (existsSync12(skillMdPath))
     return readFileSync11(skillMdPath, "utf-8");
   if (generateSkillMd)
     return generateSkillMd(name);
@@ -40349,7 +40234,7 @@ function warnMissingDependencies(name, targetDir) {
 }
 function generateMinimalSkillMd(name) {
   const sourcePath = getSkillPath(name);
-  if (!existsSync11(sourcePath))
+  if (!existsSync12(sourcePath))
     return null;
   const canonicalName = getCanonicalSkillName(name);
   const meta = getSkill(canonicalName);
@@ -40364,7 +40249,7 @@ function generateMinimalSkillMd(name) {
     "---",
     ""
   ].filter(Boolean);
-  const fallbackDoc = readFileIfExists(join14(sourcePath, "README.md")) || readFileIfExists(join14(sourcePath, "CLAUDE.md"));
+  const fallbackDoc = readFileIfExists(join16(sourcePath, "README.md")) || readFileIfExists(join16(sourcePath, "CLAUDE.md"));
   if (fallbackDoc)
     return `${frontmatter.join(`
 `)}${fallbackDoc.trim()}
@@ -40383,8 +40268,8 @@ skills run ${canonicalName}
 `;
 }
 function readBundledSkillVersion(name) {
-  const pkgPath = join14(getSkillPath(name), "package.json");
-  if (!existsSync11(pkgPath))
+  const pkgPath = join16(getSkillPath(name), "package.json");
+  if (!existsSync12(pkgPath))
     return "unknown";
   try {
     const pkg = JSON.parse(readFileSync11(pkgPath, "utf-8"));
@@ -40394,7 +40279,7 @@ function readBundledSkillVersion(name) {
   }
 }
 function readFileIfExists(path) {
-  return existsSync11(path) ? readFileSync11(path, "utf-8") : null;
+  return existsSync12(path) ? readFileSync11(path, "utf-8") : null;
 }
 function loadProjectConfigCompat(targetDir) {
   return loadProjectConfig(targetDir);
@@ -40404,8 +40289,8 @@ function loadProjectConfigCompat(targetDir) {
 function isInstructionSkillDir(skillPath, meta) {
   if (meta?.kind === "instruction")
     return true;
-  const skillMdPath = join15(skillPath, "SKILL.md");
-  if (!existsSync12(skillMdPath))
+  const skillMdPath = join17(skillPath, "SKILL.md");
+  if (!existsSync13(skillMdPath))
     return false;
   try {
     return parseSkillFrontmatter(readFileSync12(skillMdPath, "utf-8"))?.kind === "instruction";
@@ -40431,12 +40316,12 @@ var HOSTED_PROVIDER_ENV_PREFIXES = [
 ];
 function getSkillDocs(name) {
   const skillPath = getSkillPath(name);
-  if (!existsSync12(skillPath))
+  if (!existsSync13(skillPath))
     return null;
   return {
-    skillMd: readIfExists(join15(skillPath, "SKILL.md")),
-    readme: readIfExists(join15(skillPath, "README.md")),
-    claudeMd: readIfExists(join15(skillPath, "CLAUDE.md"))
+    skillMd: readIfExists(join17(skillPath, "SKILL.md")),
+    readme: readIfExists(join17(skillPath, "README.md")),
+    claudeMd: readIfExists(join17(skillPath, "CLAUDE.md"))
   };
 }
 function getSkillBestDoc(name) {
@@ -40447,11 +40332,11 @@ function getSkillBestDoc(name) {
 }
 function getSkillRequirements(name) {
   const skillPath = getSkillPath(name);
-  if (!existsSync12(skillPath))
+  if (!existsSync13(skillPath))
     return null;
   const texts = [];
   for (const file of ["SKILL.md", "README.md", "CLAUDE.md", ".env.example", ".env.local.example"]) {
-    const content = readIfExists(join15(skillPath, file));
+    const content = readIfExists(join17(skillPath, file));
     if (content)
       texts.push(content);
   }
@@ -40490,8 +40375,8 @@ function getSkillRequirements(name) {
   const skillName = normalizeSkillName(name);
   let cliCommand = `skills run ${skillName}`;
   let dependencies = {};
-  const pkgPath = join15(skillPath, "package.json");
-  if (existsSync12(pkgPath)) {
+  const pkgPath = join17(skillPath, "package.json");
+  if (existsSync13(pkgPath)) {
     try {
       const pkg = JSON.parse(readFileSync12(pkgPath, "utf-8"));
       dependencies = pkg.dependencies || {};
@@ -40511,7 +40396,7 @@ async function runSkill(name, args, options = {}) {
   const meta = getSkill(name);
   const canonicalName = meta?.name ?? name;
   const skillPath = getSkillPath(canonicalName);
-  if (!existsSync12(skillPath)) {
+  if (!existsSync13(skillPath)) {
     return { exitCode: 1, error: `Skill '${name}' not found` };
   }
   if (isInstructionSkillDir(skillPath, meta)) {
@@ -40520,8 +40405,8 @@ async function runSkill(name, args, options = {}) {
       error: `Skill '${name}' is an instruction skill (kind: instruction) and is not runnable. Instruction skills are consumed by coding agents via SKILL.md, not executed with 'skills run'.`
     };
   }
-  const pkgPath = join15(skillPath, "package.json");
-  if (!existsSync12(pkgPath)) {
+  const pkgPath = join17(skillPath, "package.json");
+  if (!existsSync13(pkgPath)) {
     return { exitCode: 1, error: `No package.json in skill '${name}'` };
   }
   let entryPoint;
@@ -40540,12 +40425,12 @@ async function runSkill(name, args, options = {}) {
   } catch {
     return { exitCode: 1, error: `Failed to parse package.json for skill '${name}'` };
   }
-  const entryPath = join15(skillPath, entryPoint);
-  if (!existsSync12(entryPath)) {
+  const entryPath = join17(skillPath, entryPoint);
+  if (!existsSync13(entryPath)) {
     return { exitCode: 1, error: `Entry point '${entryPoint}' not found in skill '${name}'` };
   }
-  const nodeModules = join15(skillPath, "node_modules");
-  if (!existsSync12(nodeModules)) {
+  const nodeModules = join17(skillPath, "node_modules");
+  if (!existsSync13(nodeModules)) {
     const install = Bun.spawn(["bun", "install", "--no-save"], {
       cwd: skillPath,
       stdout: "pipe",
@@ -40617,7 +40502,7 @@ function generateSkillMd(name) {
   if (!meta)
     return null;
   const skillPath = getSkillPath(name);
-  if (!existsSync12(skillPath))
+  if (!existsSync13(skillPath))
     return null;
   const frontmatter = [
     "---",
@@ -40626,11 +40511,11 @@ function generateSkillMd(name) {
     "---"
   ].join(`
 `);
-  const readme = readIfExists(join15(skillPath, "README.md"));
-  const claudeMd = readIfExists(join15(skillPath, "CLAUDE.md"));
+  const readme = readIfExists(join17(skillPath, "README.md"));
+  const claudeMd = readIfExists(join17(skillPath, "CLAUDE.md"));
   let cliCommand = null;
-  const pkgPath = join15(skillPath, "package.json");
-  if (existsSync12(pkgPath)) {
+  const pkgPath = join17(skillPath, "package.json");
+  if (existsSync13(pkgPath)) {
     try {
       const pkg = JSON.parse(readFileSync12(pkgPath, "utf-8"));
       if (pkg.bin) {
@@ -40707,7 +40592,7 @@ function extractEnvVars(text) {
 }
 function readIfExists(path) {
   try {
-    if (existsSync12(path)) {
+    if (existsSync13(path)) {
       return readFileSync12(path, "utf-8");
     }
   } catch {}
@@ -40745,11 +40630,11 @@ function getServerSkillMd(slug) {
   const docs = getSkillDocs(name);
   if (docs?.skillMd)
     return docs.skillMd;
-  const skillsDir = resolve(process.cwd(), "skills");
-  const path = resolve(skillsDir, name, "SKILL.md");
+  const skillsDir = resolve2(process.cwd(), "skills");
+  const path = resolve2(skillsDir, name, "SKILL.md");
   if (!isInsideDir(skillsDir, path))
     return null;
-  return existsSync13(path) ? readFileSync13(path, "utf8") : null;
+  return existsSync14(path) ? readFileSync13(path, "utf8") : null;
 }
 
 // src/server/skills-api.ts
@@ -41159,6 +41044,9 @@ async function createSkillsFetchHandler(options = {}) {
       if (request.method === "GET" && url.pathname === "/ready") {
         return json({ ok: true, service: "skills" });
       }
+      if (request.method === "GET" && url.pathname === "/version") {
+        return json({ ok: true, service: "skills", version: package_default.version });
+      }
       if (url.pathname.startsWith("/api/")) {
         const principal = await authenticateRequest(store, request);
         if (!principal)
@@ -46377,7 +46265,7 @@ var commonParams3 = {
   UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" }
 };
 // ../../node_modules/.bun/@aws-sdk+client-ecs@3.1112.0/node_modules/@aws-sdk/client-ecs/package.json
-var package_default2 = {
+var package_default3 = {
   name: "@aws-sdk/client-ecs",
   version: "3.1112.0",
   description: "AWS SDK for JavaScript Ecs Client for Node.js, Browser and React Native",
@@ -49410,7 +49298,7 @@ var getRuntimeConfig5 = (config) => {
     authSchemePreference: config?.authSchemePreference ?? import_config38.loadConfig(import_httpAuthSchemes6.NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, loaderConfig),
     bodyLengthChecker: config?.bodyLengthChecker ?? import_serde6.calculateBodyLength,
     credentialDefaultProvider: config?.credentialDefaultProvider ?? defaultProvider,
-    defaultUserAgentProvider: config?.defaultUserAgentProvider ?? import_client29.createDefaultUserAgentProvider({ serviceId: clientSharedValues.serviceId, clientVersion: package_default2.version }),
+    defaultUserAgentProvider: config?.defaultUserAgentProvider ?? import_client29.createDefaultUserAgentProvider({ serviceId: clientSharedValues.serviceId, clientVersion: package_default3.version }),
     maxAttempts: config?.maxAttempts ?? import_config38.loadConfig(import_retry5.NODE_MAX_ATTEMPT_CONFIG_OPTIONS, config),
     region: config?.region ?? import_config38.loadConfig(import_config38.NODE_REGION_CONFIG_OPTIONS, { ...import_config38.NODE_REGION_CONFIG_FILE_OPTIONS, ...loaderConfig }),
     requestHandler: import_node_http_handler3.NodeHttpHandler.create(config?.requestHandler ?? defaultConfigProvider),