@hasna/skills 0.1.72 → 0.2.1

package/bin/worker.js

@@ -47,7 +47,7 @@ var __export = (target, all) => {
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = import.meta.require;
 
-// ../../node_modules/.bun/@smithy+types@4.17.2/node_modules/@smithy/types/dist-cjs/index.js
+// node_modules/@smithy/types/dist-cjs/index.js
 var require_dist_cjs = __commonJS((exports) => {
   var HttpAuthLocation;
   (function(HttpAuthLocation2) {
@@ -138,7 +138,7 @@ var require_dist_cjs = __commonJS((exports) => {
   exports.resolveDefaultRuntimeConfig = resolveDefaultRuntimeConfig;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/transport/index.js
+// node_modules/@smithy/core/dist-cjs/submodules/transport/index.js
 var require_transport = __commonJS((exports) => {
   var { SMITHY_CONTEXT_KEY } = require_dist_cjs();
   var getSmithyContext = (context) => context[SMITHY_CONTEXT_KEY] || (context[SMITHY_CONTEXT_KEY] = {});
@@ -305,7 +305,7 @@ var require_transport = __commonJS((exports) => {
   exports.toEndpointV1 = toEndpointV1;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/schema/index.js
+// node_modules/@smithy/core/dist-cjs/submodules/schema/index.js
 var require_schema = __commonJS((exports) => {
   var { getSmithyContext, HttpResponse, toEndpointV1 } = require_transport();
   var deref = (schemaRef) => {
@@ -974,7 +974,7 @@ var require_schema = __commonJS((exports) => {
   exports.translateTraits = translateTraits;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/client/index.js
+// node_modules/@smithy/core/dist-cjs/submodules/client/index.js
 var require_client = __commonJS((exports) => {
   var { getSmithyContext, normalizeProvider } = require_transport();
   exports.getSmithyContext = getSmithyContext;
@@ -2043,7 +2043,7 @@ var require_client = __commonJS((exports) => {
   exports.withBaseException = withBaseException;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/config/index.js
+// node_modules/@smithy/core/dist-cjs/submodules/config/index.js
 var require_config = __commonJS((exports) => {
   var { homedir } = __require("os");
   var { sep, join } = __require("path");
@@ -2738,7 +2738,7 @@ var require_config = __commonJS((exports) => {
   exports.resolveRegionConfig = resolveRegionConfig;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/endpoints/index.js
+// node_modules/@smithy/core/dist-cjs/submodules/endpoints/index.js
 var require_endpoints = __commonJS((exports) => {
   var { CONFIG_PREFIX_SEPARATOR, booleanSelector, SelectorType, loadConfig } = require_config();
   var { toEndpointV1, getSmithyContext, normalizeProvider, isValidHostLabel } = require_transport();
@@ -3550,7 +3550,7 @@ var require_endpoints = __commonJS((exports) => {
   exports.resolveParams = resolveParams;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/serde/index.js
+// node_modules/@smithy/core/dist-cjs/submodules/serde/index.js
 var require_serde = __commonJS((exports) => {
   var { createHmac, createHash, getRandomValues } = __require("crypto");
   var { ReadStream, lstatSync, fstatSync } = __require("fs");
@@ -5188,7 +5188,7 @@ ${value}\r
   exports.v4 = v4;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/checksum/index.js
+// node_modules/@smithy/core/dist-cjs/submodules/checksum/index.js
 var require_checksum = __commonJS((exports) => {
   var { createReadStream } = __require("fs");
   var { Writable } = __require("stream");
@@ -5804,7 +5804,7 @@ var require_checksum = __commonJS((exports) => {
   exports.readableStreamHasher = readableStreamHasher;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/event-streams/index.js
+// node_modules/@smithy/core/dist-cjs/submodules/event-streams/index.js
 var require_event_streams = __commonJS((exports) => {
   var { Crc32 } = require_checksum();
   var { toHex, fromHex, toUtf8, fromUtf8 } = require_serde();
@@ -6687,7 +6687,7 @@ var require_event_streams = __commonJS((exports) => {
   exports.universalEventStreamSerdeProvider = eventStreamSerdeProvider$1;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/protocols/index.js
+// node_modules/@smithy/core/dist-cjs/submodules/protocols/index.js
 var require_protocols = __commonJS((exports) => {
   var { Uint8ArrayBlobAdapter, sdkStreamMixin, splitEvery, splitHeader, fromBase64, _parseEpochTimestamp, _parseRfc7231DateTime, _parseRfc3339DateTimeWithOffset, LazyJsonString, NumericValue, toUtf8, fromUtf8, generateIdempotencyToken, toBase64, dateToUtcString, quoteHeader } = require_serde();
   var { TypeRegistry, NormalizedSchema, translateTraits } = require_schema();
@@ -7677,7 +7677,7 @@ var require_protocols = __commonJS((exports) => {
   exports.resolvedPath = resolvedPath;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/retry/index.js
+// node_modules/@smithy/core/dist-cjs/submodules/retry/index.js
 var require_retry = __commonJS((exports) => {
   var { Readable } = __require("stream");
   var { NoOpLogger, normalizeProvider } = require_client();
@@ -8474,7 +8474,7 @@ var require_retry = __commonJS((exports) => {
   exports.retryMiddlewareOptions = retryMiddlewareOptions;
 });
 
-// ../../node_modules/.bun/@aws+lambda-invoke-store@0.3.0/node_modules/@aws/lambda-invoke-store/dist-cjs/invoke-store.js
+// node_modules/@aws/lambda-invoke-store/dist-cjs/invoke-store.js
 var require_invoke_store = __commonJS((exports) => {
   var PROTECTED_KEYS = {
     REQUEST_ID: Symbol.for("_AWS_LAMBDA_REQUEST_ID"),
@@ -8603,7 +8603,7 @@ var require_invoke_store = __commonJS((exports) => {
   exports.InvokeStoreBase = InvokeStoreBase;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/index.js
+// node_modules/@smithy/core/dist-cjs/index.js
 var require_dist_cjs2 = __commonJS((exports) => {
   var { getSmithyContext } = require_transport();
   exports.getSmithyContext = getSmithyContext;
@@ -8929,7 +8929,7 @@ var require_dist_cjs2 = __commonJS((exports) => {
   exports.setFeature = setFeature;
 });
 
-// ../../node_modules/.bun/bowser@2.14.1/node_modules/bowser/es5.js
+// node_modules/bowser/es5.js
 var require_es5 = __commonJS((exports, module) => {
   (function(e, t) {
     typeof exports == "object" && typeof module == "object" ? module.exports = t() : typeof define == "function" && define.amd ? define([], t) : typeof exports == "object" ? exports.bowser = t() : e.bowser = t();
@@ -9769,7 +9769,7 @@ var require_es5 = __commonJS((exports, module) => {
   });
 });
 
-// ../../node_modules/.bun/@aws-sdk+core@3.977.8/node_modules/@aws-sdk/core/dist-cjs/submodules/client/index.js
+// node_modules/@aws-sdk/core/dist-cjs/submodules/client/index.js
 var require_client2 = __commonJS((exports) => {
   var { Retry, RETRY_MODES } = require_retry();
   var { HttpRequest, parseUrl } = require_protocols();
@@ -10707,7 +10707,7 @@ More information can be found at: https://a.co/c895JFp`);
   exports.userAgentMiddleware = userAgentMiddleware;
 });
 
-// ../../node_modules/.bun/@aws-sdk+checksums@3.1000.28/node_modules/@aws-sdk/checksums/dist-cjs/submodules/crc/index.js
+// node_modules/@aws-sdk/checksums/dist-cjs/submodules/crc/index.js
 var require_crc = __commonJS((exports) => {
   var { Crc32, Crc32Js, Crc32Node } = require_checksum();
   exports.Crc32 = Crc32;
@@ -10864,7 +10864,7 @@ var require_crc = __commonJS((exports) => {
   exports.crc64NvmeCrtContainer = crc64NvmeCrtContainer;
 });
 
-// ../../node_modules/.bun/@smithy+signature-v4@5.7.2/node_modules/@smithy/signature-v4/dist-cjs/index.js
+// node_modules/@smithy/signature-v4/dist-cjs/index.js
 var require_dist_cjs3 = __commonJS((exports) => {
   var { fromUtf8, fromHex, toHex, toUint8Array: toUint8Array2, isArrayBuffer: isArrayBuffer2 } = require_serde();
   var { normalizeProvider: normalizeProvider2 } = require_client();
@@ -11404,7 +11404,7 @@ ${toHex(hashedRequest)}`;
   exports.signatureV4aContainer = signatureV4aContainer;
 });
 
-// ../../node_modules/.bun/@aws-sdk+signature-v4-multi-region@3.996.45/node_modules/@aws-sdk/signature-v4-multi-region/dist-cjs/index.js
+// node_modules/@aws-sdk/signature-v4-multi-region/dist-cjs/index.js
 var require_dist_cjs4 = __commonJS((exports) => {
   var { SignatureV4, signatureV4aContainer } = require_dist_cjs3();
   var signatureV4CrtContainer = {
@@ -11536,7 +11536,7 @@ var require_dist_cjs4 = __commonJS((exports) => {
   exports.signatureV4CrtContainer = signatureV4CrtContainer;
 });
 
-// ../../node_modules/.bun/@aws-sdk+core@3.977.8/node_modules/@aws-sdk/core/dist-cjs/submodules/util/index.js
+// node_modules/@aws-sdk/core/dist-cjs/submodules/util/index.js
 var require_util = __commonJS((exports) => {
   var { buildQueryString } = require_protocols();
   var validate = (str) => typeof str === "string" && str.indexOf("arn:") === 0 && str.split(":").length >= 6;
@@ -11594,7 +11594,7 @@ var require_util = __commonJS((exports) => {
   exports.validate = validate;
 });
 
-// ../../node_modules/.bun/@smithy+core@3.33.2/node_modules/@smithy/core/dist-cjs/submodules/cbor/index.js
+// node_modules/@smithy/core/dist-cjs/submodules/cbor/index.js
 var require_cbor = __commonJS((exports) => {
   var { nv, NumericValue, calculateBodyLength, generateIdempotencyToken, fromBase64, _parseEpochTimestamp } = require_serde();
   var { HttpRequest: HttpRequest2, collectBody, SerdeContext, RpcProtocol } = require_protocols();
@@ -13962,7 +13962,7 @@ var require_cbor = __commonJS((exports) => {
   exports.tagSymbol = tagSymbol;
 });
 
-// ../../node_modules/.bun/@aws-sdk+xml-builder@3.972.39/node_modules/@aws-sdk/xml-builder/dist-cjs/index.js
+// node_modules/@aws-sdk/xml-builder/dist-cjs/index.js
 var require_dist_cjs5 = __commonJS((exports) => {
   var ATTR_ESCAPE_RE = /[&<>"]/g;
   var ATTR_ESCAPE_MAP = {
@@ -14330,7 +14330,7 @@ var require_dist_cjs5 = __commonJS((exports) => {
   exports.parseXML = parseXML;
 });
 
-// ../../node_modules/.bun/@aws-sdk+core@3.977.8/node_modules/@aws-sdk/core/dist-cjs/submodules/protocols/index.js
+// node_modules/@aws-sdk/core/dist-cjs/submodules/protocols/index.js
 var require_protocols2 = __commonJS((exports) => {
   var { SmithyRpcV2CborProtocol, loadSmithyRpcV2CborErrorCode } = require_cbor();
   var { TypeRegistry, NormalizedSchema, deref } = require_schema();
@@ -17171,7 +17171,7 @@ var require_protocols2 = __commonJS((exports) => {
   exports.parseXmlErrorBody = parseXmlErrorBody;
 });
 
-// ../../node_modules/.bun/@aws-sdk+core@3.977.8/node_modules/@aws-sdk/core/dist-cjs/submodules/httpAuthSchemes/index.js
+// node_modules/@aws-sdk/core/dist-cjs/submodules/httpAuthSchemes/index.js
 var require_httpAuthSchemes = __commonJS((exports) => {
   var { ProviderError, booleanSelector: booleanSelector2, SelectorType: SelectorType3, loadConfig } = require_config();
   var { setCredentialFeature } = require_client2();
@@ -17501,7 +17501,7 @@ var require_httpAuthSchemes = __commonJS((exports) => {
   exports.validateSigningProperties = validateSigningProperties;
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-env@3.972.69/node_modules/@aws-sdk/credential-provider-env/dist-es/fromEnv.js
+// node_modules/@aws-sdk/credential-provider-env/dist-es/fromEnv.js
 var import_client5, import_config, ENV_KEY = "AWS_ACCESS_KEY_ID", ENV_SECRET = "AWS_SECRET_ACCESS_KEY", ENV_SESSION = "AWS_SESSION_TOKEN", ENV_EXPIRATION = "AWS_CREDENTIAL_EXPIRATION", ENV_CREDENTIAL_SCOPE = "AWS_CREDENTIAL_SCOPE", ENV_ACCOUNT_ID = "AWS_ACCOUNT_ID", fromEnv = (init) => async () => {
   init?.logger?.debug("@aws-sdk/credential-provider-env - fromEnv");
   const accessKeyId = process.env[ENV_KEY];
@@ -17529,7 +17529,7 @@ var init_fromEnv = __esm(() => {
   import_config = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-env@3.972.69/node_modules/@aws-sdk/credential-provider-env/dist-es/index.js
+// node_modules/@aws-sdk/credential-provider-env/dist-es/index.js
 var exports_dist_es = {};
 __export(exports_dist_es, {
   fromEnv: () => fromEnv,
@@ -17544,7 +17544,7 @@ var init_dist_es = __esm(() => {
   init_fromEnv();
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/ImdsCredentials.js
+// node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/ImdsCredentials.js
 var isImdsCredentials = (arg) => Boolean(arg) && typeof arg === "object" && typeof arg.AccessKeyId === "string" && typeof arg.SecretAccessKey === "string" && typeof arg.Token === "string" && typeof arg.Expiration === "string", fromImdsCredentials = (creds) => ({
   accessKeyId: creds.AccessKeyId,
   secretAccessKey: creds.SecretAccessKey,
@@ -17553,14 +17553,14 @@ var isImdsCredentials = (arg) => Boolean(arg) && typeof arg === "object" && type
   ...creds.AccountId && { accountId: creds.AccountId }
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/RemoteProviderInit.js
+// node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/RemoteProviderInit.js
 var DEFAULT_TIMEOUT = 1000, DEFAULT_MAX_RETRIES = 0, providerConfigFromInit = ({ maxRetries = DEFAULT_MAX_RETRIES, timeout = DEFAULT_TIMEOUT }) => ({ maxRetries, timeout });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/node-http.js
+// node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/node-http.js
 import node_http from "http";
 var init_node_http = () => {};
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/httpRequest.js
+// node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/httpRequest.js
 function httpRequest(options) {
   return new Promise((resolve, reject) => {
     const req = node_http.request({
@@ -17600,7 +17600,7 @@ var init_httpRequest = __esm(() => {
   import_config2 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/retry.js
+// node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/retry.js
 var retry = (toRetry, maxRetries) => {
   let promise = toRetry();
   for (let i2 = 0;i2 < maxRetries; i2++) {
@@ -17609,7 +17609,7 @@ var retry = (toRetry, maxRetries) => {
   return promise;
 };
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/fromContainerMetadata.js
+// node_modules/@smithy/credential-provider-imds/dist-es/fromContainerMetadata.js
 var import_config3, ENV_CMDS_FULL_URI = "AWS_CONTAINER_CREDENTIALS_FULL_URI", ENV_CMDS_RELATIVE_URI = "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI", ENV_CMDS_AUTH_TOKEN = "AWS_CONTAINER_AUTHORIZATION_TOKEN", fromContainerMetadata = (init = {}) => {
   const { timeout, maxRetries } = providerConfigFromInit(init);
   return () => retry(async () => {
@@ -17679,7 +17679,7 @@ var init_fromContainerMetadata = __esm(() => {
   GREENGRASS_PROTOCOLS = new Set(["http:", "https:"]);
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/error/InstanceMetadataV1FallbackError.js
+// node_modules/@smithy/credential-provider-imds/dist-es/error/InstanceMetadataV1FallbackError.js
 var import_config4, InstanceMetadataV1FallbackError;
 var init_InstanceMetadataV1FallbackError = __esm(() => {
   import_config4 = __toESM(require_config(), 1);
@@ -17694,7 +17694,7 @@ var init_InstanceMetadataV1FallbackError = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/config/Endpoint.js
+// node_modules/@smithy/credential-provider-imds/dist-es/config/Endpoint.js
 var Endpoint;
 var init_Endpoint = __esm(() => {
   (function(Endpoint2) {
@@ -17703,7 +17703,7 @@ var init_Endpoint = __esm(() => {
   })(Endpoint || (Endpoint = {}));
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/config/EndpointConfigOptions.js
+// node_modules/@smithy/credential-provider-imds/dist-es/config/EndpointConfigOptions.js
 var ENV_ENDPOINT_NAME = "AWS_EC2_METADATA_SERVICE_ENDPOINT", CONFIG_ENDPOINT_NAME = "ec2_metadata_service_endpoint", ENDPOINT_CONFIG_OPTIONS;
 var init_EndpointConfigOptions = __esm(() => {
   ENDPOINT_CONFIG_OPTIONS = {
@@ -17713,7 +17713,7 @@ var init_EndpointConfigOptions = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/config/EndpointMode.js
+// node_modules/@smithy/credential-provider-imds/dist-es/config/EndpointMode.js
 var EndpointMode;
 var init_EndpointMode = __esm(() => {
   (function(EndpointMode2) {
@@ -17722,7 +17722,7 @@ var init_EndpointMode = __esm(() => {
   })(EndpointMode || (EndpointMode = {}));
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/config/EndpointModeConfigOptions.js
+// node_modules/@smithy/credential-provider-imds/dist-es/config/EndpointModeConfigOptions.js
 var ENV_ENDPOINT_MODE_NAME = "AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE", CONFIG_ENDPOINT_MODE_NAME = "ec2_metadata_service_endpoint_mode", ENDPOINT_MODE_CONFIG_OPTIONS;
 var init_EndpointModeConfigOptions = __esm(() => {
   init_EndpointMode();
@@ -17733,7 +17733,7 @@ var init_EndpointModeConfigOptions = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/utils/getInstanceMetadataEndpoint.js
+// node_modules/@smithy/credential-provider-imds/dist-es/utils/getInstanceMetadataEndpoint.js
 var import_config5, import_protocols, getInstanceMetadataEndpoint = async () => import_protocols.parseUrl(await getFromEndpointConfig() || await getFromEndpointModeConfig()), getFromEndpointConfig = async () => import_config5.loadConfig(ENDPOINT_CONFIG_OPTIONS)(), getFromEndpointModeConfig = async () => {
   const endpointMode = await import_config5.loadConfig(ENDPOINT_MODE_CONFIG_OPTIONS)();
   switch (endpointMode) {
@@ -17754,7 +17754,7 @@ var init_getInstanceMetadataEndpoint = __esm(() => {
   import_protocols = __toESM(require_protocols(), 1);
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/utils/getExtendedInstanceMetadataCredentials.js
+// node_modules/@smithy/credential-provider-imds/dist-es/utils/getExtendedInstanceMetadataCredentials.js
 var STATIC_STABILITY_REFRESH_INTERVAL_SECONDS, STATIC_STABILITY_REFRESH_INTERVAL_JITTER_WINDOW_SECONDS, STATIC_STABILITY_DOC_URL = "https://docs.aws.amazon.com/sdkref/latest/guide/feature-static-credentials.html", getExtendedInstanceMetadataCredentials = (credentials, logger) => {
   const refreshInterval = STATIC_STABILITY_REFRESH_INTERVAL_SECONDS + Math.floor(Math.random() * STATIC_STABILITY_REFRESH_INTERVAL_JITTER_WINDOW_SECONDS);
   const newExpiration = new Date(Date.now() + refreshInterval * 1000);
@@ -17772,7 +17772,7 @@ var init_getExtendedInstanceMetadataCredentials = __esm(() => {
   STATIC_STABILITY_REFRESH_INTERVAL_JITTER_WINDOW_SECONDS = 5 * 60;
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/utils/staticStabilityProvider.js
+// node_modules/@smithy/credential-provider-imds/dist-es/utils/staticStabilityProvider.js
 var staticStabilityProvider = (provider, options = {}) => {
   const logger = options?.logger || console;
   let pastCredentials;
@@ -17799,7 +17799,7 @@ var init_staticStabilityProvider = __esm(() => {
   init_getExtendedInstanceMetadataCredentials();
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/fromInstanceMetadata.js
+// node_modules/@smithy/credential-provider-imds/dist-es/fromInstanceMetadata.js
 var import_config6, IMDS_PATH = "/latest/meta-data/iam/security-credentials/", IMDS_TOKEN_PATH = "/latest/api/token", AWS_EC2_METADATA_V1_DISABLED = "AWS_EC2_METADATA_V1_DISABLED", PROFILE_AWS_EC2_METADATA_V1_DISABLED = "ec2_metadata_v1_disabled", X_AWS_EC2_METADATA_TOKEN = "x-aws-ec2-metadata-token", fromInstanceMetadata = (init = {}) => staticStabilityProvider(getInstanceMetadataProvider(init), { logger: init.logger }), getInstanceMetadataProvider = (init = {}) => {
   let disableFetchToken = false;
   const { logger, profile } = init;
@@ -17919,7 +17919,7 @@ var init_fromInstanceMetadata = __esm(() => {
   import_config6 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/index.js
+// node_modules/@smithy/credential-provider-imds/dist-es/index.js
 var exports_dist_es2 = {};
 __export(exports_dist_es2, {
   providerConfigFromInit: () => providerConfigFromInit,
@@ -17942,7 +17942,7 @@ var init_dist_es2 = __esm(() => {
   init_Endpoint();
 });
 
-// ../../node_modules/.bun/@smithy+node-http-handler@4.11.2/node_modules/@smithy/node-http-handler/dist-cjs/index.js
+// node_modules/@smithy/node-http-handler/dist-cjs/index.js
 var require_dist_cjs6 = __commonJS((exports) => {
   var { buildQueryString, HttpResponse: HttpResponse2 } = require_protocols();
   var node_https = __require("https");
@@ -18756,7 +18756,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
   exports.NodeHttpHandler = NodeHttpHandler;
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.71/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/checkUrl.js
+// node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/checkUrl.js
 var import_config7, ECS_CONTAINER_HOST = "169.254.170.2", EKS_CONTAINER_HOST_IPv4 = "169.254.170.23", EKS_CONTAINER_HOST_IPv6 = "[fd00:ec2::23]", checkUrl = (url, logger) => {
   if (url.protocol === "https:") {
     return;
@@ -18790,7 +18790,7 @@ var init_checkUrl = __esm(() => {
   import_config7 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.71/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/requestHelpers.js
+// node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/requestHelpers.js
 function createGetRequest(url) {
   return new import_protocols2.HttpRequest({
     protocol: url.protocol,
@@ -18839,7 +18839,7 @@ var init_requestHelpers = __esm(() => {
   import_serde2 = __toESM(require_serde(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.71/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/retry-wrapper.js
+// node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/retry-wrapper.js
 var retryWrapper = (toRetry, maxRetries, delayMs) => {
   return async () => {
     for (let i2 = 0;i2 < maxRetries; ++i2) {
@@ -18853,7 +18853,7 @@ var retryWrapper = (toRetry, maxRetries, delayMs) => {
   };
 };
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.71/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js
+// node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js
 import fs from "fs/promises";
 var import_client6, import_config9, import_node_http_handler, AWS_CONTAINER_CREDENTIALS_RELATIVE_URI = "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI", DEFAULT_LINK_LOCAL_HOST = "http://169.254.170.2", AWS_CONTAINER_CREDENTIALS_FULL_URI = "AWS_CONTAINER_CREDENTIALS_FULL_URI", AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE = "AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE", AWS_CONTAINER_AUTHORIZATION_TOKEN = "AWS_CONTAINER_AUTHORIZATION_TOKEN", fromHttp = (options = {}) => {
   options.logger?.debug("@aws-sdk/credential-provider-http - fromHttp");
@@ -18919,7 +18919,7 @@ var init_fromHttp = __esm(() => {
   import_node_http_handler = __toESM(require_dist_cjs6(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.71/node_modules/@aws-sdk/credential-provider-http/dist-es/index.js
+// node_modules/@aws-sdk/credential-provider-http/dist-es/index.js
 var exports_dist_es3 = {};
 __export(exports_dist_es3, {
   fromHttp: () => fromHttp
@@ -18928,16 +18928,16 @@ var init_dist_es3 = __esm(() => {
   init_fromHttp();
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.13/node_modules/@aws-sdk/credential-provider-sso/dist-es/isSsoProfile.js
+// node_modules/@aws-sdk/credential-provider-sso/dist-es/isSsoProfile.js
 var isSsoProfile = (arg) => arg && (typeof arg.sso_start_url === "string" || typeof arg.sso_account_id === "string" || typeof arg.sso_session === "string" || typeof arg.sso_region === "string" || typeof arg.sso_role_name === "string");
 
-// ../../node_modules/.bun/@aws-sdk+token-providers@3.1111.0/node_modules/@aws-sdk/token-providers/dist-es/constants.js
+// node_modules/@aws-sdk/token-providers/dist-es/constants.js
 var EXPIRE_WINDOW_MS, REFRESH_MESSAGE = `To refresh this SSO session run 'aws sso login' with the corresponding profile.`;
 var init_constants = __esm(() => {
   EXPIRE_WINDOW_MS = 5 * 60 * 1000;
 });
 
-// ../../node_modules/.bun/@aws-sdk+nested-clients@3.997.43/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso-oidc/index.js
+// node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso-oidc/index.js
 var require_sso_oidc = __commonJS((exports) => {
   var { awsEndpointFunctions: awsEndpointFunctions2, emitWarningIfUnsupportedVersion: emitWarningIfUnsupportedVersion$1, createDefaultUserAgentProvider, NODE_APP_ID_CONFIG_OPTIONS, getAwsRegionExtensionConfiguration, resolveAwsRegionExtensionConfiguration, resolveUserAgentConfig, resolveHostHeaderConfig, getUserAgentPlugin, getHostHeaderPlugin, getLoggerPlugin, getRecursionDetectionPlugin } = require_client2();
   var { NoAuthSigner, getHttpAuthSchemeEndpointRuleSetPlugin, DefaultIdentityProviderConfig, getHttpSigningPlugin } = require_dist_cjs2();
@@ -19692,7 +19692,7 @@ var require_sso_oidc = __commonJS((exports) => {
   exports.errorTypeRegistries = errorTypeRegistries2;
 });
 
-// ../../node_modules/.bun/@aws-sdk+token-providers@3.1111.0/node_modules/@aws-sdk/token-providers/dist-es/getSsoOidcClient.js
+// node_modules/@aws-sdk/token-providers/dist-es/getSsoOidcClient.js
 var getSsoOidcClient = async (ssoRegion, init = {}, callerClientConfig) => {
   const { SSOOIDCClient } = await Promise.resolve().then(() => __toESM(require_sso_oidc(), 1));
   const coalesce = (prop) => init.clientConfig?.[prop] ?? init.parentClientConfig?.[prop] ?? callerClientConfig?.[prop];
@@ -19704,7 +19704,7 @@ var getSsoOidcClient = async (ssoRegion, init = {}, callerClientConfig) => {
   return ssoOidcClient;
 };
 
-// ../../node_modules/.bun/@aws-sdk+token-providers@3.1111.0/node_modules/@aws-sdk/token-providers/dist-es/getNewSsoOidcToken.js
+// node_modules/@aws-sdk/token-providers/dist-es/getNewSsoOidcToken.js
 var getNewSsoOidcToken = async (ssoToken, ssoRegion, init = {}, callerClientConfig) => {
   const { CreateTokenCommand } = await Promise.resolve().then(() => __toESM(require_sso_oidc(), 1));
   const ssoOidcClient = await getSsoOidcClient(ssoRegion, init, callerClientConfig);
@@ -19717,7 +19717,7 @@ var getNewSsoOidcToken = async (ssoToken, ssoRegion, init = {}, callerClientConf
 };
 var init_getNewSsoOidcToken = () => {};
 
-// ../../node_modules/.bun/@aws-sdk+token-providers@3.1111.0/node_modules/@aws-sdk/token-providers/dist-es/validateTokenExpiry.js
+// node_modules/@aws-sdk/token-providers/dist-es/validateTokenExpiry.js
 var import_config11, validateTokenExpiry = (token) => {
   if (token.expiration && token.expiration.getTime() < Date.now()) {
     throw new import_config11.TokenProviderError(`Token is expired. ${REFRESH_MESSAGE}`, false);
@@ -19728,7 +19728,7 @@ var init_validateTokenExpiry = __esm(() => {
   import_config11 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+token-providers@3.1111.0/node_modules/@aws-sdk/token-providers/dist-es/validateTokenKey.js
+// node_modules/@aws-sdk/token-providers/dist-es/validateTokenKey.js
 var import_config12, validateTokenKey = (key, value, forRefresh = false) => {
   if (typeof value === "undefined") {
     throw new import_config12.TokenProviderError(`Value not present for '${key}' in SSO Token${forRefresh ? ". Cannot refresh" : ""}. ${REFRESH_MESSAGE}`, false);
@@ -19739,7 +19739,7 @@ var init_validateTokenKey = __esm(() => {
   import_config12 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+token-providers@3.1111.0/node_modules/@aws-sdk/token-providers/dist-es/writeSSOTokenToFile.js
+// node_modules/@aws-sdk/token-providers/dist-es/writeSSOTokenToFile.js
 import { promises as fsPromises } from "fs";
 var import_config13, writeFile, writeSSOTokenToFile = (id, ssoToken) => {
   const tokenFilepath = import_config13.getSSOTokenFilepath(id);
@@ -19751,7 +19751,7 @@ var init_writeSSOTokenToFile = __esm(() => {
   ({ writeFile } = fsPromises);
 });
 
-// ../../node_modules/.bun/@aws-sdk+token-providers@3.1111.0/node_modules/@aws-sdk/token-providers/dist-es/fromSso.js
+// node_modules/@aws-sdk/token-providers/dist-es/fromSso.js
 var import_config14, lastRefreshAttemptTime, fromSso = (init = {}) => async ({ callerClientConfig } = {}) => {
   init.logger?.debug("@aws-sdk/token-providers - fromSso");
   const profiles = await import_config14.parseKnownFiles(init);
@@ -19830,12 +19830,12 @@ var init_fromSso = __esm(() => {
   lastRefreshAttemptTime = new Date(0);
 });
 
-// ../../node_modules/.bun/@aws-sdk+token-providers@3.1111.0/node_modules/@aws-sdk/token-providers/dist-es/index.js
+// node_modules/@aws-sdk/token-providers/dist-es/index.js
 var init_dist_es4 = __esm(() => {
   init_fromSso();
 });
 
-// ../../node_modules/.bun/@aws-sdk+nested-clients@3.997.43/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso/index.js
+// node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso/index.js
 function createAwsAuthSigv4HttpAuthOption2(authParameters) {
   return {
     schemeId: "aws.auth#sigv4",
@@ -20283,7 +20283,7 @@ var init_sso = __esm(() => {
   $SSOClient = SSOClient;
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.13/node_modules/@aws-sdk/credential-provider-sso/dist-es/loadSso.js
+// node_modules/@aws-sdk/credential-provider-sso/dist-es/loadSso.js
 var exports_loadSso = {};
 __export(exports_loadSso, {
   SSOClient: () => $SSOClient,
@@ -20293,7 +20293,7 @@ var init_loadSso = __esm(() => {
   init_sso();
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.13/node_modules/@aws-sdk/credential-provider-sso/dist-es/resolveSSOCredentials.js
+// node_modules/@aws-sdk/credential-provider-sso/dist-es/resolveSSOCredentials.js
 var import_client7, import_config15, SHOULD_FAIL_CREDENTIAL_CHAIN = false, resolveSSOCredentials = async ({ ssoStartUrl, ssoSession, ssoAccountId, ssoRegion, ssoRoleName, ssoClient, clientConfig, parentClientConfig, callerClientConfig, profile, filepath, configFilepath, ignoreCache, logger }) => {
   let token;
   const refreshMessage = `To refresh this SSO session run aws sso login with the corresponding profile.`;
@@ -20382,7 +20382,7 @@ var init_resolveSSOCredentials = __esm(() => {
   import_config15 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.13/node_modules/@aws-sdk/credential-provider-sso/dist-es/validateSsoProfile.js
+// node_modules/@aws-sdk/credential-provider-sso/dist-es/validateSsoProfile.js
 var import_config16, validateSsoProfile = (profile, logger) => {
   const { sso_start_url, sso_account_id, sso_region, sso_role_name } = profile;
   if (!sso_start_url || !sso_account_id || !sso_region || !sso_role_name) {
@@ -20395,7 +20395,7 @@ var init_validateSsoProfile = __esm(() => {
   import_config16 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.13/node_modules/@aws-sdk/credential-provider-sso/dist-es/fromSSO.js
+// node_modules/@aws-sdk/credential-provider-sso/dist-es/fromSSO.js
 var import_config17, fromSSO = (init = {}) => async ({ callerClientConfig } = {}) => {
   init.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");
   const { ssoStartUrl, ssoAccountId, ssoRegion, ssoRoleName, ssoSession } = init;
@@ -20477,7 +20477,7 @@ var init_fromSSO = __esm(() => {
   import_config17 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.13/node_modules/@aws-sdk/credential-provider-sso/dist-es/index.js
+// node_modules/@aws-sdk/credential-provider-sso/dist-es/index.js
 var exports_dist_es4 = {};
 __export(exports_dist_es4, {
   validateSsoProfile: () => validateSsoProfile,
@@ -20489,7 +20489,7 @@ var init_dist_es5 = __esm(() => {
   init_validateSsoProfile();
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.14/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveCredentialSource.js
+// node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveCredentialSource.js
 var import_client8, import_config18, resolveCredentialSource = (credentialSource, profileName, logger) => {
   const sourceProvidersMap = {
     EcsContainer: async (options) => {
@@ -20520,7 +20520,7 @@ var init_resolveCredentialSource = __esm(() => {
   import_config18 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+nested-clients@3.997.43/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sts/index.js
+// node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sts/index.js
 var require_sts = __commonJS((exports) => {
   var { awsEndpointFunctions: awsEndpointFunctions3, emitWarningIfUnsupportedVersion: emitWarningIfUnsupportedVersion$12, createDefaultUserAgentProvider: createDefaultUserAgentProvider2, NODE_APP_ID_CONFIG_OPTIONS: NODE_APP_ID_CONFIG_OPTIONS2, getAwsRegionExtensionConfiguration: getAwsRegionExtensionConfiguration2, resolveAwsRegionExtensionConfiguration: resolveAwsRegionExtensionConfiguration2, resolveUserAgentConfig: resolveUserAgentConfig2, resolveHostHeaderConfig: resolveHostHeaderConfig2, getUserAgentPlugin: getUserAgentPlugin2, getHostHeaderPlugin: getHostHeaderPlugin2, getLoggerPlugin: getLoggerPlugin2, getRecursionDetectionPlugin: getRecursionDetectionPlugin2, setCredentialFeature: setCredentialFeature5, stsRegionDefaultResolver } = require_client2();
   var { NoAuthSigner: NoAuthSigner2, getHttpAuthSchemeEndpointRuleSetPlugin: getHttpAuthSchemeEndpointRuleSetPlugin2, DefaultIdentityProviderConfig: DefaultIdentityProviderConfig2, getHttpSigningPlugin: getHttpSigningPlugin2 } = require_dist_cjs2();
@@ -21542,7 +21542,7 @@ var require_sts = __commonJS((exports) => {
   exports.getDefaultRoleAssumerWithWebIdentity = getDefaultRoleAssumerWithWebIdentity;
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.14/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveAssumeRoleCredentials.js
+// node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveAssumeRoleCredentials.js
 var import_client9, import_config19, isAssumeRoleProfile = (arg, { profile = "default", logger } = {}) => {
   return Boolean(arg) && typeof arg === "object" && typeof arg.role_arn === "string" && ["undefined", "string"].indexOf(typeof arg.role_session_name) > -1 && ["undefined", "string"].indexOf(typeof arg.external_id) > -1 && ["undefined", "string"].indexOf(typeof arg.mfa_serial) > -1 && (isAssumeRoleWithSourceProfile(arg, { profile, logger }) || isCredentialSourceProfile(arg, { profile, logger }));
 }, isAssumeRoleWithSourceProfile = (arg, { profile, logger }) => {
@@ -21610,7 +21610,7 @@ var init_resolveAssumeRoleCredentials = __esm(() => {
   import_config19 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+nested-clients@3.997.43/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/signin/index.js
+// node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/signin/index.js
 var require_signin = __commonJS((exports) => {
   var { awsEndpointFunctions: awsEndpointFunctions3, emitWarningIfUnsupportedVersion: emitWarningIfUnsupportedVersion$12, createDefaultUserAgentProvider: createDefaultUserAgentProvider2, NODE_APP_ID_CONFIG_OPTIONS: NODE_APP_ID_CONFIG_OPTIONS2, getAwsRegionExtensionConfiguration: getAwsRegionExtensionConfiguration2, resolveAwsRegionExtensionConfiguration: resolveAwsRegionExtensionConfiguration2, resolveUserAgentConfig: resolveUserAgentConfig2, resolveHostHeaderConfig: resolveHostHeaderConfig2, getUserAgentPlugin: getUserAgentPlugin2, getHostHeaderPlugin: getHostHeaderPlugin2, getLoggerPlugin: getLoggerPlugin2, getRecursionDetectionPlugin: getRecursionDetectionPlugin2 } = require_client2();
   var { NoAuthSigner: NoAuthSigner2, getHttpAuthSchemeEndpointRuleSetPlugin: getHttpAuthSchemeEndpointRuleSetPlugin2, DefaultIdentityProviderConfig: DefaultIdentityProviderConfig2, getHttpSigningPlugin: getHttpSigningPlugin2 } = require_dist_cjs2();
@@ -22342,7 +22342,7 @@ var require_signin = __commonJS((exports) => {
   exports.errorTypeRegistries = errorTypeRegistries3;
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-login@3.972.76/node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js
+// node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js
 import { createHash, createPrivateKey, createPublicKey, sign } from "crypto";
 import { promises as fs2 } from "fs";
 import { homedir } from "os";
@@ -22606,7 +22606,7 @@ var init_LoginCredentialsFetcher = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-login@3.972.76/node_modules/@aws-sdk/credential-provider-login/dist-es/fromLoginCredentials.js
+// node_modules/@aws-sdk/credential-provider-login/dist-es/fromLoginCredentials.js
 var import_client10, import_config21, fromLoginCredentials = (init) => async ({ callerClientConfig } = {}) => {
   init?.logger?.debug?.("@aws-sdk/credential-providers - fromLoginCredentials");
   const profiles = await import_config21.parseKnownFiles(init || {});
@@ -22630,7 +22630,7 @@ var init_fromLoginCredentials = __esm(() => {
   import_config21 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-login@3.972.76/node_modules/@aws-sdk/credential-provider-login/dist-es/index.js
+// node_modules/@aws-sdk/credential-provider-login/dist-es/index.js
 var exports_dist_es5 = {};
 __export(exports_dist_es5, {
   fromLoginCredentials: () => fromLoginCredentials
@@ -22639,7 +22639,7 @@ var init_dist_es6 = __esm(() => {
   init_fromLoginCredentials();
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.14/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveLoginCredentials.js
+// node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveLoginCredentials.js
 var import_client11, isLoginProfile = (data) => {
   return Boolean(data && data.login_session);
 }, resolveLoginCredentials = async (profileName, options, callerClientConfig) => {
@@ -22654,7 +22654,7 @@ var init_resolveLoginCredentials = __esm(() => {
   import_client11 = __toESM(require_client2(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-process@3.972.69/node_modules/@aws-sdk/credential-provider-process/dist-es/getValidatedProcessCredentials.js
+// node_modules/@aws-sdk/credential-provider-process/dist-es/getValidatedProcessCredentials.js
 var import_client12, getValidatedProcessCredentials = (profileName, data, profiles) => {
   if (data.Version !== 1) {
     throw Error(`Profile ${profileName} credential_process did not return Version 1.`);
@@ -22688,7 +22688,7 @@ var init_getValidatedProcessCredentials = __esm(() => {
   import_client12 = __toESM(require_client2(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-process@3.972.69/node_modules/@aws-sdk/credential-provider-process/dist-es/resolveProcessCredentials.js
+// node_modules/@aws-sdk/credential-provider-process/dist-es/resolveProcessCredentials.js
 import { exec } from "child_process";
 import { promisify } from "util";
 var import_config22, resolveProcessCredentials = async (profileName, profiles, logger) => {
@@ -22723,7 +22723,7 @@ var init_resolveProcessCredentials = __esm(() => {
   import_config22 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-process@3.972.69/node_modules/@aws-sdk/credential-provider-process/dist-es/fromProcess.js
+// node_modules/@aws-sdk/credential-provider-process/dist-es/fromProcess.js
 var import_config23, fromProcess = (init = {}) => async ({ callerClientConfig } = {}) => {
   init.logger?.debug("@aws-sdk/credential-provider-process - fromProcess");
   const profiles = await import_config23.parseKnownFiles(init);
@@ -22736,7 +22736,7 @@ var init_fromProcess = __esm(() => {
   import_config23 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-process@3.972.69/node_modules/@aws-sdk/credential-provider-process/dist-es/index.js
+// node_modules/@aws-sdk/credential-provider-process/dist-es/index.js
 var exports_dist_es6 = {};
 __export(exports_dist_es6, {
   fromProcess: () => fromProcess
@@ -22745,7 +22745,7 @@ var init_dist_es7 = __esm(() => {
   init_fromProcess();
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.14/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveProcessCredentials.js
+// node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveProcessCredentials.js
 var import_client13, isProcessProfile = (arg) => Boolean(arg) && typeof arg === "object" && typeof arg.credential_process === "string", resolveProcessCredentials2 = async (options, profile) => {
   const { fromProcess: fromProcess2 } = await Promise.resolve().then(() => (init_dist_es7(), exports_dist_es6));
   const credentials = await fromProcess2({
@@ -22758,7 +22758,7 @@ var init_resolveProcessCredentials2 = __esm(() => {
   import_client13 = __toESM(require_client2(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.14/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveSsoCredentials.js
+// node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveSsoCredentials.js
 var import_client14, resolveSsoCredentials = async (profile, profileData, options = {}, callerClientConfig) => {
   const { fromSSO: fromSSO2 } = await Promise.resolve().then(() => (init_dist_es5(), exports_dist_es4));
   return fromSSO2({
@@ -22780,7 +22780,7 @@ var init_resolveSsoCredentials = __esm(() => {
   import_client14 = __toESM(require_client2(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.14/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveStaticCredentials.js
+// node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveStaticCredentials.js
 var import_client15, isStaticCredsProfile = (arg) => Boolean(arg) && typeof arg === "object" && typeof arg.aws_access_key_id === "string" && typeof arg.aws_secret_access_key === "string" && ["undefined", "string"].indexOf(typeof arg.aws_session_token) > -1 && ["undefined", "string"].indexOf(typeof arg.aws_account_id) > -1, resolveStaticCredentials = async (profile, options) => {
   options?.logger?.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");
   const credentials = {
@@ -22796,7 +22796,7 @@ var init_resolveStaticCredentials = __esm(() => {
   import_client15 = __toESM(require_client2(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-web-identity@3.972.75/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromWebToken.js
+// node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromWebToken.js
 var fromWebToken = (init) => async (awsIdentityProperties) => {
   init.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");
   const { roleArn, roleSessionName, webIdentityToken, providerId, policyArns, policy, durationSeconds } = init;
@@ -22823,7 +22823,7 @@ var fromWebToken = (init) => async (awsIdentityProperties) => {
   });
 };
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-web-identity@3.972.75/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromTokenFile.js
+// node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromTokenFile.js
 import { readFileSync } from "fs";
 var import_client16, import_config24, ENV_TOKEN_FILE = "AWS_WEB_IDENTITY_TOKEN_FILE", ENV_ROLE_ARN = "AWS_ROLE_ARN", ENV_ROLE_SESSION_NAME = "AWS_ROLE_SESSION_NAME", fromTokenFile = (init = {}) => async (awsIdentityProperties) => {
   init.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");
@@ -22851,7 +22851,7 @@ var init_fromTokenFile = __esm(() => {
   import_config24 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-web-identity@3.972.75/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/index.js
+// node_modules/@aws-sdk/credential-provider-web-identity/dist-es/index.js
 var exports_dist_es7 = {};
 __export(exports_dist_es7, {
   fromWebToken: () => fromWebToken,
@@ -22861,7 +22861,7 @@ var init_dist_es8 = __esm(() => {
   init_fromTokenFile();
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.14/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveWebIdentityCredentials.js
+// node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveWebIdentityCredentials.js
 var import_client17, isWebIdentityProfile = (arg) => Boolean(arg) && typeof arg === "object" && typeof arg.web_identity_token_file === "string" && typeof arg.role_arn === "string" && ["undefined", "string"].indexOf(typeof arg.role_session_name) > -1, resolveWebIdentityCredentials = async (profile, options, callerClientConfig) => {
   const { fromTokenFile: fromTokenFile2 } = await Promise.resolve().then(() => (init_dist_es8(), exports_dist_es7));
   const credentials = await fromTokenFile2({
@@ -22880,7 +22880,7 @@ var init_resolveWebIdentityCredentials = __esm(() => {
   import_client17 = __toESM(require_client2(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.14/node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveProfileData.js
+// node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveProfileData.js
 var import_config25, resolveProfileData = async (profileName, profiles, options, callerClientConfig, visitedProfiles = {}, isAssumeRoleRecursiveCall = false) => {
   const data = profiles[profileName];
   if (Object.keys(visitedProfiles).length > 0 && isStaticCredsProfile(data)) {
@@ -22916,7 +22916,7 @@ var init_resolveProfileData = __esm(() => {
   import_config25 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.14/node_modules/@aws-sdk/credential-provider-ini/dist-es/fromIni.js
+// node_modules/@aws-sdk/credential-provider-ini/dist-es/fromIni.js
 var import_config26, fromIni = (init = {}) => async ({ callerClientConfig } = {}) => {
   init.logger?.debug("@aws-sdk/credential-provider-ini - fromIni");
   const profiles = await import_config26.parseKnownFiles(init);
@@ -22929,7 +22929,7 @@ var init_fromIni = __esm(() => {
   import_config26 = __toESM(require_config(), 1);
 });
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-ini@3.973.14/node_modules/@aws-sdk/credential-provider-ini/dist-es/index.js
+// node_modules/@aws-sdk/credential-provider-ini/dist-es/index.js
 var exports_dist_es8 = {};
 __export(exports_dist_es8, {
   fromIni: () => fromIni
@@ -22940,6 +22940,128 @@ var init_dist_es9 = __esm(() => {
 
 // src/server/worker.ts
 import { randomUUID as randomUUID4 } from "crypto";
+// package.json
+var package_default = {
+  name: "@hasna/skills",
+  version: "0.2.1",
+  description: "Skills library for AI coding agents",
+  type: "module",
+  bin: {
+    skills: "bin/index.js",
+    "skills-mcp": "bin/mcp.js",
+    "skills-server": "bin/server.js",
+    "skills-worker": "bin/worker.js",
+    "skills-migrate": "bin/migrate.js"
+  },
+  exports: {
+    ".": {
+      import: "./dist/index.js",
+      types: "./dist/index.d.ts"
+    },
+    "./storage": {
+      import: "./dist/storage.js",
+      types: "./dist/storage.d.ts"
+    },
+    "./sdk": {
+      import: "./dist/sdk/index.js",
+      types: "./dist/sdk/index.d.ts"
+    },
+    "./admin-contract": {
+      import: "./dist/admin-contract.js",
+      types: "./dist/admin-contract.d.ts"
+    }
+  },
+  files: [
+    "dist/",
+    "!dist/**/*.test.d.ts",
+    "!dist/test-preload.d.ts",
+    "!dist/platform",
+    "bin/",
+    "migrations/",
+    "docs/skill-standard.md",
+    "schemas/",
+    "LICENSE",
+    "README.md"
+  ],
+  main: "./dist/index.js",
+  types: "./dist/index.d.ts",
+  scripts: {
+    clean: "rm -rf bin/ dist/",
+    build: "bun run clean && bun build ./src/cli/index.tsx --outdir ./bin --target bun && bun build ./src/mcp/index.ts --outfile ./bin/mcp.js --target bun && bun build ./src/server/index.ts --outfile ./bin/server.js --target bun && bun build ./src/server/worker.ts --outfile ./bin/worker.js --target bun && bun build ./src/server/migrate.ts --outfile ./bin/migrate.js --target bun && bun build ./src/index.ts ./src/storage.ts ./src/sdk/index.ts ./src/admin-contract.ts --outdir ./dist --target bun && tsc --emitDeclarationOnly --declaration --outDir dist",
+    "build:js": "rm -rf dist && bun build ./src/index.ts ./src/storage.ts ./src/sdk/index.ts ./src/admin-contract.ts --outdir ./dist --target bun && tsc --emitDeclarationOnly --declaration --outDir dist",
+    test: "bun test --timeout 30000",
+    dev: "bun run ./src/cli/index.tsx",
+    "dev:watch": "bun --watch run ./src/cli/index.tsx",
+    "dev:mcp": "bun --watch run ./src/mcp/index.ts",
+    "dev:server": "bun --watch run ./src/server/index.ts",
+    "dev:worker": "bun --watch run ./src/server/worker.ts",
+    "docker:check": "bash scripts/docker-build-check.sh",
+    migrate: "bun run ./src/server/migrate.ts",
+    typecheck: "tsc --noEmit",
+    "verify:release": "bun run scripts/release-guard.ts",
+    prepare: "bun run build:js",
+    prepack: "bun run build && bun run verify:release",
+    prepublishOnly: "bun run typecheck && bun run test",
+    postinstall: "mkdir -p $HOME/.hasna/skills/custom 2>/dev/null || true"
+  },
+  keywords: [
+    "skills",
+    "ai",
+    "agent",
+    "cli",
+    "typescript",
+    "bun",
+    "claude",
+    "codex",
+    "gemini",
+    "mcp",
+    "model-context-protocol",
+    "open-source",
+    "skills-library",
+    "automation"
+  ],
+  author: "Hasna",
+  license: "Apache-2.0",
+  devDependencies: {
+    "@types/bun": "1.3.14",
+    "@types/node": "25.2.3",
+    "@types/react": "^18.2.0",
+    "bun-types": "1.3.14",
+    "react-devtools-core": "^7.0.1",
+    typescript: "^5",
+    yaml: "^2.9.0"
+  },
+  dependencies: {
+    "@aws-sdk/client-ecs": "^3.1079.0",
+    "@aws-sdk/client-s3": "^3.1079.0",
+    "@hasna/events": "0.1.16",
+    "@modelcontextprotocol/sdk": "^1.26.0",
+    chalk: "^5.3.0",
+    commander: "^12.1.0",
+    ink: "^5.0.1",
+    "ink-select-input": "^6.0.0",
+    "ink-spinner": "^5.0.0",
+    "ink-text-input": "^6.0.0",
+    react: "^18.2.0",
+    zod: "^4.3.6"
+  },
+  engines: {
+    bun: ">=1.0.0"
+  },
+  publishConfig: {
+    registry: "https://registry.npmjs.org",
+    access: "public"
+  },
+  repository: {
+    type: "git",
+    url: "git+https://github.com/hasna/apps.git"
+  },
+  homepage: "https://github.com/hasna/skills",
+  bugs: {
+    url: "https://github.com/hasna/skills/issues"
+  }
+};
+
 // src/lib/skill-bundle.ts
 var ANY_SEGMENT_EXCLUDES = new Set([
   ".git",
@@ -23069,7 +23191,7 @@ function ownBytes(view) {
   return out;
 }
 
-// ../../node_modules/.bun/@aws-sdk+checksums@3.1000.28/node_modules/@aws-sdk/checksums/dist-cjs/submodules/flexible-checksums/index.js
+// node_modules/@aws-sdk/checksums/dist-cjs/submodules/flexible-checksums/index.js
 var { setFeature } = require_client2();
 var { HttpRequest } = require_protocols();
 var { isArrayBuffer, toUint8Array, createBufferedReadable, createChecksumStream } = require_serde();
@@ -23462,10 +23584,10 @@ var $NODE_RESPONSE_CHECKSUM_VALIDATION_CONFIG_OPTIONS = NODE_RESPONSE_CHECKSUM_V
 var $getFlexibleChecksumsPlugin = getFlexibleChecksumsPlugin;
 var $resolveFlexibleChecksumsConfig = resolveFlexibleChecksumsConfig;
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/S3Client.js
+// node_modules/@aws-sdk/client-s3/dist-es/S3Client.js
 var import_client23 = __toESM(require_client2(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+middleware-sdk-s3@3.972.74/node_modules/@aws-sdk/middleware-sdk-s3/dist-cjs/submodules/s3/index.js
+// node_modules/@aws-sdk/middleware-sdk-s3/dist-cjs/submodules/s3/index.js
 var { NoOpLogger, getSmithyContext } = require_client();
 var { HttpRequest: HttpRequest2, HttpResponse } = require_protocols();
 var { parseRfc7231DateTime } = require_serde();
@@ -24070,7 +24192,7 @@ var $getThrow200ExceptionsPlugin = getThrow200ExceptionsPlugin;
 var $getValidateBucketNamePlugin = getValidateBucketNamePlugin;
 var $resolveS3Config = resolveS3Config;
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/S3Client.js
+// node_modules/@aws-sdk/client-s3/dist-es/S3Client.js
 var import_core = __toESM(require_dist_cjs2(), 1);
 var import_client24 = __toESM(require_client(), 1);
 var import_config29 = __toESM(require_config(), 1);
@@ -24080,17 +24202,17 @@ var import_protocols6 = __toESM(require_protocols(), 1);
 var import_retry4 = __toESM(require_retry(), 1);
 var import_schema2 = __toESM(require_schema(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/auth/httpAuthSchemeProvider.js
+// node_modules/@aws-sdk/client-s3/dist-es/auth/httpAuthSchemeProvider.js
 var import_httpAuthSchemes = __toESM(require_httpAuthSchemes(), 1);
 var import_signature_v4_multi_region = __toESM(require_dist_cjs4(), 1);
 var import_client2 = __toESM(require_client(), 1);
 var import_endpoints3 = __toESM(require_endpoints(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/endpoint/endpointResolver.js
+// node_modules/@aws-sdk/client-s3/dist-es/endpoint/endpointResolver.js
 var import_client = __toESM(require_client2(), 1);
 var import_endpoints2 = __toESM(require_endpoints(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/endpoint/bdd.js
+// node_modules/@aws-sdk/client-s3/dist-es/endpoint/bdd.js
 var import_endpoints = __toESM(require_endpoints(), 1);
 var aw = "ref";
 var ax = "argv";
@@ -26034,7 +26156,7 @@ var nodes = new Int32Array([
 ]);
 var bdd = import_endpoints.BinaryDecisionDiagram.from(nodes, root, _data.conditions, _data.results);
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/endpoint/endpointResolver.js
+// node_modules/@aws-sdk/client-s3/dist-es/endpoint/endpointResolver.js
 var cache = new import_endpoints2.EndpointCache({
   size: 50,
   params: [
@@ -26062,7 +26184,7 @@ var defaultEndpointResolver = (endpointParams, context = {}) => {
 };
 import_endpoints2.customEndpointFunctions.aws = import_client.awsEndpointFunctions;
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/auth/httpAuthSchemeProvider.js
+// node_modules/@aws-sdk/client-s3/dist-es/auth/httpAuthSchemeProvider.js
 var createEndpointRuleSetHttpAuthSchemeParametersProvider = (defaultHttpAuthSchemeParametersProvider) => async (config, context, input) => {
   if (!input) {
     throw new Error("Could not find `input` for `defaultEndpointRuleSetHttpAuthSchemeParametersProvider`");
@@ -26178,11 +26300,11 @@ var resolveHttpAuthSchemeConfig = (config) => {
   });
 };
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/commandBuilder.js
+// node_modules/@aws-sdk/client-s3/dist-es/commandBuilder.js
 var import_client3 = __toESM(require_client(), 1);
 var import_endpoints4 = __toESM(require_endpoints(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/endpoint/EndpointParameters.js
+// node_modules/@aws-sdk/client-s3/dist-es/endpoint/EndpointParameters.js
 var resolveClientEndpointParameters = (options) => {
   return Object.assign(options, {
     useFipsEndpoint: options.useFipsEndpoint ?? false,
@@ -26208,7 +26330,7 @@ var commonParams = {
   UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" }
 };
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/commandBuilder.js
+// node_modules/@aws-sdk/client-s3/dist-es/commandBuilder.js
 var command = import_client3.makeBuilder(commonParams, "AmazonS3", "S3Client", import_endpoints4.getEndpointPlugin);
 var _ep0 = {
   Bucket: { type: "contextParams", name: "Bucket" },
@@ -26240,10 +26362,10 @@ var _mw11 = (Command, cs, config, o2) => [
   $getSsecPlugin(config)
 ];
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/schemas/schemas_0.js
+// node_modules/@aws-sdk/client-s3/dist-es/schemas/schemas_0.js
 var import_schema = __toESM(require_schema(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/models/S3ServiceException.js
+// node_modules/@aws-sdk/client-s3/dist-es/models/S3ServiceException.js
 var import_client4 = __toESM(require_client(), 1);
 class S3ServiceException extends import_client4.ServiceException {
   constructor(options) {
@@ -26252,7 +26374,7 @@ class S3ServiceException extends import_client4.ServiceException {
   }
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/models/errors.js
+// node_modules/@aws-sdk/client-s3/dist-es/models/errors.js
 class NoSuchUpload extends S3ServiceException {
   name = "NoSuchUpload";
   $fault = "client";
@@ -26530,7 +26652,7 @@ class ObjectAlreadyInActiveTierError extends S3ServiceException {
   }
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/schemas/schemas_0.js
+// node_modules/@aws-sdk/client-s3/dist-es/schemas/schemas_0.js
 var _A = "Account";
 var _AAO = "AnalyticsAndOperator";
 var _AC = "AccelerateConfiguration";
@@ -31982,13 +32104,13 @@ var WriteGetObjectResponse$ = [
   () => __Unit
 ];
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/commands/CreateSessionCommand.js
+// node_modules/@aws-sdk/client-s3/dist-es/commands/CreateSessionCommand.js
 class CreateSessionCommand extends command(_ep4, _mw0, "CreateSession", CreateSession$) {
 }
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/package.json
-var package_default = {
+// node_modules/@aws-sdk/client-s3/package.json
+var package_default2 = {
   name: "@aws-sdk/client-s3",
-  version: "3.1112.0",
+  version: "3.1113.0",
   description: "AWS SDK for JavaScript S3 Client for Node.js, Browser and React Native",
   homepage: "https://github.com/aws/aws-sdk-js-v3/tree/main/clients/client-s3",
   license: "Apache-2.0",
@@ -32055,7 +32177,7 @@ var package_default = {
     tslib: "^2.6.2"
   },
   devDependencies: {
-    "@aws-sdk/signature-v4-crt": "3.1112.0",
+    "@aws-sdk/signature-v4-crt": "3.1113.0",
     "@smithy/snapshot-testing": "^2.2.16",
     "@tsconfig/node20": "20.1.8",
     "@types/node": "^20.14.8",
@@ -32070,15 +32192,15 @@ var package_default = {
   }
 };
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/runtimeConfig.js
+// node_modules/@aws-sdk/client-s3/dist-es/runtimeConfig.js
 var import_client19 = __toESM(require_client2(), 1);
 var import_httpAuthSchemes3 = __toESM(require_httpAuthSchemes(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-node@3.972.80/node_modules/@aws-sdk/credential-provider-node/dist-es/defaultProvider.js
+// node_modules/@aws-sdk/credential-provider-node/dist-es/defaultProvider.js
 init_dist_es();
 var import_config27 = __toESM(require_config(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-node@3.972.80/node_modules/@aws-sdk/credential-provider-node/dist-es/remoteProvider.js
+// node_modules/@aws-sdk/credential-provider-node/dist-es/remoteProvider.js
 var import_config10 = __toESM(require_config(), 1);
 var ENV_IMDS_DISABLED = "AWS_EC2_METADATA_DISABLED";
 var remoteProvider = async (init) => {
@@ -32097,7 +32219,7 @@ var remoteProvider = async (init) => {
   return fromInstanceMetadata2(init);
 };
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-node@3.972.80/node_modules/@aws-sdk/credential-provider-node/dist-es/runtime/memoize-chain.js
+// node_modules/@aws-sdk/credential-provider-node/dist-es/runtime/memoize-chain.js
 function memoizeChain(providers, treatAsExpired) {
   const chain2 = internalCreateChain(providers);
   let activeLock;
@@ -32161,7 +32283,7 @@ var internalCreateChain = (providers) => async (awsIdentityProperties) => {
   throw lastProviderError;
 };
 
-// ../../node_modules/.bun/@aws-sdk+credential-provider-node@3.972.80/node_modules/@aws-sdk/credential-provider-node/dist-es/defaultProvider.js
+// node_modules/@aws-sdk/credential-provider-node/dist-es/defaultProvider.js
 var multipleCredentialSourceWarningEmitted = false;
 var defaultProvider = (init = {}) => memoizeChain([
   async () => {
@@ -32227,7 +32349,7 @@ var defaultProvider = (init = {}) => memoizeChain([
   }
 ], credentialsTreatedAsExpired);
 var credentialsTreatedAsExpired = (credentials) => credentials?.expiration !== undefined && credentials.expiration.getTime() - Date.now() < 300000;
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/runtimeConfig.js
+// node_modules/@aws-sdk/client-s3/dist-es/runtimeConfig.js
 var import_checksum2 = __toESM(require_checksum(), 1);
 var import_client20 = __toESM(require_client(), 1);
 var import_config28 = __toESM(require_config(), 1);
@@ -32236,7 +32358,7 @@ var import_retry3 = __toESM(require_retry(), 1);
 var import_serde4 = __toESM(require_serde(), 1);
 var import_node_http_handler2 = __toESM(require_dist_cjs6(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+checksums@3.1000.28/node_modules/@aws-sdk/checksums/dist-cjs/submodules/sha/index.js
+// node_modules/@aws-sdk/checksums/dist-cjs/submodules/sha/index.js
 var { toUint8Array: toUint8Array2, concatBytes } = require_serde();
 var { createHmac, createHash: createHash2 } = __require("crypto");
 var { Sha256: Sha2562, Sha256Js, Sha256Node } = require_checksum();
@@ -32465,7 +32587,7 @@ var subtle = typeof digest === "function" && typeof sign2 === "function" && type
 var MAX_PENDING_BYTES = 8 * 1024 * 1024;
 var $Sha1 = Sha1Node;
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/runtimeConfig.shared.js
+// node_modules/@aws-sdk/client-s3/dist-es/runtimeConfig.shared.js
 var import_httpAuthSchemes2 = __toESM(require_httpAuthSchemes(), 1);
 var import_signature_v4_multi_region2 = __toESM(require_dist_cjs4(), 1);
 var import_checksum = __toESM(require_checksum(), 1);
@@ -32517,7 +32639,7 @@ var getRuntimeConfig2 = (config) => {
   };
 };
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/runtimeConfig.js
+// node_modules/@aws-sdk/client-s3/dist-es/runtimeConfig.js
 var getRuntimeConfig3 = (config) => {
   import_client20.emitWarningIfUnsupportedVersion(process.version);
   const defaultsMode = import_config28.resolveDefaultsModeConfig(config);
@@ -32536,7 +32658,7 @@ var getRuntimeConfig3 = (config) => {
     authSchemePreference: config?.authSchemePreference ?? import_config28.loadConfig(import_httpAuthSchemes3.NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, loaderConfig),
     bodyLengthChecker: config?.bodyLengthChecker ?? import_serde4.calculateBodyLength,
     credentialDefaultProvider: config?.credentialDefaultProvider ?? defaultProvider,
-    defaultUserAgentProvider: config?.defaultUserAgentProvider ?? import_client19.createDefaultUserAgentProvider({ serviceId: clientSharedValues.serviceId, clientVersion: package_default.version }),
+    defaultUserAgentProvider: config?.defaultUserAgentProvider ?? import_client19.createDefaultUserAgentProvider({ serviceId: clientSharedValues.serviceId, clientVersion: package_default2.version }),
     disableS3ExpressSessionAuth: config?.disableS3ExpressSessionAuth ?? import_config28.loadConfig($NODE_DISABLE_S3_EXPRESS_SESSION_AUTH_OPTIONS, loaderConfig),
     eventStreamSerdeProvider: config?.eventStreamSerdeProvider ?? import_event_streams.eventStreamSerdeProvider,
     maxAttempts: config?.maxAttempts ?? import_config28.loadConfig(import_retry3.NODE_MAX_ATTEMPT_CONFIG_OPTIONS, config),
@@ -32558,12 +32680,12 @@ var getRuntimeConfig3 = (config) => {
   };
 };
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/runtimeExtensions.js
+// node_modules/@aws-sdk/client-s3/dist-es/runtimeExtensions.js
 var import_client21 = __toESM(require_client2(), 1);
 var import_client22 = __toESM(require_client(), 1);
 var import_protocols5 = __toESM(require_protocols(), 1);
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/auth/httpAuthExtensionConfiguration.js
+// node_modules/@aws-sdk/client-s3/dist-es/auth/httpAuthExtensionConfiguration.js
 var getHttpAuthExtensionConfiguration2 = (runtimeConfig) => {
   const _httpAuthSchemes = runtimeConfig.httpAuthSchemes;
   let _httpAuthSchemeProvider = runtimeConfig.httpAuthSchemeProvider;
@@ -32602,14 +32724,14 @@ var resolveHttpAuthRuntimeConfig2 = (config) => {
   };
 };
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/runtimeExtensions.js
+// node_modules/@aws-sdk/client-s3/dist-es/runtimeExtensions.js
 var resolveRuntimeExtensions2 = (runtimeConfig, extensions) => {
   const extensionConfiguration = Object.assign(import_client21.getAwsRegionExtensionConfiguration(runtimeConfig), import_client22.getDefaultExtensionConfiguration(runtimeConfig), import_protocols5.getHttpHandlerExtensionConfiguration(runtimeConfig), getHttpAuthExtensionConfiguration2(runtimeConfig));
   extensions.forEach((extension) => extension.configure(extensionConfiguration));
   return Object.assign(runtimeConfig, import_client21.resolveAwsRegionExtensionConfiguration(extensionConfiguration), import_client22.resolveDefaultRuntimeConfig(extensionConfiguration), import_protocols5.resolveHttpHandlerRuntimeConfig(extensionConfiguration), resolveHttpAuthRuntimeConfig2(extensionConfiguration));
 };
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/S3Client.js
+// node_modules/@aws-sdk/client-s3/dist-es/S3Client.js
 class S3Client extends import_client24.Client {
   config;
   constructor(...[configuration]) {
@@ -32654,15 +32776,15 @@ class S3Client extends import_client24.Client {
   }
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/commands/DeleteObjectCommand.js
+// node_modules/@aws-sdk/client-s3/dist-es/commands/DeleteObjectCommand.js
 class DeleteObjectCommand extends command(_ep0, _mw0, "DeleteObject", DeleteObject$) {
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/commands/GetObjectCommand.js
+// node_modules/@aws-sdk/client-s3/dist-es/commands/GetObjectCommand.js
 class GetObjectCommand extends command(_ep0, _mw7, "GetObject", GetObject$) {
 }
 
-// ../../node_modules/.bun/@aws-sdk+client-s3@3.1112.0/node_modules/@aws-sdk/client-s3/dist-es/commands/PutObjectCommand.js
+// node_modules/@aws-sdk/client-s3/dist-es/commands/PutObjectCommand.js
 class PutObjectCommand extends command(_ep0, _mw11, "PutObject", PutObject$) {
 }
 
@@ -32676,7 +32798,7 @@ class ArtifactStorage {
   constructor(options = {}) {
     this.bucket = options.bucket;
     this.prefix = (options.prefix || "skills/artifacts").replace(/^\/+|\/+$/g, "");
-    this.s3 = this.bucket ? new S3Client({ region: options.region || process.env.AWS_REGION || "us-east-1" }) : undefined;
+    this.s3 = this.bucket ? options.client ?? new S3Client({ region: options.region || process.env.AWS_REGION || "us-east-1" }) : undefined;
   }
   get usesS3() {
     return Boolean(this.bucket);
@@ -32774,6 +32896,27 @@ class ArtifactStorage {
   keyFor(run, relativePath) {
     return this.objectKeyFor(run.orgId, run.id, relativePath);
   }
+  async putVersionObjects(orgId, slug, version2, bytes, manifest, contentType = "application/gzip") {
+    if (!this.bucket || !this.s3)
+      return { storageKind: "db" };
+    const key = this.versionKeyFor(orgId, slug, version2, "bundle.tar.gz");
+    await this.s3.send(new PutObjectCommand({ Bucket: this.bucket, Key: key, Body: bytes, ContentType: contentType }));
+    await this.s3.send(new PutObjectCommand({
+      Bucket: this.bucket,
+      Key: this.versionKeyFor(orgId, slug, version2, "manifest.json"),
+      Body: new TextEncoder().encode(JSON.stringify(manifest, null, 2)),
+      ContentType: "application/json"
+    }));
+    return { storageKind: "s3", storageKey: key };
+  }
+  versionPlacement(orgId, slug, version2) {
+    if (!this.bucket || !this.s3)
+      return { storageKind: "db" };
+    return { storageKind: "s3", storageKey: this.versionKeyFor(orgId, slug, version2, "bundle.tar.gz") };
+  }
+  versionKeyFor(orgId, slug, version2, file) {
+    return `${this.prefix}/skills/${encodeURIComponent(orgId)}/${encodeURIComponent(slug)}/${encodeURIComponent(version2)}/${file}`;
+  }
   bundleKeyFor(orgId, sha256) {
     return `${this.prefix}/bundles/${encodeURIComponent(orgId)}/${sha256}.tar.gz`;
   }
@@ -32875,12 +33018,12 @@ var DEFAULT_RUN_QUOTA = {
 };
 
 // src/server/database-url.ts
-import { isAbsolute, join as join5 } from "path";
+import { isAbsolute, join as join4 } from "path";
 import { fileURLToPath } from "url";
 
 // src/lib/config.ts
 import { existsSync as existsSync2, readFileSync as readFileSync2, writeFileSync, mkdirSync, copyFileSync, readdirSync, statSync } from "fs";
-import { join as join4, dirname as dirname2 } from "path";
+import { join as join3, dirname as dirname2 } from "path";
 
 // src/lib/retired-settings.ts
 var RETIRED_ENV_SUFFIXES = ["_STORAGE_MODE", "_DEPLOYMENT_MODE", "_CLOUD_MODE"];
@@ -32919,94 +33062,87 @@ function assertNoRetiredModeEnvVars(env, options) {
 
 // src/lib/app-home.ts
 import { existsSync } from "fs";
-import { homedir as homedir3 } from "os";
-import { join as join3, resolve } from "path";
-
-// ../../node_modules/.bun/@hasna+paths@0.1.0/node_modules/@hasna/paths/dist/index.js
 import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
-var KIND_ENV = {
+import { join as join2, resolve } from "path";
+import { homedir as pathsResolverHomedir } from "os";
+import { join as pathsResolverJoin } from "path";
+var PATHS_RESOLVER_KIND_ENV = {
   config: "HASNA_CONFIG_HOME",
   data: "HASNA_DATA_HOME",
   state: "HASNA_STATE_HOME",
   cache: "HASNA_CACHE_HOME"
 };
-var APP_SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
-function assertApp(app) {
+var PATHS_RESOLVER_APP_SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+function pathsResolverAssertApp(app) {
   if (typeof app !== "string" || app.length === 0) {
     throw new TypeError("paths: app must be a non-empty string");
   }
-  if (!APP_SLUG_RE.test(app)) {
+  if (!PATHS_RESOLVER_APP_SLUG_RE.test(app)) {
     throw new TypeError(`paths: invalid app slug "${app}" \u2014 expected lowercase kebab-case ([a-z0-9]+(-[a-z0-9]+)*)`);
   }
 }
-function envOf(options) {
-  return options.env ?? process.env;
-}
-function envValue(options, kind) {
-  const value = envOf(options)[KIND_ENV[kind]];
-  return typeof value === "string" && value.length > 0 ? value : undefined;
-}
-function isMacOS(platform) {
-  return platform === "darwin";
+function pathsResolverAssertKind(kind) {
+  if (!Object.keys(PATHS_RESOLVER_KIND_ENV).includes(kind)) {
+    throw new TypeError(`paths: invalid path kind "${kind}" \u2014 expected one of ${Object.keys(PATHS_RESOLVER_KIND_ENV).join(", ")}`);
+  }
 }
-function baseDir(kind, options) {
-  const override = envValue(options, kind);
-  if (override)
+function pathsResolverBaseDir(kind, options) {
+  pathsResolverAssertKind(kind);
+  const env = options.env ?? process.env;
+  const override = env[PATHS_RESOLVER_KIND_ENV[kind]];
+  if (typeof override === "string" && override.length > 0)
     return override;
-  const home = options.home ?? homedir2();
+  const home = options.home ?? pathsResolverHomedir();
   const platform = options.platform ?? process.platform;
-  if (isMacOS(platform)) {
+  if (platform === "darwin") {
     switch (kind) {
       case "config":
       case "data":
-        return join2(home, "Library", "Application Support", "Hasna");
+        return pathsResolverJoin(home, "Library", "Application Support", "Hasna");
       case "cache":
-        return join2(home, "Library", "Caches", "Hasna");
+        return pathsResolverJoin(home, "Library", "Caches", "Hasna");
       case "state":
-        return join2(home, "Library", "Logs", "Hasna");
+        return pathsResolverJoin(home, "Library", "Logs", "Hasna");
     }
   }
   switch (kind) {
     case "config":
-      return join2(home, ".config", "hasna");
+      return pathsResolverJoin(home, ".config", "hasna");
     case "data":
-      return join2(home, ".local", "share", "hasna");
+      return pathsResolverJoin(home, ".local", "share", "hasna");
     case "state":
-      return join2(home, ".local", "state", "hasna");
+      return pathsResolverJoin(home, ".local", "state", "hasna");
     case "cache":
-      return join2(home, ".cache", "hasna");
+      return pathsResolverJoin(home, ".cache", "hasna");
   }
 }
-function resolvePath(kind, options) {
-  assertApp(options.app);
-  const appSegment = options.internal === true ? join2("internal", options.app) : options.app;
-  return join2(baseDir(kind, options), appSegment);
+function pathsResolverResolve(kind, options) {
+  pathsResolverAssertApp(options.app);
+  const appSegment = options.internal === true ? pathsResolverJoin("internal", options.app) : options.app;
+  return pathsResolverJoin(pathsResolverBaseDir(kind, options), appSegment);
 }
 function dataDir(options) {
-  return resolvePath("data", options);
+  return pathsResolverResolve("data", options);
 }
-
-// src/lib/app-home.ts
 var DATA_DIR_ENV = "HASNA_SKILLS_DIR";
 var HASNA_SKILLS_HOME_ENV = "HASNA_SKILLS_HOME";
 var SKILLS_HOME_ENV = "SKILLS_HOME";
 var DEFAULT_SQLITE_FILENAME = "server.db";
 var GLOBAL_CONFIG_FILENAME = "config.json";
 function effectiveHome() {
-  return process.env["HOME"] || process.env["USERPROFILE"] || homedir3() || "/tmp";
+  return process.env["HOME"] || process.env["USERPROFILE"] || homedir2() || "/tmp";
 }
 function legacyDataRoot() {
-  return join3(effectiveHome(), ".hasna", "skills");
+  return join2(effectiveHome(), ".hasna", "skills");
 }
-function resolverDataRoot(home = effectiveHome()) {
-  return dataDir({ app: "skills", home });
+function resolverDataRoot(home = effectiveHome(), env) {
+  return dataDir({ app: "skills", home, env });
 }
 function adoptResolverDataRoot(resolved, env = process.env) {
   const dataOverride = env.HASNA_DATA_HOME;
   if (typeof dataOverride === "string" && dataOverride.trim().length > 0)
     return true;
-  return existsSync(join3(resolved, DEFAULT_SQLITE_FILENAME)) || existsSync(join3(resolved, GLOBAL_CONFIG_FILENAME));
+  return existsSync(join2(resolved, DEFAULT_SQLITE_FILENAME)) || existsSync(join2(resolved, GLOBAL_CONFIG_FILENAME));
 }
 function exactDataRoot() {
   for (const key of [DATA_DIR_ENV, HASNA_SKILLS_HOME_ENV, SKILLS_HOME_ENV]) {
@@ -33035,8 +33171,8 @@ function mergeDirectoryContents(sourceDir, targetDir) {
     return;
   mkdirSync(targetDir, { recursive: true });
   for (const entry of readdirSync(sourceDir)) {
-    const sourcePath = join4(sourceDir, entry);
-    const targetPath = join4(targetDir, entry);
+    const sourcePath = join3(sourceDir, entry);
+    const targetPath = join3(targetDir, entry);
     try {
       const sourceStat = statSync(sourcePath);
       if (sourceStat.isDirectory()) {
@@ -33056,14 +33192,14 @@ function getDataDir() {
   if (hasOperatorOverride())
     return root3;
   const home = effectiveHome();
-  const oldDir = join4(home, ".skills");
-  const oldConfigFile = join4(home, ".skillsrc");
+  const oldDir = join3(home, ".skills");
+  const oldConfigFile = join3(home, ".skillsrc");
   try {
     mergeDirectoryContents(oldDir, root3);
   } catch {}
-  if (existsSync2(oldConfigFile) && !existsSync2(join4(root3, "config.json"))) {
+  if (existsSync2(oldConfigFile) && !existsSync2(join3(root3, "config.json"))) {
     try {
-      copyFileSync(oldConfigFile, join4(root3, "config.json"));
+      copyFileSync(oldConfigFile, join3(root3, "config.json"));
     } catch {}
   }
   return root3;
@@ -33077,7 +33213,7 @@ var SQLITE_SCHEMES = new Set(["sqlite", "sqlite3", "file"]);
 var MEMORY_SCHEMES = new Set(["memory"]);
 var SQLITE_EXTENSIONS = [".db", ".sqlite", ".sqlite3", ".db3"];
 function defaultSqlitePath() {
-  return join5(getDataDir(), DEFAULT_SQLITE_FILENAME2);
+  return join4(getDataDir(), DEFAULT_SQLITE_FILENAME2);
 }
 function resolveDatabaseTarget(raw) {
   const value = raw?.trim();
@@ -33104,7 +33240,7 @@ function resolveDatabaseTarget(raw) {
     throw new Error(`unsupported database scheme "${scheme}:". Supported: postgres://, postgresql://, sqlite:, file:, ` + `an absolute or relative path to a .db/.sqlite file, ":memory:", or "memory:" (non-durable, tests only). ` + `Leave the setting empty to use the default SQLite database at ${defaultSqlitePath()}.`);
   }
   if (looksLikeSqlitePath(value)) {
-    const path = isAbsolute(value) ? value : join5(process.cwd(), value);
+    const path = isAbsolute(value) ? value : join4(process.cwd(), value);
     return { kind: "sqlite", path, durable: true, label: `sqlite (${path})` };
   }
   throw new Error(`could not resolve a database backend from "${value}". Use postgres://\u2026, sqlite:\u2026, an absolute or ` + `relative path ending in ${SQLITE_EXTENSIONS.join("/")}, ":memory:", or leave it empty for the ` + `default SQLite database at ${defaultSqlitePath()}.`);
@@ -33128,7 +33264,7 @@ function sqlitePathFromUrl(value, scheme) {
     }
     return rest.slice(2).replace(/^\/\/+/, "/");
   }
-  return isAbsolute(rest) ? rest : join5(process.cwd(), rest);
+  return isAbsolute(rest) ? rest : join4(process.cwd(), rest);
 }
 function looksLikeSqlitePath(value) {
   if (value.includes("/"))
@@ -33140,7 +33276,7 @@ function looksLikeSqlitePath(value) {
 import { Database } from "bun:sqlite";
 import { randomUUID as randomUUID2 } from "crypto";
 import { mkdirSync as mkdirSync2, readFileSync as readFileSync3, readdirSync as readdirSync2 } from "fs";
-import { dirname as dirname4, join as join7 } from "path";
+import { dirname as dirname4, join as join6 } from "path";
 
 // src/server/auth.ts
 import { createHash as createHash3 } from "crypto";
@@ -33162,15 +33298,15 @@ function publicPrincipal(partial = {}) {
 
 // src/server/migrations-dir.ts
 import { existsSync as existsSync3 } from "fs";
-import { dirname as dirname3, join as join6 } from "path";
+import { dirname as dirname3, join as join5 } from "path";
 var MIGRATION_DIALECTS = ["postgres", "sqlite"];
 var MAX_WALK_UP = 6;
 function findMigrationsRoot(startDirs = defaultStartDirs()) {
   for (const start of startDirs) {
     let dir = start;
     for (let level = 0;level < MAX_WALK_UP; level += 1) {
-      const candidate = join6(dir, "migrations");
-      if (MIGRATION_DIALECTS.some((dialect) => existsSync3(join6(candidate, dialect))))
+      const candidate = join5(dir, "migrations");
+      if (MIGRATION_DIALECTS.some((dialect) => existsSync3(join5(candidate, dialect))))
         return candidate;
       const parent = dirname3(dir);
       if (parent === dir)
@@ -33184,7 +33320,7 @@ function resolveMigrationsDir(dialect, root3 = findMigrationsRoot()) {
   if (!root3) {
     throw new Error(`could not locate the migrations directory for dialect "${dialect}". ` + `Expected a migrations/${dialect}/ folder alongside the package root.`);
   }
-  const dir = join6(root3, dialect);
+  const dir = join5(root3, dialect);
   if (!existsSync3(dir)) {
     throw new Error(`migrations directory not found: ${dir}`);
   }
@@ -33342,6 +33478,20 @@ function dateString(value) {
     return value.toISOString();
   return String(value);
 }
+function rowToSkillVersion(row) {
+  return {
+    orgId: String(row.org_id),
+    slug: String(row.slug),
+    version: String(row.version),
+    bundleSha256: String(row.bundle_sha256),
+    bundleByteSize: Number(row.bundle_byte_size),
+    storageKind: String(row.storage_kind ?? "db"),
+    ...typeof row.storage_key === "string" ? { storageKey: row.storage_key } : {},
+    manifest: parseJsonObject(row.manifest_json),
+    ...typeof row.published_by_user_id === "string" ? { publishedByUserId: row.published_by_user_id } : {},
+    createdAt: dateString(row.created_at)
+  };
+}
 
 // src/server/types.ts
 class StaleLeaseGenerationError extends Error {
@@ -33372,6 +33522,21 @@ class SkillRevisionConflictError extends Error {
   }
 }
 
+class SkillVersionExistsError extends Error {
+  slug;
+  version;
+  existingSha256;
+  attemptedSha256;
+  constructor(slug, version2, existingSha256, attemptedSha256) {
+    super(`version conflict for '${slug}@${version2}': already published with bundle ${existingSha256}, ` + `refusing to overwrite it with ${attemptedSha256}. Publish a new version instead.`);
+    this.slug = slug;
+    this.version = version2;
+    this.existingSha256 = existingSha256;
+    this.attemptedSha256 = attemptedSha256;
+    this.name = "SkillVersionExistsError";
+  }
+}
+
 // src/lib/revision.ts
 import { createHash as createHash4 } from "crypto";
 function revisionIdOf(content) {
@@ -33667,6 +33832,13 @@ class SqliteSkillsStore {
         throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, previousRevisionId);
       }
       const carriedSha = input.bundle?.sha256 ?? previousSha;
+      if (input.version && carriedSha) {
+        const existingVersion = this.get("SELECT bundle_sha256 FROM skills_versions WHERE org_id = ? AND slug = ? AND version = ? LIMIT 1", [orgId, input.slug, input.version]);
+        const existingSha = typeof existingVersion?.bundle_sha256 === "string" ? existingVersion.bundle_sha256 : null;
+        if (existingSha && existingSha !== carriedSha) {
+          throw new SkillVersionExistsError(input.slug, input.version, existingSha, carriedSha);
+        }
+      }
       const carriedSize = input.bundle?.byteSize ?? (previous?.bundle_byte_size == null ? null : Number(previous.bundle_byte_size));
       const revisionId = revisionIdOfRecord({
         slug: input.slug,
@@ -33754,6 +33926,21 @@ class SqliteSkillsStore {
         const currentId = typeof current?.revision_id === "string" ? current.revision_id : null;
         throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, currentId);
       }
+      if (input.version && carriedSha) {
+        this.db.run(`INSERT OR IGNORE INTO skills_versions (org_id, slug, version, bundle_sha256, bundle_byte_size, storage_kind, storage_key, manifest_json, published_by_user_id, created_at)
+           VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+          orgId,
+          input.slug,
+          input.version,
+          carriedSha,
+          carriedSize ?? 0,
+          input.versionStorage?.storageKind ?? "db",
+          input.versionStorage?.storageKey ?? null,
+          JSON.stringify(input.versionManifest ?? {}),
+          input.principal.userId ?? null,
+          now
+        ]);
+      }
       if (previousSha && input.bundle && previousSha !== input.bundle.sha256)
         this.collectOrphanBundle(orgId, previousSha);
       this.db.run("DELETE FROM skills_tags WHERE org_id = ? AND slug = ?", [orgId, input.slug]);
@@ -33861,6 +34048,13 @@ class SqliteSkillsStore {
     const row = this.get("SELECT * FROM skills_bundles WHERE org_id = ? AND sha256 = ? LIMIT 1", [principal.orgId, sha256]);
     return row ? rowToSkillBundle(row) : null;
   }
+  async listSkillVersions(principal, slug) {
+    return this.all("SELECT * FROM skills_versions WHERE org_id = ? AND slug = ? ORDER BY created_at DESC, version DESC", [principal.orgId, slug]).map(rowToSkillVersion);
+  }
+  async getSkillVersion(principal, slug, version2) {
+    const row = this.get("SELECT * FROM skills_versions WHERE org_id = ? AND slug = ? AND version = ? LIMIT 1", [principal.orgId, slug, version2]);
+    return row ? rowToSkillVersion(row) : null;
+  }
   async pinSkill(principal, slug, metadata = {}) {
     const row = this.get(`INSERT INTO skills_pins (org_id, principal, slug, pinned_at, metadata_json)
        VALUES (?, ?, ?, ?, ?)
@@ -33900,7 +34094,7 @@ class SqliteSkillsStore {
     return this.all("SELECT slug FROM skills_registry WHERE org_id = ? AND tombstoned_at IS NULL ORDER BY slug ASC", [principal.orgId]).map((row) => String(row.slug));
   }
   collectOrphanBundle(orgId, sha256) {
-    const referenced = this.get("SELECT 1 AS present FROM skills_registry WHERE org_id = ? AND bundle_sha256 = ? LIMIT 1", [orgId, sha256]);
+    const referenced = this.get("SELECT 1 AS present FROM skills_registry WHERE org_id = ? AND bundle_sha256 = ? LIMIT 1", [orgId, sha256]) ?? this.get("SELECT 1 AS present FROM skills_versions WHERE org_id = ? AND bundle_sha256 = ? LIMIT 1", [orgId, sha256]);
     if (referenced)
       return;
     this.db.run("DELETE FROM skills_bundles WHERE org_id = ? AND sha256 = ?", [orgId, sha256]);
@@ -33929,7 +34123,7 @@ function applySqliteMigrations(db, migrationsDir = resolveMigrationsDir("sqlite"
   const appliedNow = [];
   for (const file of files) {
     const version2 = file.replace(/\.sql$/, "");
-    const text = readFileSync3(join7(migrationsDir, file), "utf8");
+    const text = readFileSync3(join6(migrationsDir, file), "utf8");
     const apply = db.transaction(() => {
       const already = db.query("SELECT 1 AS present FROM schema_migrations WHERE version = ? LIMIT 1").get(version2);
       if (already)
@@ -33984,320 +34178,1167 @@ function parseScopes(value) {
   }
 }
 
-// src/server/config.ts
-var DATABASE_URL_ENV = "HASNA_SKILLS_DATABASE_URL";
-var SKILLS_ENV_NAMESPACE = "SKILLS";
-function resolveServerConfig(env = process.env) {
-  assertNoRetiredModeEnvVars(env, {
-    app: SKILLS_ENV_NAMESPACE,
-    replacement: DATABASE_URL_ENV
-  });
-  const nodeEnv = env.NODE_ENV || "development";
-  const host = env.HOST || env.SKILLS_HOST || "0.0.0.0";
-  const port = parsePositiveInt(env.PORT || env.SKILLS_PORT, 8787);
-  return {
-    host,
-    port,
-    databaseUrl: env[DATABASE_URL_ENV] || env.DATABASE_URL || undefined,
-    bootstrapApiKey: env.HASNA_SKILLS_BOOTSTRAP_API_KEY || undefined,
-    artifactBucket: env.HASNA_SKILLS_S3_BUCKET || env.SKILLS_S3_BUCKET || undefined,
-    artifactPrefix: normalizePrefix(env.HASNA_SKILLS_S3_PREFIX || env.SKILLS_S3_PREFIX || "skills/artifacts"),
-    inlineWorker: env.HASNA_SKILLS_INLINE_WORKER === "1",
-    bundleSigningKey: env.HASNA_SKILLS_API_SIGNING_KEY || env.HASNA_SKILLS_SIGNING_KEY || undefined,
-    requestBodyLimitBytes: parsePositiveInt(env.HASNA_SKILLS_REQUEST_BODY_LIMIT_BYTES, 1e6),
-    skillBundleLimitBytes: parsePositiveInt(env.HASNA_SKILLS_BUNDLE_LIMIT_BYTES, 25000000),
-    tombstoneWindowMs: parsePositiveInt(env.HASNA_SKILLS_TOMBSTONE_WINDOW_MS, 7 * 24 * 60 * 60 * 1000),
-    publicBaseUrl: (env.SKILLS_PUBLIC_BASE_URL || localOrigin(host, port)).replace(/\/+$/, ""),
-    nodeEnv,
-    allowEphemeralStore: env.HASNA_SKILLS_ALLOW_EPHEMERAL_STORE === "1"
-  };
-}
-function localOrigin(host, port) {
-  const hostname = host === "0.0.0.0" || host === "::" ? "localhost" : host;
-  return `http://${hostname.includes(":") ? `[${hostname}]` : hostname}:${port}`;
-}
-function parsePositiveInt(value, fallback) {
-  const parsed = Number.parseInt(value ?? "", 10);
-  return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
-}
-function normalizePrefix(value) {
-  return value.replace(/^\/+|\/+$/g, "") || "skills/artifacts";
-}
-
-// src/server/handlers.ts
-import { createHash as createHash5 } from "crypto";
+// src/lib/installer.ts
+import { existsSync as existsSync4, readFileSync as readFileSync4, rmSync } from "fs";
+import { dirname as dirname5, join as join7 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
 
-// src/server/store.ts
-import { randomUUID as randomUUID3 } from "crypto";
-function recordFieldsOf(input, carriedBundle, carriedSkillMd) {
-  return {
-    slug: input.slug,
-    displayName: input.displayName,
-    description: input.description,
-    category: input.category,
-    tags: input.tags,
-    source: input.source,
-    kind: input.kind,
-    ...input.version ? { version: input.version } : {},
-    ...carriedSkillMd ? { skillMd: carriedSkillMd } : {},
-    bundleSha256: input.bundle?.sha256 ?? carriedBundle.bundleSha256,
-    bundleByteSize: input.bundle?.byteSize ?? carriedBundle.bundleByteSize
-  };
-}
-function resolvePoolMax(env = process.env) {
-  const parsed = Number.parseInt(env.HASNA_SKILLS_DATABASE_POOL_MAX || env.SKILLS_DATABASE_POOL_MAX || "", 10);
-  return Number.isFinite(parsed) && parsed > 0 ? parsed : 4;
-}
-var LOG_SEQUENCE_ATTEMPTS = 12;
-function createArtifactId() {
-  return artifactId();
-}
-async function createStore(options = {}) {
-  const target = resolveDatabaseTarget(options.databaseUrl);
-  const store = instantiateStore(target, options.sqlite);
-  await store.verifyConnectivity?.();
-  if (options.bootstrapApiKey && store.ensureBootstrapApiKey) {
-    await store.ensureBootstrapApiKey(options.bootstrapApiKey);
-  }
-  return store;
-}
-function instantiateStore(target, sqliteOptions) {
-  switch (target.kind) {
-    case "postgres":
-      return new PostgresSkillsStore(target.url);
-    case "sqlite":
-      return new SqliteSkillsStore(target.path, sqliteOptions);
-    case "memory":
-      return new MemorySkillsStore;
+// src/lib/registry-data/development-tools.ts
+var DEVELOPMENT_TOOLS_SKILLS = [
+  {
+    name: "repo-onboarding-report",
+    displayName: "Repo Onboarding Report",
+    description: "Generate repository onboarding packages with architecture maps, setup guides, risk registers, and first-week plans",
+    category: "Development Tools",
+    kind: "instruction",
+    tags: ["repository", "onboarding", "architecture", "developer-tools"]
+  },
+  {
+    name: "security-audit-report",
+    displayName: "Security Audit Report",
+    description: "Generate application security hardening reports covering auth, secrets, headers, webhooks, RLS, permissions, dependencies, and prioritized fixes",
+    category: "Development Tools",
+    kind: "instruction",
+    tags: ["security", "audit", "hardening", "rls", "webhooks"]
+  },
+  {
+    name: "performance-audit-report",
+    displayName: "Performance Audit Report",
+    description: "Generate performance audit reports with metrics, findings, budgets, remediation plans, and manifest artifacts",
+    category: "Development Tools",
+    kind: "instruction",
+    tags: ["performance", "audit", "latency", "budget", "web"]
+  },
+  {
+    name: "migration-plan-pack",
+    displayName: "Migration Plan Pack",
+    description: "Generate migration plans for frameworks, libraries, databases, infrastructure, and architecture upgrades with risk matrix, checklist, rollout, and test strategy artifacts",
+    category: "Development Tools",
+    kind: "instruction",
+    tags: ["migration", "upgrade", "planning", "frameworks", "databases"]
+  },
+  {
+    name: "test-suite-generator",
+    displayName: "Test Suite Generator",
+    description: "Generate runnable API, unit, and browser test suite packages with coverage notes",
+    category: "Development Tools",
+    kind: "instruction",
+    tags: ["testing", "qa", "api-tests", "browser-tests", "coverage"]
+  },
+  {
+    name: "api-test-suite",
+    displayName: "API Test Suite",
+    description: "Generate and run API test suites with comprehensive endpoint coverage",
+    category: "Development Tools",
+    tags: ["api", "testing", "automation", "qa"]
+  },
+  {
+    name: "api-docs-portal",
+    displayName: "API Docs Portal",
+    description: "Generate static API documentation portals from OpenAPI specs, route lists, and endpoint examples",
+    category: "Development Tools",
+    tags: ["api", "documentation", "openapi", "portal"]
+  },
+  {
+    name: "codefix",
+    displayName: "Code Fix",
+    description: "Code quality CLI for auto-linting, formatting, fixing, and style enforcement",
+    category: "Development Tools",
+    tags: ["code", "linting", "formatting", "quality"]
+  },
+  {
+    name: "commitpush",
+    displayName: "Commit Push",
+    description: "Create logical commits from repo changes and push directly to the main branch",
+    category: "Development Tools",
+    tags: ["git", "commit", "push", "automation"]
+  },
+  {
+    name: "commitpushpr",
+    displayName: "Commit Push PR",
+    description: "Create logical commits, push a feature branch, and open a GitHub pull request",
+    category: "Development Tools",
+    dependencies: ["commitpush"],
+    tags: ["git", "commit", "pull-request", "github", "automation"]
+  },
+  {
+    name: "database-explorer",
+    displayName: "Database Explorer",
+    description: "Explore and query databases with an interactive interface",
+    category: "Development Tools",
+    tags: ["database", "explorer", "sql", "query"]
+  },
+  {
+    name: "diff-viewer",
+    displayName: "Diff Viewer",
+    description: "View and analyze file differences with visual diff representation",
+    category: "Development Tools",
+    tags: ["diff", "comparison", "files", "code-review"]
+  },
+  {
+    name: "generate-api-client",
+    displayName: "Generate API Client",
+    description: "Generate API client libraries from OpenAPI specs and documentation",
+    category: "Development Tools",
+    tags: ["api", "client", "code-generation", "openapi"]
+  },
+  {
+    name: "generate-dockerfile",
+    displayName: "Generate Dockerfile",
+    description: "Generate optimized Dockerfiles for containerized applications",
+    category: "Development Tools",
+    tags: ["docker", "dockerfile", "containers", "devops"]
+  },
+  {
+    name: "generate-env",
+    displayName: "Generate Env",
+    description: "Generate environment variable files from templates and configurations",
+    category: "Development Tools",
+    tags: ["env", "environment", "configuration", "dotenv"]
+  },
+  {
+    name: "generate-sitemap",
+    displayName: "Generate Sitemap",
+    description: "Generate XML sitemaps for websites and web applications",
+    category: "Development Tools",
+    tags: ["sitemap", "seo", "xml", "web"]
+  },
+  {
+    name: "hook",
+    displayName: "Hook",
+    description: "Claude Code hook creation skill - generates standardized hook scaffolds",
+    category: "Development Tools",
+    tags: ["hooks", "scaffold", "claude-code", "automation"]
+  },
+  {
+    name: "http-server",
+    displayName: "HTTP Server",
+    description: "Spin up local HTTP servers for development and testing",
+    category: "Development Tools",
+    tags: ["http", "server", "development", "local"]
+  },
+  {
+    name: "lorem-generator",
+    displayName: "Lorem Generator",
+    description: "Generate placeholder text in various styles and lengths",
+    category: "Development Tools",
+    tags: ["lorem", "placeholder", "text", "mockup"]
+  },
+  {
+    name: "managemcp",
+    displayName: "Manage MCP",
+    description: "Manage MCP servers with install, configure, and lifecycle operations",
+    category: "Development Tools",
+    tags: ["mcp", "management", "servers", "configuration"]
+  },
+  {
+    name: "markdown-validator",
+    displayName: "Markdown Validator",
+    description: "Validate markdown files for syntax, links, and formatting issues",
+    category: "Development Tools",
+    tags: ["markdown", "validation", "linting", "formatting"]
+  },
+  {
+    name: "monitor",
+    displayName: "Monitor",
+    description: "Operate the monitor MCP for machine health, processes, cron jobs, and cleanup workflows",
+    category: "Development Tools",
+    tags: ["monitoring", "mcp", "processes", "operations"]
+  },
+  {
+    name: "regex-tester",
+    displayName: "Regex Tester",
+    description: "Test and validate regular expressions with sample inputs",
+    category: "Development Tools",
+    tags: ["regex", "testing", "validation", "patterns"]
+  },
+  {
+    name: "scancommitpr",
+    displayName: "Scan Commit PR",
+    description: "Scan repo changes, group into logical commits, push, and optionally create a PR",
+    category: "Development Tools",
+    dependencies: ["scancommitpush"],
+    tags: ["git", "commit", "push", "pull-request", "automation"]
+  },
+  {
+    name: "scancommitpush",
+    displayName: "Scan Commit Push",
+    description: "Scan repo changes, group into logical commits with conventional messages, and push to GitHub",
+    category: "Development Tools",
+    tags: ["git", "commit", "push", "automation"]
+  },
+  {
+    name: "security-audit",
+    displayName: "Security Audit",
+    description: "Perform security audits on codebases and infrastructure configurations",
+    category: "Development Tools",
+    tags: ["security", "audit", "vulnerabilities", "scanning"]
+  },
+  {
+    name: "tmux-session",
+    displayName: "Tmux Session",
+    description: "Create and manage grouped tmux sessions with workspace-aware naming and window layout guidance",
+    category: "Development Tools",
+    tags: ["tmux", "terminal", "sessions", "workspace"]
+  },
+  {
+    name: "validate-config",
+    displayName: "Validate Config",
+    description: "Validate configuration files for syntax and schema compliance",
+    category: "Development Tools",
+    tags: ["config", "validation", "schema", "linting"]
+  },
+  {
+    name: "oss-app-two-backend-storage",
+    displayName: "OSS App Two-Backend Storage",
+    description: "Recipe for the Hasna two-backend storage contract: client transport + HTTP store, server PG/SQLite backend, pg-migrations + apply script, fail-closed URL-without-key, bun bins, contract manifest, Dockerfile",
+    category: "Development Tools",
+    tags: ["storage", "backend", "postgresql", "sqlite", "two-backend", "oss-app"],
+    kind: "instruction"
   }
-}
+];
 
-class MemorySkillsStore {
-  backend = { kind: "memory", durable: false, label: "memory (non-durable)" };
-  apiKeys = new Map;
-  runs = new Map;
-  logs = new Map;
-  artifacts = new Map;
-  idempotency = new Map;
-  skills = new Map;
-  bundles = new Map;
-  pins = new Map;
-  constructor(apiKeys = []) {
-    for (const key of apiKeys)
-      this.addApiKey(key.token, key.principal);
-  }
-  addApiKey(token, principal) {
-    const resolved = publicPrincipal(principal);
-    this.apiKeys.set(hashApiKey(token), resolved);
-    return resolved;
-  }
-  async ensureBootstrapApiKey(token, principal) {
-    this.addApiKey(token, principal);
+// src/lib/registry-data/business-marketing.ts
+var BUSINESS_MARKETING_SKILLS = [
+  {
+    name: "customer-feedback-report",
+    displayName: "Customer Feedback Report",
+    description: "Generate customer feedback reports with clusters, sentiment, root causes, roadmap recommendations, evidence, and PDF/Markdown artifacts",
+    category: "Business & Marketing",
+    kind: "instruction",
+    tags: ["feedback", "customer", "sentiment", "roadmap", "report"]
+  },
+  {
+    name: "pitch-deck",
+    displayName: "Pitch Deck",
+    description: "Generate investor and sales deck packages with slides, speaker notes, design direction, PDF, and PPTX artifacts",
+    category: "Business & Marketing",
+    kind: "instruction",
+    dependencies: ["market-research-report"],
+    tags: ["deck", "presentation", "investor", "sales", "pptx"]
+  },
+  {
+    name: "proposal-pack",
+    displayName: "Proposal Pack",
+    description: "Generate client proposal packages with proposal, statement of work, pricing, timeline, assumptions, cover email, and PDF/Markdown artifacts",
+    category: "Business & Marketing",
+    kind: "instruction",
+    tags: ["proposal", "sow", "sales", "pricing", "timeline"]
+  },
+  {
+    name: "seo-content-pack",
+    displayName: "SEO Content Pack",
+    description: "Generate SEO content packages with topic clusters, articles, metadata, internal links, FAQs, and publishing cadence",
+    category: "Business & Marketing",
+    kind: "instruction",
+    tags: ["seo", "content", "articles", "metadata"]
+  },
+  {
+    name: "landing-page-pack",
+    displayName: "Landing Page Pack",
+    description: "Generate landing page packages with conversion copy, wireframes, CTA maps, experiments, preview HTML, and implementation notes",
+    category: "Business & Marketing",
+    kind: "instruction",
+    tags: ["landing-page", "sales", "copywriting", "conversion"]
+  },
+  {
+    name: "ad-creative-pack",
+    displayName: "Ad Creative Pack",
+    description: "Generate paid ad packages with platform copy, creative concepts, image prompts, audience angles, and test matrices",
+    category: "Business & Marketing",
+    kind: "instruction",
+    tags: ["ads", "creative", "marketing", "copywriting"]
+  },
+  {
+    name: "email-sequence",
+    displayName: "Email Sequence",
+    description: "Generate email campaign packages with subject lines, preview text, body copy, segmentation notes, CTA variants, HTML emails, and send plans",
+    category: "Business & Marketing",
+    kind: "instruction",
+    tags: ["email", "marketing", "campaign", "copywriting"]
+  },
+  {
+    name: "social-content-calendar",
+    displayName: "Social Content Calendar",
+    description: "Generate social content calendars with daily posts, channel strategy, asset briefs, hooks, publishing schedules, and repurposing maps",
+    category: "Business & Marketing",
+    kind: "instruction",
+    tags: ["social", "content", "calendar", "marketing"]
+  },
+  {
+    name: "one-page-website",
+    displayName: "One Page Website",
+    description: "Generate static one-page website bundles with HTML, CSS, JavaScript, copy, section maps, deploy notes, and manifest",
+    category: "Business & Marketing",
+    tags: ["website", "landing-page", "static-site", "html"]
   }
-  async authenticateApiKeyHash(hash) {
-    return this.apiKeys.get(hash) ?? null;
+];
+
+// src/lib/registry-data/productivity-organization.ts
+var PRODUCTIVITY_ORGANIZATION_SKILLS = [
+  {
+    name: "meeting-pack",
+    displayName: "Meeting Pack",
+    description: "Generate meeting artifact packages with summaries, decisions, action items, follow-up email, timeline, project export, and manifest",
+    category: "Productivity & Organization",
+    kind: "instruction",
+    tags: ["meeting", "summary", "action-items", "decisions"]
+  },
+  {
+    name: "file-organizer",
+    displayName: "File Organizer",
+    description: "Organize files into structured directories based on type, date, or content",
+    category: "Productivity & Organization",
+    tags: ["files", "organization", "sorting", "cleanup"]
+  },
+  {
+    name: "folder-tree",
+    displayName: "Folder Tree",
+    description: "Generate and display folder tree structures for documentation",
+    category: "Productivity & Organization",
+    tags: ["folder", "tree", "structure", "visualization"]
+  },
+  {
+    name: "form-filler",
+    displayName: "Form Filler",
+    description: "Automatically fill out web forms and document templates",
+    category: "Productivity & Organization",
+    tags: ["forms", "automation", "filling", "data-entry"]
+  },
+  {
+    name: "merge-pdfs",
+    displayName: "Merge PDFs",
+    description: "Merge multiple PDF files into a single document",
+    category: "Productivity & Organization",
+    tags: ["pdf", "merge", "documents", "combining"]
+  },
+  {
+    name: "split-pdf",
+    displayName: "Split PDF",
+    description: "Split PDF documents into separate pages or sections",
+    category: "Productivity & Organization",
+    tags: ["pdf", "split", "documents", "pages"]
   }
-  async createRun(input) {
-    const idemKey = input.idempotencyKey?.trim();
-    const idemMapKey = idemKey ? `${input.principal.orgId}:${idemKey}` : undefined;
-    if (idemMapKey) {
-      const existing = this.idempotency.get(idemMapKey);
-      if (existing)
-        return this.runs.get(existing);
-    }
-    const now = nowIso();
-    const run = {
-      id: runId(),
-      orgId: input.principal.orgId,
-      userId: input.principal.userId,
-      skill: input.slug,
-      requestedSlug: input.slug,
-      status: "queued",
-      input: input.input,
-      args: input.args,
-      ...idemKey ? { idempotencyKey: idemKey } : {},
-      correlationId: randomUUID3(),
-      costCents: 0,
-      leaseGeneration: 0,
-      createdAt: now
-    };
-    this.runs.set(run.id, run);
-    this.logs.set(run.id, []);
-    this.artifacts.set(run.id, []);
-    if (idemMapKey)
-      this.idempotency.set(idemMapKey, run.id);
-    return run;
-  }
-  async listRuns(principal, limit) {
-    return Array.from(this.runs.values()).filter((run) => run.orgId === principal.orgId).sort((a3, b3) => b3.createdAt.localeCompare(a3.createdAt)).slice(0, normalizeLimit(limit));
-  }
-  async getRun(principal, runId2) {
-    const run = this.runs.get(runId2);
-    return run && run.orgId === principal.orgId ? run : null;
-  }
-  async claimNextRun(_input) {
-    const run = Array.from(this.runs.values()).filter((candidate) => candidate.status === "queued" || candidate.status === "retrying").sort((a3, b3) => a3.createdAt.localeCompare(b3.createdAt))[0];
-    if (!run)
-      return null;
-    return this.patchRun(run.id, { status: "running", startedAt: run.startedAt ?? nowIso(), leaseGeneration: run.leaseGeneration + 1 });
-  }
-  async updateRun(runId2, patch) {
-    return this.patchRun(runId2, patch);
-  }
-  async transitionRun(runId2, patch, expectedGeneration) {
-    const run = this.runs.get(runId2);
-    if (!run)
-      return null;
-    if (run.leaseGeneration !== expectedGeneration) {
-      throw new StaleLeaseGenerationError(runId2, expectedGeneration, run.leaseGeneration, run.status);
-    }
-    return this.patchRun(runId2, patch);
-  }
-  async appendLog(runId2, orgId, level, message) {
-    const entries = this.logs.get(runId2) ?? [];
-    const log = { runId: runId2, sequence: entries.length + 1, level, message, createdAt: nowIso() };
-    entries.push(log);
-    this.logs.set(runId2, entries);
-    return log;
-  }
-  async listLogs(principal, runId2) {
-    const run = await this.getRun(principal, runId2);
-    return run ? [...this.logs.get(runId2) ?? []] : [];
-  }
-  async addArtifact(artifact) {
-    const next = { ...artifact, createdAt: nowIso() };
-    const artifacts = this.artifacts.get(artifact.runId) ?? [];
-    artifacts.push(next);
-    this.artifacts.set(artifact.runId, artifacts);
-    return next;
-  }
-  async listArtifacts(principal, runId2) {
-    const run = await this.getRun(principal, runId2);
-    return run ? [...this.artifacts.get(runId2) ?? []] : [];
-  }
-  async getArtifact(principal, runId2, id) {
-    const artifacts = await this.listArtifacts(principal, runId2);
-    return artifacts.find((artifact) => artifact.id === id) ?? null;
-  }
-  async publishSkill(input) {
-    const key = skillKey(input.principal.orgId, input.slug);
-    const now = nowIso();
-    const previous = this.skills.get(key);
-    if (previous && !previous.tombstonedAt && input.expectedRevisionId !== previous.revisionId) {
-      throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, previous.revisionId);
-    }
-    if (input.bundle) {
-      const bundleMapKey = skillKey(input.principal.orgId, input.bundle.sha256);
-      this.bundles.set(bundleMapKey, {
-        ...this.bundles.get(bundleMapKey),
-        ...input.bundle,
-        orgId: input.principal.orgId,
-        createdAt: this.bundles.get(bundleMapKey)?.createdAt ?? now
-      });
-    }
-    const carriedBundle = !input.bundle && previous?.bundleSha256 ? { bundleSha256: previous.bundleSha256, ...previous.bundleByteSize === undefined ? {} : { bundleByteSize: previous.bundleByteSize } } : {};
-    const carriedSkillMd = typeof input.skillMd === "string" ? input.skillMd : previous?.skillMd;
-    const record = {
-      orgId: input.principal.orgId,
-      slug: input.slug,
-      displayName: input.displayName,
-      description: input.description,
-      category: input.category,
-      tags: [...input.tags],
-      source: input.source,
-      kind: input.kind,
-      ...input.version ? { version: input.version } : {},
-      ...carriedSkillMd ? { skillMd: carriedSkillMd } : {},
-      ...input.bundle ? { bundleSha256: input.bundle.sha256, bundleByteSize: input.bundle.byteSize } : carriedBundle,
-      publishedByUserId: input.principal.userId,
-      createdAt: previous?.createdAt ?? now,
-      updatedAt: now,
-      revisionId: revisionIdOfRecord(recordFieldsOf(input, carriedBundle, carriedSkillMd)),
-      revisionNumber: (previous?.revisionNumber ?? 0) + 1
-    };
-    this.skills.set(key, record);
-    if (previous?.bundleSha256 && input.bundle && previous.bundleSha256 !== input.bundle.sha256) {
-      this.collectOrphanBundle(input.principal.orgId, previous.bundleSha256);
-    }
-    return record;
-  }
-  async listSkills(principal) {
-    return Array.from(this.skills.values()).filter((skill) => skill.orgId === principal.orgId && !skill.tombstonedAt).sort((a3, b3) => a3.slug.localeCompare(b3.slug));
+];
+
+// src/lib/registry-data/project-management.ts
+var PROJECT_MANAGEMENT_SKILLS = [
+  {
+    name: "businessactivity",
+    displayName: "Business Activity",
+    description: "Business activity, workflow, and ownership management service",
+    category: "Project Management",
+    tags: ["business", "workflow", "activities", "management"]
+  },
+  {
+    name: "implementation",
+    displayName: "Implementation",
+    description: "Create .implementation scaffold for project development tracking",
+    category: "Project Management",
+    tags: ["implementation", "tracking", "scaffold", "project"]
+  },
+  {
+    name: "implementation-plan",
+    displayName: "Implementation Plan",
+    description: "Generate detailed implementation plans with phases and milestones",
+    category: "Project Management",
+    tags: ["implementation", "planning", "milestones", "phases"]
+  },
+  {
+    name: "implementation-todo",
+    displayName: "Implementation Todo",
+    description: "Manage implementation task lists and todo items",
+    category: "Project Management",
+    tags: ["implementation", "todo", "tasks", "tracking"]
+  },
+  {
+    name: "todos-plan",
+    displayName: "Todos Plan",
+    description: "Author, sync, route, and verify Todos plans using Todos CLI plan IDs as source of truth",
+    category: "Project Management",
+    tags: ["todos", "plans", "tasks", "verification", "workflow"]
   }
-  async getSkill(principal, slug) {
-    const skill = this.skills.get(skillKey(principal.orgId, slug));
-    return skill && skill.orgId === principal.orgId ? skill : null;
+];
+
+// src/lib/registry-data/content-generation.ts
+var CONTENT_GENERATION_SKILLS = [
+  {
+    name: "pdf-generate",
+    displayName: "PDF Generate",
+    description: "Generate PDF documents with rich formatting and layouts",
+    category: "Content Generation",
+    tags: ["pdf", "document", "generation", "formatting"]
+  },
+  {
+    name: "slide-deck-generator",
+    displayName: "Slide Deck Generator",
+    description: "Generate slide decks from briefs, docs, or outlines with PDF, PPTX, speaker notes, and structured slide metadata",
+    category: "Content Generation",
+    tags: ["presentation", "slides", "deck", "documents"]
+  },
+  {
+    name: "generate-qrcode",
+    displayName: "Generate QR Code",
+    description: "Generate QR codes with custom styling and embedded data",
+    category: "Content Generation",
+    tags: ["qrcode", "generation", "encoding", "visual"]
+  },
+  {
+    name: "generate-resume",
+    displayName: "Generate Resume",
+    description: "Generate professional resumes with formatting and content optimization",
+    category: "Content Generation",
+    tags: ["resume", "cv", "career", "generation"]
   }
-  async updateSkill(principal, slug, patch, expectedRevisionId) {
-    const current = await this.getSkill(principal, slug);
-    if (!current || current.tombstonedAt)
-      return null;
-    if (expectedRevisionId !== current.revisionId) {
-      throw new SkillRevisionConflictError(slug, expectedRevisionId, current.revisionId);
-    }
-    const latest = this.skills.get(skillKey(principal.orgId, slug));
-    if (!latest || latest.tombstonedAt)
-      return null;
-    if (latest.revisionId !== current.revisionId) {
-      throw new SkillRevisionConflictError(slug, expectedRevisionId, latest.revisionId);
-    }
-    const next = {
-      ...latest,
-      ...patch,
-      updatedAt: nowIso(),
-      revisionId: revisionIdOfRecord({ ...latest, ...patch }),
-      revisionNumber: latest.revisionNumber + 1
-    };
-    this.skills.set(skillKey(principal.orgId, slug), next);
-    return next;
+];
+
+// src/lib/registry-data/finance-compliance.ts
+var FINANCE_COMPLIANCE_SKILLS = [
+  {
+    name: "contract-review-report",
+    displayName: "Contract Review Report",
+    description: "Generate contract review reports with risk register, clause summary, redline suggestions, negotiation email, and manifest artifacts",
+    category: "Finance & Compliance",
+    kind: "instruction",
+    tags: ["contract", "legal", "review", "risk"]
+  },
+  {
+    name: "invoice",
+    displayName: "Invoice",
+    description: "Generate professional invoices with company management and PDF export",
+    category: "Finance & Compliance",
+    tags: ["invoice", "billing", "pdf", "finance"]
+  },
+  {
+    name: "invoice-reconciliation",
+    displayName: "Invoice Reconciliation",
+    description: "Generate invoice reconciliation reports with matched payments, discrepancies, anomaly notes, summaries, and manifest artifacts",
+    category: "Finance & Compliance",
+    tags: ["invoice", "payments", "reconciliation", "finance"]
   }
-  async deleteSkill(principal, slug, tombstoneWindowMs) {
-    const current = await this.getSkill(principal, slug);
-    if (!current)
-      return null;
-    if (!current.tombstonedAt) {
-      const tombstoned = nowIso();
-      const purgeAfter = new Date(Date.now() + tombstoneWindowMs).toISOString();
-      const next = { ...current, tombstonedAt: tombstoned, tombstonePurgeAfter: purgeAfter, updatedAt: tombstoned };
-      this.skills.set(skillKey(principal.orgId, slug), next);
-      return next;
-    }
-    return current;
+];
+
+// src/lib/registry-data/data-analysis.ts
+var DATA_ANALYSIS_SKILLS = [
+  {
+    name: "analyze-data",
+    displayName: "Analyze Data",
+    description: "Data science insights for CSV and JSON datasets with statistical analysis",
+    category: "Data & Analysis",
+    tags: ["data", "analysis", "csv", "json", "statistics"]
+  },
+  {
+    name: "dashboard-builder",
+    displayName: "Dashboard Builder",
+    description: "Build data dashboards with charts, metrics, and visualizations",
+    category: "Data & Analysis",
+    tags: ["dashboard", "visualization", "charts", "metrics"]
+  },
+  {
+    name: "data-anonymizer",
+    displayName: "Data Anonymizer",
+    description: "Anonymize sensitive data in datasets for privacy compliance",
+    category: "Data & Analysis",
+    tags: ["anonymization", "privacy", "data", "compliance"]
+  },
+  {
+    name: "generate-chart",
+    displayName: "Generate Chart",
+    description: "Generate data charts and visualizations from datasets",
+    category: "Data & Analysis",
+    tags: ["charts", "visualization", "data", "graphs"]
+  },
+  {
+    name: "read-csv",
+    displayName: "Read CSV",
+    description: "Parse CSV files into structured JSON with delimiter and encoding detection",
+    category: "Data & Analysis",
+    tags: ["csv", "parsing", "tabular", "data"]
+  },
+  {
+    name: "read-excel",
+    displayName: "Read Excel",
+    description: "Parse XLS and XLSX workbooks into structured JSON with sheet and formatted cell metadata",
+    category: "Data & Analysis",
+    tags: ["excel", "spreadsheet", "xlsx", "data"]
+  },
+  {
+    name: "pdf-to-markdown",
+    displayName: "PDF to Markdown",
+    description: "Convert PDFs into clean markdown with remote extraction and structure cleanup",
+    category: "Data & Analysis",
+    tags: ["pdf", "markdown", "conversion"]
+  },
+  {
+    name: "pdf-to-dataset",
+    displayName: "PDF to Dataset",
+    description: "Extract PDF tables, forms, invoices, and semi-structured content into CSV and JSON datasets",
+    category: "Data & Analysis",
+    tags: ["pdf", "dataset", "csv", "json", "extraction"]
+  },
+  {
+    name: "doc-read",
+    displayName: "Doc Read",
+    description: "Read and extract text from DOCX files with section parsing and metadata extraction",
+    category: "Data & Analysis",
+    tags: ["docx", "reader", "extraction", "word"]
   }
-  async purgeExpiredTombstones(principal) {
-    const now = nowIso();
-    const purged = [];
-    for (const [key, skill] of this.skills) {
-      if (skill.orgId !== principal.orgId || !skill.tombstonedAt || !skill.tombstonePurgeAfter)
-        continue;
-      if (skill.tombstonePurgeAfter > now)
-        continue;
-      this.skills.delete(key);
-      if (skill.bundleSha256)
-        this.collectOrphanBundle(principal.orgId, skill.bundleSha256);
-      purged.push(skill);
-    }
-    return purged;
+];
+
+// src/lib/registry-data/media-processing.ts
+var MEDIA_PROCESSING_SKILLS = [
+  {
+    name: "video-highlight-pack",
+    displayName: "Video Highlight Pack",
+    description: "Generate video highlight packages with clip plans, captions, thumbnail briefs, chapter markers, social posts, and edit decisions",
+    category: "Media Processing",
+    kind: "instruction",
+    tags: ["video", "highlights", "clips", "captions"]
+  },
+  {
+    name: "compress-video",
+    displayName: "Compress Video",
+    description: "Compress video files while preserving visual quality using ffmpeg",
+    category: "Media Processing",
+    tags: ["video", "compression", "ffmpeg", "optimization"]
+  },
+  {
+    name: "audio-extract",
+    displayName: "Audio Extract",
+    description: "Extract audio tracks from video files with multiple format support",
+    category: "Media Processing",
+    tags: ["audio", "extraction", "video", "conversion"]
+  },
+  {
+    name: "extract-frames",
+    displayName: "Extract Frames",
+    description: "Extract frames from video files at specified intervals or timestamps",
+    category: "Media Processing",
+    tags: ["frames", "video", "extraction", "images"]
+  },
+  {
+    name: "gif-maker",
+    displayName: "GIF Maker",
+    description: "Create animated GIFs from images, videos, or screen recordings",
+    category: "Media Processing",
+    tags: ["gif", "animation", "images", "video"]
+  },
+  {
+    name: "video-downloader",
+    displayName: "Video Downloader",
+    description: "Download videos from various online platforms and services",
+    category: "Media Processing",
+    tags: ["video", "download", "platforms", "media"]
+  },
+  {
+    name: "watermark",
+    displayName: "Watermark",
+    description: "Add watermarks to images and documents for copyright protection",
+    category: "Media Processing",
+    tags: ["watermark", "protection", "copyright", "images"]
   }
-  async getSkillBundle(principal, sha256) {
-    const bundle = this.bundles.get(skillKey(principal.orgId, sha256));
-    return bundle && bundle.orgId === principal.orgId ? bundle : null;
+];
+
+// src/lib/registry-data/design-branding.ts
+var DESIGN_BRANDING_SKILLS = [
+  {
+    name: "brand-kit",
+    displayName: "Brand Kit",
+    description: "Generate brand kits with logo usage, palette, typography, brand voice, sample applications, Markdown guide, PDF guide, and SVG assets",
+    category: "Design & Branding",
+    kind: "instruction",
+    tags: ["brand", "design", "palette", "typography"]
+  },
+  {
+    name: "brand-assets",
+    displayName: "Brand Assets",
+    description: "Fetch official brand assets from a website or brand name with logos, PNG sizes, palette, typography, source metadata, and manifests",
+    category: "Design & Branding",
+    tags: ["brand", "logo", "assets", "palette", "typography"]
+  },
+  {
+    name: "logo-design",
+    displayName: "Logo Design",
+    description: "Generate multi-variant logo packages with transparent PNGs, vector-style SVGs, usage notes, and manifests",
+    category: "Design & Branding",
+    tags: ["logo", "design", "branding", "identity"]
+  },
+  {
+    name: "generate-favicon",
+    displayName: "Generate Favicon",
+    description: "Generate favicons in multiple sizes and formats for websites",
+    category: "Design & Branding",
+    tags: ["favicon", "icon", "design", "web"]
+  },
+  {
+    name: "product-mockup",
+    displayName: "Product Mockup",
+    description: "Generate product mockup packages with visual variants, prompts, usage notes, and asset metadata",
+    category: "Design & Branding",
+    tags: ["product", "mockup", "visualization", "marketing"]
+  },
+  {
+    name: "siteanalyze",
+    displayName: "Site Analyze",
+    description: "Analyze any website's design system \u2014 detects shadcn/ui, Tailwind, extracts colors, typography, and components via Playwright + Claude Vision.",
+    category: "Design & Branding",
+    tags: ["design", "shadcn", "tailwind", "colors", "typography", "playwright", "analysis", "styles"]
   }
-  async pinSkill(principal, slug, metadata = {}) {
-    const pin = { orgId: principal.orgId, principal: principal.apiKeyId, slug, pinnedAt: nowIso(), metadata: { ...metadata } };
-    this.pins.set(pinKey(principal.orgId, principal.apiKeyId, slug), pin);
-    return pin;
+];
+
+// src/lib/registry-data/web-browser.ts
+var WEB_BROWSER_SKILLS = [
+  {
+    name: "domainpurchase",
+    displayName: "Domain Purchase",
+    description: "Purchase and manage domains via registrar connectors",
+    category: "Web & Browser",
+    tags: ["domain", "purchase", "registrar", "management"]
   }
-  async unpinSkill(principal, slug) {
-    return this.pins.delete(pinKey(principal.orgId, principal.apiKeyId, slug));
+];
+
+// src/lib/registry-data/research-writing.ts
+var RESEARCH_WRITING_SKILLS = [
+  {
+    name: "blog-article",
+    displayName: "Blog Article",
+    description: "Create SEO-optimized blog article artifact packages",
+    category: "Research & Writing",
+    kind: "instruction",
+    tags: ["blog", "article", "writing", "seo"]
+  },
+  {
+    name: "market-research-report",
+    displayName: "Market Research Report",
+    description: "Generate market research packages with competitor tables, positioning, pricing notes, source notes, and PDF/Markdown artifacts",
+    category: "Research & Writing",
+    kind: "instruction",
+    tags: ["market-research", "competitors", "positioning", "pricing", "report"]
   }
-  async listPins(principal) {
-    return Array.from(this.pins.values()).filter((pin) => pin.orgId === principal.orgId && pin.principal === principal.apiKeyId).sort((a3, b3) => a3.slug.localeCompare(b3.slug));
+];
+
+// src/lib/registry-data/science-academic.ts
+var SCIENCE_ACADEMIC_SKILLS = [
+  {
+    name: "bio-sequence-tool",
+    displayName: "Bio Sequence Tool",
+    description: "Analyze and manipulate biological sequences including DNA, RNA, and protein data",
+    category: "Science & Academic",
+    tags: ["biology", "dna", "sequence", "bioinformatics"]
+  },
+  {
+    name: "experiment-power-calculator",
+    displayName: "Experiment Power Calculator",
+    description: "Calculate statistical power and sample size for experiments",
+    category: "Science & Academic",
+    tags: ["experiment", "statistics", "power-analysis", "sample-size"]
+  },
+  {
+    name: "latex-table-generator",
+    displayName: "LaTeX Table Generator",
+    description: "Generate formatted LaTeX tables from data for academic papers",
+    category: "Science & Academic",
+    tags: ["latex", "tables", "academic", "formatting"]
+  },
+  {
+    name: "scientific-figure-check",
+    displayName: "Scientific Figure Check",
+    description: "Validate scientific figures for accuracy, formatting, and publication standards",
+    category: "Science & Academic",
+    tags: ["scientific", "figures", "validation", "publishing"]
+  },
+  {
+    name: "statistical-test-selector",
+    displayName: "Statistical Test Selector",
+    description: "Recommend appropriate statistical tests based on data and research questions",
+    category: "Science & Academic",
+    tags: ["statistics", "test-selection", "research", "analysis"]
   }
-  async listTags(principal) {
-    await this.purgeExpiredTombstones(principal);
-    const tags = new Set;
-    for (const skill of this.skills.values()) {
+];
+
+// src/lib/registry-data/education-learning.ts
+var EDUCATION_LEARNING_SKILLS = [];
+
+// src/lib/registry-data/communication.ts
+var COMMUNICATION_SKILLS = [];
+
+// src/lib/registry-data/health-wellness.ts
+var HEALTH_WELLNESS_SKILLS = [];
+
+// src/lib/registry-data/travel-lifestyle.ts
+var TRAVEL_LIFESTYLE_SKILLS = [];
+
+// src/lib/registry-data/event-management.ts
+var EVENT_MANAGEMENT_SKILLS = [];
+
+// src/lib/registry-data/index.ts
+var SKILLS = [
+  ...DEVELOPMENT_TOOLS_SKILLS,
+  ...BUSINESS_MARKETING_SKILLS,
+  ...PRODUCTIVITY_ORGANIZATION_SKILLS,
+  ...PROJECT_MANAGEMENT_SKILLS,
+  ...CONTENT_GENERATION_SKILLS,
+  ...FINANCE_COMPLIANCE_SKILLS,
+  ...DATA_ANALYSIS_SKILLS,
+  ...MEDIA_PROCESSING_SKILLS,
+  ...DESIGN_BRANDING_SKILLS,
+  ...WEB_BROWSER_SKILLS,
+  ...RESEARCH_WRITING_SKILLS,
+  ...SCIENCE_ACADEMIC_SKILLS,
+  ...EDUCATION_LEARNING_SKILLS,
+  ...COMMUNICATION_SKILLS,
+  ...HEALTH_WELLNESS_SKILLS,
+  ...TRAVEL_LIFESTYLE_SKILLS,
+  ...EVENT_MANAGEMENT_SKILLS
+];
+
+// src/lib/hosted-skill-set.ts
+var HOSTED_RUNTIMES = new Set(["hosted"]);
+var HOSTED_SOURCES = new Set(["remote", "private-hosted"]);
+var HOSTED_METADATA_SET_EMPTY_ERROR = [
+  "The hosted metadata skill set is empty, but the packaging guards that depend on it",
+  "only mean anything while it is non-empty: an empty set makes every one of them pass",
+  "vacuously and silently removes the protection that keeps hosted implementation source",
+  "out of the published package.",
+  "",
+  "If emptying the set is intentional (every hosted skill was deleted or converted to a",
+  "runnable in-repo skill), retire the derived guards in the SAME change \u2014 do not let them",
+  "stay green and empty."
+].join(`
+`);
+var SLUG = "[^,{}/]+";
+var BRACE_SOURCE_EXCLUSION = new RegExp(`^!skills/\\{(${SLUG}(?:,${SLUG})+)\\}/src$`);
+var SINGLE_SOURCE_EXCLUSION = new RegExp(`^!skills/(${SLUG})/src$`);
+
+// src/lib/skill-validation.ts
+var RESERVED_SKILL_ENTRIES = new Set([
+  ".env",
+  ".npmrc",
+  ".pypirc",
+  ".netrc",
+  "id_rsa",
+  "id_ed25519"
+]);
+var KNOWN_TOP_LEVEL_ENTRIES = new Set([
+  ".claude",
+  ".env.example",
+  ".gitignore",
+  ".skills",
+  "CLAUDE.md",
+  "AGENTS.md",
+  "LICENSE",
+  "PROJECT_OVERVIEW.md",
+  "QUICKSTART.md",
+  "README.md",
+  "SKILL.md",
+  "api-docs-list.json",
+  "auth.ts",
+  "bun.lock",
+  "bunfig.toml",
+  "data",
+  "dist",
+  "examples",
+  "exports",
+  "http-client.ts",
+  "index.ts",
+  "install.sh",
+  "installer.ts",
+  "logs",
+  "node_modules",
+  "package.json",
+  "scripts",
+  "skill-install.ts",
+  "skill.json",
+  "src",
+  "tests",
+  "references",
+  "assets",
+  "tsconfig.json",
+  "vision.ts"
+]);
+var VALID_PROVENANCE_SOURCES = new Set(["official", "custom", "remote", "private", "private-hosted", "upstream", "extension"]);
+
+// src/lib/skill-hash.ts
+var HASH_EXCLUDE_DIRS = new Set([".git", "node_modules", "dist", "build", ".turbo"]);
+
+// src/lib/portable-skills-files.ts
+var ANY_SEGMENT_COPY_EXCLUDES = new Set([
+  ".git",
+  ".DS_Store",
+  ".system",
+  "node_modules"
+]);
+var FIRST_SEGMENT_COPY_EXCLUDES = new Set([
+  "dist",
+  "build",
+  ".turbo"
+]);
+// src/lib/portable-skills.ts
+var OFFICIAL_SKILL_NAMES = new Set(SKILLS.map((skill) => skill.name));
+// src/lib/installer.ts
+var __dirname2 = dirname5(fileURLToPath2(import.meta.url));
+function findSkillsDir() {
+  let dir = __dirname2;
+  for (let i3 = 0;i3 < 5; i3++) {
+    const candidate = join7(dir, "skills");
+    if (existsSync4(candidate) && !dir.includes(".skills"))
+      return candidate;
+    dir = dirname5(dir);
+  }
+  return join7(__dirname2, "..", "skills");
+}
+var SKILLS_DIR = findSkillsDir();
+
+// src/server/skills-api.ts
+var MAX_SKILL_MD_BYTES = 512000;
+var MAX_MANIFEST_BYTES = MAX_SKILL_MD_BYTES + 64000;
+var ALLOWED_PUBLISH_PARTS = new Set(["manifest", "bundle"]);
+var MAX_VERSION_MANIFEST_BYTES = 512 * 1024;
+
+// src/server/config.ts
+var DATABASE_URL_ENV = "HASNA_SKILLS_DATABASE_URL";
+var SKILLS_ENV_NAMESPACE = "SKILLS";
+function resolveServerConfig(env = process.env) {
+  assertNoRetiredModeEnvVars(env, {
+    app: SKILLS_ENV_NAMESPACE,
+    replacement: DATABASE_URL_ENV
+  });
+  const nodeEnv = env.NODE_ENV || "development";
+  const host = env.HOST || env.SKILLS_HOST || "0.0.0.0";
+  const port = parsePositiveInt(env.PORT || env.SKILLS_PORT, 8787);
+  return {
+    host,
+    port,
+    databaseUrl: env[DATABASE_URL_ENV] || env.DATABASE_URL || undefined,
+    bootstrapApiKey: env.HASNA_SKILLS_BOOTSTRAP_API_KEY || undefined,
+    seedBundledCorpus: (env.HASNA_SKILLS_SEED_BUNDLED_CORPUS ?? "1") !== "0",
+    artifactBucket: env.HASNA_SKILLS_S3_BUCKET || env.SKILLS_S3_BUCKET || undefined,
+    artifactPrefix: normalizePrefix(env.HASNA_SKILLS_S3_PREFIX || env.SKILLS_S3_PREFIX || "skills/artifacts"),
+    inlineWorker: env.HASNA_SKILLS_INLINE_WORKER === "1",
+    bundleSigningKey: env.HASNA_SKILLS_API_SIGNING_KEY || env.HASNA_SKILLS_SIGNING_KEY || undefined,
+    requestBodyLimitBytes: parsePositiveInt(env.HASNA_SKILLS_REQUEST_BODY_LIMIT_BYTES, 1e6),
+    skillBundleLimitBytes: parsePositiveInt(env.HASNA_SKILLS_BUNDLE_LIMIT_BYTES, 25000000),
+    tombstoneWindowMs: parsePositiveInt(env.HASNA_SKILLS_TOMBSTONE_WINDOW_MS, 7 * 24 * 60 * 60 * 1000),
+    publicBaseUrl: (env.SKILLS_PUBLIC_BASE_URL || localOrigin(host, port)).replace(/\/+$/, ""),
+    nodeEnv,
+    allowEphemeralStore: env.HASNA_SKILLS_ALLOW_EPHEMERAL_STORE === "1"
+  };
+}
+function localOrigin(host, port) {
+  const hostname = host === "0.0.0.0" || host === "::" ? "localhost" : host;
+  return `http://${hostname.includes(":") ? `[${hostname}]` : hostname}:${port}`;
+}
+function parsePositiveInt(value, fallback) {
+  const parsed = Number.parseInt(value ?? "", 10);
+  return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
+}
+function normalizePrefix(value) {
+  return value.replace(/^\/+|\/+$/g, "") || "skills/artifacts";
+}
+
+// src/server/handlers.ts
+import { createHash as createHash5 } from "crypto";
+
+// src/server/store.ts
+import { randomUUID as randomUUID3 } from "crypto";
+function recordFieldsOf(input, carriedBundle, carriedSkillMd) {
+  return {
+    slug: input.slug,
+    displayName: input.displayName,
+    description: input.description,
+    category: input.category,
+    tags: input.tags,
+    source: input.source,
+    kind: input.kind,
+    ...input.version ? { version: input.version } : {},
+    ...carriedSkillMd ? { skillMd: carriedSkillMd } : {},
+    bundleSha256: input.bundle?.sha256 ?? carriedBundle.bundleSha256,
+    bundleByteSize: input.bundle?.byteSize ?? carriedBundle.bundleByteSize
+  };
+}
+function resolvePoolMax(env = process.env) {
+  const parsed = Number.parseInt(env.HASNA_SKILLS_DATABASE_POOL_MAX || env.SKILLS_DATABASE_POOL_MAX || "", 10);
+  return Number.isFinite(parsed) && parsed > 0 ? parsed : 4;
+}
+var LOG_SEQUENCE_ATTEMPTS = 12;
+function createArtifactId() {
+  return artifactId();
+}
+async function createStore(options = {}) {
+  const target = resolveDatabaseTarget(options.databaseUrl);
+  const store = instantiateStore(target, options.sqlite);
+  await store.verifyConnectivity?.();
+  if (options.bootstrapApiKey && store.ensureBootstrapApiKey) {
+    await store.ensureBootstrapApiKey(options.bootstrapApiKey);
+  }
+  return store;
+}
+function instantiateStore(target, sqliteOptions) {
+  switch (target.kind) {
+    case "postgres":
+      return new PostgresSkillsStore(target.url);
+    case "sqlite":
+      return new SqliteSkillsStore(target.path, sqliteOptions);
+    case "memory":
+      return new MemorySkillsStore;
+  }
+}
+
+class MemorySkillsStore {
+  backend = { kind: "memory", durable: false, label: "memory (non-durable)" };
+  apiKeys = new Map;
+  runs = new Map;
+  logs = new Map;
+  artifacts = new Map;
+  idempotency = new Map;
+  skills = new Map;
+  bundles = new Map;
+  versions = new Map;
+  pins = new Map;
+  constructor(apiKeys = []) {
+    for (const key of apiKeys)
+      this.addApiKey(key.token, key.principal);
+  }
+  addApiKey(token, principal) {
+    const resolved = publicPrincipal(principal);
+    this.apiKeys.set(hashApiKey(token), resolved);
+    return resolved;
+  }
+  async ensureBootstrapApiKey(token, principal) {
+    this.addApiKey(token, principal);
+  }
+  async authenticateApiKeyHash(hash) {
+    return this.apiKeys.get(hash) ?? null;
+  }
+  async createRun(input) {
+    const idemKey = input.idempotencyKey?.trim();
+    const idemMapKey = idemKey ? `${input.principal.orgId}:${idemKey}` : undefined;
+    if (idemMapKey) {
+      const existing = this.idempotency.get(idemMapKey);
+      if (existing)
+        return this.runs.get(existing);
+    }
+    const now = nowIso();
+    const run = {
+      id: runId(),
+      orgId: input.principal.orgId,
+      userId: input.principal.userId,
+      skill: input.slug,
+      requestedSlug: input.slug,
+      status: "queued",
+      input: input.input,
+      args: input.args,
+      ...idemKey ? { idempotencyKey: idemKey } : {},
+      correlationId: randomUUID3(),
+      costCents: 0,
+      leaseGeneration: 0,
+      createdAt: now
+    };
+    this.runs.set(run.id, run);
+    this.logs.set(run.id, []);
+    this.artifacts.set(run.id, []);
+    if (idemMapKey)
+      this.idempotency.set(idemMapKey, run.id);
+    return run;
+  }
+  async listRuns(principal, limit) {
+    return Array.from(this.runs.values()).filter((run) => run.orgId === principal.orgId).sort((a3, b3) => b3.createdAt.localeCompare(a3.createdAt)).slice(0, normalizeLimit(limit));
+  }
+  async getRun(principal, runId2) {
+    const run = this.runs.get(runId2);
+    return run && run.orgId === principal.orgId ? run : null;
+  }
+  async claimNextRun(_input) {
+    const run = Array.from(this.runs.values()).filter((candidate) => candidate.status === "queued" || candidate.status === "retrying").sort((a3, b3) => a3.createdAt.localeCompare(b3.createdAt))[0];
+    if (!run)
+      return null;
+    return this.patchRun(run.id, { status: "running", startedAt: run.startedAt ?? nowIso(), leaseGeneration: run.leaseGeneration + 1 });
+  }
+  async updateRun(runId2, patch) {
+    return this.patchRun(runId2, patch);
+  }
+  async transitionRun(runId2, patch, expectedGeneration) {
+    const run = this.runs.get(runId2);
+    if (!run)
+      return null;
+    if (run.leaseGeneration !== expectedGeneration) {
+      throw new StaleLeaseGenerationError(runId2, expectedGeneration, run.leaseGeneration, run.status);
+    }
+    return this.patchRun(runId2, patch);
+  }
+  async appendLog(runId2, orgId, level, message) {
+    const entries = this.logs.get(runId2) ?? [];
+    const log = { runId: runId2, sequence: entries.length + 1, level, message, createdAt: nowIso() };
+    entries.push(log);
+    this.logs.set(runId2, entries);
+    return log;
+  }
+  async listLogs(principal, runId2) {
+    const run = await this.getRun(principal, runId2);
+    return run ? [...this.logs.get(runId2) ?? []] : [];
+  }
+  async addArtifact(artifact) {
+    const next = { ...artifact, createdAt: nowIso() };
+    const artifacts = this.artifacts.get(artifact.runId) ?? [];
+    artifacts.push(next);
+    this.artifacts.set(artifact.runId, artifacts);
+    return next;
+  }
+  async listArtifacts(principal, runId2) {
+    const run = await this.getRun(principal, runId2);
+    return run ? [...this.artifacts.get(runId2) ?? []] : [];
+  }
+  async getArtifact(principal, runId2, id) {
+    const artifacts = await this.listArtifacts(principal, runId2);
+    return artifacts.find((artifact) => artifact.id === id) ?? null;
+  }
+  async publishSkill(input) {
+    const key = skillKey(input.principal.orgId, input.slug);
+    const now = nowIso();
+    const previous = this.skills.get(key);
+    if (previous && !previous.tombstonedAt && input.expectedRevisionId !== previous.revisionId) {
+      throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, previous.revisionId);
+    }
+    const versionSha = input.bundle?.sha256 ?? previous?.bundleSha256;
+    if (input.version && versionSha) {
+      const existing = this.versions.get(versionKey(input.principal.orgId, input.slug, input.version));
+      if (existing && existing.bundleSha256 !== versionSha) {
+        throw new SkillVersionExistsError(input.slug, input.version, existing.bundleSha256, versionSha);
+      }
+    }
+    if (input.bundle) {
+      const bundleMapKey = skillKey(input.principal.orgId, input.bundle.sha256);
+      this.bundles.set(bundleMapKey, {
+        ...this.bundles.get(bundleMapKey),
+        ...input.bundle,
+        orgId: input.principal.orgId,
+        createdAt: this.bundles.get(bundleMapKey)?.createdAt ?? now
+      });
+    }
+    const carriedBundle = !input.bundle && previous?.bundleSha256 ? { bundleSha256: previous.bundleSha256, ...previous.bundleByteSize === undefined ? {} : { bundleByteSize: previous.bundleByteSize } } : {};
+    const carriedSkillMd = typeof input.skillMd === "string" ? input.skillMd : previous?.skillMd;
+    const record = {
+      orgId: input.principal.orgId,
+      slug: input.slug,
+      displayName: input.displayName,
+      description: input.description,
+      category: input.category,
+      tags: [...input.tags],
+      source: input.source,
+      kind: input.kind,
+      ...input.version ? { version: input.version } : {},
+      ...carriedSkillMd ? { skillMd: carriedSkillMd } : {},
+      ...input.bundle ? { bundleSha256: input.bundle.sha256, bundleByteSize: input.bundle.byteSize } : carriedBundle,
+      publishedByUserId: input.principal.userId,
+      createdAt: previous?.createdAt ?? now,
+      updatedAt: now,
+      revisionId: revisionIdOfRecord(recordFieldsOf(input, carriedBundle, carriedSkillMd)),
+      revisionNumber: (previous?.revisionNumber ?? 0) + 1
+    };
+    this.skills.set(key, record);
+    if (input.version && versionSha && !this.versions.has(versionKey(input.principal.orgId, input.slug, input.version))) {
+      this.versions.set(versionKey(input.principal.orgId, input.slug, input.version), {
+        orgId: input.principal.orgId,
+        slug: input.slug,
+        version: input.version,
+        bundleSha256: versionSha,
+        bundleByteSize: input.bundle?.byteSize ?? previous?.bundleByteSize ?? 0,
+        storageKind: input.versionStorage?.storageKind ?? "db",
+        ...input.versionStorage?.storageKey ? { storageKey: input.versionStorage.storageKey } : {},
+        manifest: { ...input.versionManifest ?? {} },
+        ...input.principal.userId ? { publishedByUserId: input.principal.userId } : {},
+        createdAt: now
+      });
+    }
+    if (previous?.bundleSha256 && input.bundle && previous.bundleSha256 !== input.bundle.sha256) {
+      this.collectOrphanBundle(input.principal.orgId, previous.bundleSha256);
+    }
+    return record;
+  }
+  async listSkillVersions(principal, slug) {
+    return Array.from(this.versions.values()).filter((v2) => v2.orgId === principal.orgId && v2.slug === slug).sort((a3, b3) => b3.createdAt.localeCompare(a3.createdAt) || b3.version.localeCompare(a3.version));
+  }
+  async getSkillVersion(principal, slug, version2) {
+    const found = this.versions.get(versionKey(principal.orgId, slug, version2));
+    return found && found.orgId === principal.orgId ? found : null;
+  }
+  async listSkills(principal) {
+    return Array.from(this.skills.values()).filter((skill) => skill.orgId === principal.orgId && !skill.tombstonedAt).sort((a3, b3) => a3.slug.localeCompare(b3.slug));
+  }
+  async getSkill(principal, slug) {
+    const skill = this.skills.get(skillKey(principal.orgId, slug));
+    return skill && skill.orgId === principal.orgId ? skill : null;
+  }
+  async updateSkill(principal, slug, patch, expectedRevisionId) {
+    const current = await this.getSkill(principal, slug);
+    if (!current || current.tombstonedAt)
+      return null;
+    if (expectedRevisionId !== current.revisionId) {
+      throw new SkillRevisionConflictError(slug, expectedRevisionId, current.revisionId);
+    }
+    const latest = this.skills.get(skillKey(principal.orgId, slug));
+    if (!latest || latest.tombstonedAt)
+      return null;
+    if (latest.revisionId !== current.revisionId) {
+      throw new SkillRevisionConflictError(slug, expectedRevisionId, latest.revisionId);
+    }
+    const next = {
+      ...latest,
+      ...patch,
+      updatedAt: nowIso(),
+      revisionId: revisionIdOfRecord({ ...latest, ...patch }),
+      revisionNumber: latest.revisionNumber + 1
+    };
+    this.skills.set(skillKey(principal.orgId, slug), next);
+    return next;
+  }
+  async deleteSkill(principal, slug, tombstoneWindowMs) {
+    const current = await this.getSkill(principal, slug);
+    if (!current)
+      return null;
+    if (!current.tombstonedAt) {
+      const tombstoned = nowIso();
+      const purgeAfter = new Date(Date.now() + tombstoneWindowMs).toISOString();
+      const next = { ...current, tombstonedAt: tombstoned, tombstonePurgeAfter: purgeAfter, updatedAt: tombstoned };
+      this.skills.set(skillKey(principal.orgId, slug), next);
+      return next;
+    }
+    return current;
+  }
+  async purgeExpiredTombstones(principal) {
+    const now = nowIso();
+    const purged = [];
+    for (const [key, skill] of this.skills) {
+      if (skill.orgId !== principal.orgId || !skill.tombstonedAt || !skill.tombstonePurgeAfter)
+        continue;
+      if (skill.tombstonePurgeAfter > now)
+        continue;
+      this.skills.delete(key);
+      if (skill.bundleSha256)
+        this.collectOrphanBundle(principal.orgId, skill.bundleSha256);
+      purged.push(skill);
+    }
+    return purged;
+  }
+  async getSkillBundle(principal, sha256) {
+    const bundle = this.bundles.get(skillKey(principal.orgId, sha256));
+    return bundle && bundle.orgId === principal.orgId ? bundle : null;
+  }
+  async pinSkill(principal, slug, metadata = {}) {
+    const pin = { orgId: principal.orgId, principal: principal.apiKeyId, slug, pinnedAt: nowIso(), metadata: { ...metadata } };
+    this.pins.set(pinKey(principal.orgId, principal.apiKeyId, slug), pin);
+    return pin;
+  }
+  async unpinSkill(principal, slug) {
+    return this.pins.delete(pinKey(principal.orgId, principal.apiKeyId, slug));
+  }
+  async listPins(principal) {
+    return Array.from(this.pins.values()).filter((pin) => pin.orgId === principal.orgId && pin.principal === principal.apiKeyId).sort((a3, b3) => a3.slug.localeCompare(b3.slug));
+  }
+  async listTags(principal) {
+    await this.purgeExpiredTombstones(principal);
+    const tags = new Set;
+    for (const skill of this.skills.values()) {
       if (skill.orgId !== principal.orgId)
         continue;
       for (const tag of skill.tags) {
@@ -34324,7 +35365,7 @@ class MemorySkillsStore {
     return Array.from(this.skills.values()).filter((skill) => skill.orgId === principal.orgId && !skill.tombstonedAt).map((skill) => skill.slug).sort();
   }
   collectOrphanBundle(orgId, sha256) {
-    const referenced = Array.from(this.skills.values()).some((skill) => skill.orgId === orgId && skill.bundleSha256 === sha256);
+    const referenced = Array.from(this.skills.values()).some((skill) => skill.orgId === orgId && skill.bundleSha256 === sha256) || Array.from(this.versions.values()).some((v2) => v2.orgId === orgId && v2.bundleSha256 === sha256);
     if (!referenced)
       this.bundles.delete(skillKey(orgId, sha256));
   }
@@ -34343,6 +35384,9 @@ function skillKey(orgId, slug) {
 function pinKey(orgId, principal, slug) {
   return `${orgId.length}:${orgId}:${principal.length}:${principal}:${slug}`;
 }
+function versionKey(orgId, slug, version2) {
+  return `${orgId.length}:${orgId}:${slug.length}:${slug}:${version2}`;
+}
 
 class PostgresSkillsStore {
   backend = { kind: "postgres", durable: true, label: "postgres" };
@@ -34617,6 +35661,15 @@ class PostgresSkillsStore {
         throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, previousRevisionId);
       }
       const carriedSha = input.bundle?.sha256 ?? previousSha;
+      if (input.version && carriedSha) {
+        const existingVersion = await tx`
+          SELECT bundle_sha256 FROM skills_versions WHERE org_id = ${orgId} AND slug = ${input.slug} AND version = ${input.version} LIMIT 1
+        `;
+        const existingSha = existingVersion[0] && typeof existingVersion[0].bundle_sha256 === "string" ? String(existingVersion[0].bundle_sha256) : null;
+        if (existingSha && existingSha !== carriedSha) {
+          throw new SkillVersionExistsError(input.slug, input.version, existingSha, carriedSha);
+        }
+      }
       const carriedSize = input.bundle?.byteSize ?? (previous?.bundle_byte_size == null ? null : Number(previous.bundle_byte_size));
       const revisionId = revisionIdOfRecord({
         slug: input.slug,
@@ -34680,11 +35733,20 @@ class PostgresSkillsStore {
         const currentId = current[0] && typeof current[0].revision_id === "string" ? String(current[0].revision_id) : null;
         throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, currentId);
       }
+      if (input.version && carriedSha) {
+        await tx`
+          INSERT INTO skills_versions (org_id, slug, version, bundle_sha256, bundle_byte_size, storage_kind, storage_key, manifest_json, published_by_user_id)
+          VALUES (${orgId}, ${input.slug}, ${input.version}, ${carriedSha}, ${carriedSize ?? 0}, ${input.versionStorage?.storageKind ?? "db"},
+                  ${input.versionStorage?.storageKey ?? null}, ${JSON.stringify(input.versionManifest ?? {})}::jsonb, ${input.principal.userId})
+          ON CONFLICT (org_id, slug, version) DO NOTHING
+        `;
+      }
       if (previousSha && input.bundle && previousSha !== input.bundle.sha256) {
         await tx`
           DELETE FROM skills_bundles
           WHERE org_id = ${orgId} AND sha256 = ${previousSha}
             AND NOT EXISTS (SELECT 1 FROM skills_registry WHERE org_id = ${orgId} AND bundle_sha256 = ${previousSha})
+            AND NOT EXISTS (SELECT 1 FROM skills_versions WHERE org_id = ${orgId} AND bundle_sha256 = ${previousSha})
         `;
       }
       await tx`DELETE FROM skills_tags WHERE org_id = ${orgId} AND slug = ${input.slug}`;
@@ -34793,6 +35855,7 @@ class PostgresSkillsStore {
             DELETE FROM skills_bundles
             WHERE org_id = ${principal.orgId} AND sha256 = ${record.bundleSha256}
               AND NOT EXISTS (SELECT 1 FROM skills_registry WHERE org_id = ${principal.orgId} AND bundle_sha256 = ${record.bundleSha256})
+              AND NOT EXISTS (SELECT 1 FROM skills_versions WHERE org_id = ${principal.orgId} AND bundle_sha256 = ${record.bundleSha256})
           `;
         }
         purged.push(record);
@@ -34804,1055 +35867,247 @@ class PostgresSkillsStore {
     const rows = await this.sql`SELECT * FROM skills_bundles WHERE org_id = ${principal.orgId} AND sha256 = ${sha256} LIMIT 1`;
     return rows[0] ? rowToSkillBundle(rows[0]) : null;
   }
-  async pinSkill(principal, slug, metadata = {}) {
-    const rows = await this.sql`
-      INSERT INTO skills_pins (org_id, principal, slug, pinned_at, metadata_json)
-      VALUES (${principal.orgId}, ${principal.apiKeyId}, ${slug}, now(), ${JSON.stringify(metadata)}::jsonb)
-      ON CONFLICT (org_id, principal, slug) DO UPDATE SET
-        pinned_at = now(),
-        metadata_json = EXCLUDED.metadata_json
-      RETURNING *
-    `;
-    return rowToPin(rows[0]);
-  }
-  async unpinSkill(principal, slug) {
-    const rows = await this.sql`
-      DELETE FROM skills_pins WHERE org_id = ${principal.orgId} AND principal = ${principal.apiKeyId} AND slug = ${slug}
-      RETURNING 1 AS present
-    `;
-    return rows.length > 0;
-  }
-  async listPins(principal) {
-    const rows = await this.sql`
-      SELECT * FROM skills_pins WHERE org_id = ${principal.orgId} AND principal = ${principal.apiKeyId} ORDER BY slug ASC
-    `;
-    return rows.map(rowToPin);
-  }
-  async listTags(principal) {
-    await this.purgeExpiredTombstones(principal);
+  async listSkillVersions(principal, slug) {
     const rows = await this.sql`
-      SELECT DISTINCT tag FROM skills_tags WHERE org_id = ${principal.orgId} ORDER BY tag ASC
+      SELECT * FROM skills_versions WHERE org_id = ${principal.orgId} AND slug = ${slug}
+      ORDER BY created_at DESC, version DESC
     `;
-    return rows.map((row) => String(row.tag));
+    return rows.map((row) => rowToSkillVersion(row));
   }
-  async listSkillsByTag(principal, tag) {
-    await this.purgeExpiredTombstones(principal);
+  async getSkillVersion(principal, slug, version2) {
     const rows = await this.sql`
-      SELECT s.* FROM skills_registry s
-      JOIN skills_tags t ON t.org_id = s.org_id AND t.slug = s.slug
-      WHERE t.org_id = ${principal.orgId} AND t.tag = ${tag} AND s.tombstoned_at IS NULL
-      ORDER BY s.slug ASC
+      SELECT * FROM skills_versions WHERE org_id = ${principal.orgId} AND slug = ${slug} AND version = ${version2} LIMIT 1
     `;
-    return rows.map(rowToSkill);
+    return rows[0] ? rowToSkillVersion(rows[0]) : null;
   }
-  async listPinsByTag(principal, tag) {
-    await this.purgeExpiredTombstones(principal);
+  async pinSkill(principal, slug, metadata = {}) {
     const rows = await this.sql`
-      SELECT p.* FROM skills_pins p
-      JOIN skills_tags t ON t.org_id = p.org_id AND t.slug = p.slug
-      JOIN skills_registry s ON s.org_id = p.org_id AND s.slug = p.slug
-      WHERE p.org_id = ${principal.orgId} AND p.principal = ${principal.apiKeyId}
-        AND t.tag = ${tag} AND s.tombstoned_at IS NULL
-      ORDER BY p.slug ASC
-    `;
-    return rows.map(rowToPin);
-  }
-  async listPublishedSlugs(principal) {
-    const rows = await this.sql`
-      SELECT slug FROM skills_registry WHERE org_id = ${principal.orgId} AND tombstoned_at IS NULL ORDER BY slug ASC
-    `;
-    return rows.map((row) => String(row.slug));
-  }
-  async collectOrphanBundle(orgId, sha256) {
-    await this.sql`
-      DELETE FROM skills_bundles
-      WHERE org_id = ${orgId} AND sha256 = ${sha256}
-        AND NOT EXISTS (SELECT 1 FROM skills_registry WHERE org_id = ${orgId} AND bundle_sha256 = ${sha256})
-    `;
-  }
-}
-var NO_REVISION_SENTINEL2 = "0000000000000000000000000000000000000000000000000000000000000000";
-function isUniqueViolation(error) {
-  const code = error?.code;
-  if (code === "23505" || code === 23505)
-    return true;
-  const message = error instanceof Error ? error.message : String(error);
-  return /duplicate key value violates unique constraint/i.test(message);
-}
-function connectionFailureSummary(error) {
-  const message = error instanceof Error ? error.message : String(error);
-  return message.replace(/[a-z][a-z0-9+.-]*:\/\/\S*/gi, "<redacted-url>").split(`
-`)[0].slice(0, 200);
-}
-
-// src/server/redaction.ts
-var SECRET_PATTERNS = [
-  /\bsk-[A-Za-z0-9_-]{8,}\b/g,
-  /\bsk_[A-Za-z0-9_-]{8,}\b/g,
-  /\bgh[opsur]_[A-Za-z0-9_]{8,}\b/g,
-  /\bgithub_pat_[A-Za-z0-9_]{8,}\b/g,
-  /\bnpm_[A-Za-z0-9_]{8,}\b/g,
-  /\bAKIA[A-Z0-9]{12,}\b/g,
-  /\bAIza[A-Za-z0-9_-]{10,}\b/g,
-  /\b[A-Z0-9_]*(?:API_KEY|SECRET|TOKEN|PASSWORD|DATABASE_URL)[A-Z0-9_]*\s*[:=]\s*[^ \n\r\t]+/gi,
-  /\bhttps?:\/\/[^ \n\r\t]+X-Amz-Signature=[^ \n\r\t]+/gi
-];
-function redactForClient(value) {
-  const text = typeof value === "string" ? value : JSON.stringify(value);
-  return SECRET_PATTERNS.reduce((current, pattern) => current.replace(pattern, "credential"), text).replace(/\s+$/g, "").slice(0, 20000);
-}
-
-// src/server/handlers.ts
-var DETERMINISTIC_TEXT_HANDLERS = new Set([
-  "audio-transcript-pack",
-  "transcript",
-  "video-highlight-pack"
-]);
-async function executeRun(store, run, storage = new ArtifactStorage) {
-  try {
-    await store.appendLog(run.id, run.orgId, "info", redactForClient(`starting run ${run.skill}`));
-    if (!DETERMINISTIC_TEXT_HANDLERS.has(run.skill)) {
-      await store.appendLog(run.id, run.orgId, "warn", `${run.skill} has no provider-free handler yet`);
-      return await failRun(store, run, "HANDLER_UNAVAILABLE", "This deployment has no safe provider-free handler for that skill yet.");
-    }
-    const text = extractText(run);
-    if (!text.trim()) {
-      return await failRun(store, run, "INVALID_INPUT", "Provide transcript text with input.transcript, input.text, --text, --source, or positional text.");
-    }
-    const title = extractOption(run.args, "--title") || stringInput(run.input, "title") || "Skills run";
-    const summary = summarize(text);
-    const artifacts = [
-      textArtifact(run, "transcript.md", `# ${title}
-
-${text.trim()}
-`),
-      textArtifact(run, "summary.md", `# Summary
-
-${summary}
-`),
-      textArtifact(run, "show-notes.md", `# Show Notes
-
-- ${summary}
-- Generated by the skills deterministic worker.
-`),
-      textArtifact(run, "clips.csv", `start,end,title,summary
-00:00,00:30,"Opening","${csv(summary)}"
-`),
-      textArtifact(run, "manifest.json", JSON.stringify({
-        runId: run.id,
-        skill: run.skill,
-        requestedSlug: run.requestedSlug,
-        generatedAt: new Date().toISOString(),
-        artifacts: ["transcript.md", "summary.md", "show-notes.md", "clips.csv"]
-      }, null, 2) + `
-`, "application/json")
-    ];
-    for (const artifact of artifacts) {
-      await store.addArtifact(await storage.materialize(run, artifact.meta, artifact.body));
-    }
-    await store.appendLog(run.id, run.orgId, "info", `generated ${artifacts.length} artifacts`);
-    return await completeRun(store, run, summary);
-  } catch (error) {
-    return await failRun(store, run, "WORKER_ERROR", redactForClient(error.message));
-  }
-}
-function textArtifact(run, relativePath, bodyText, contentType = relativePath.endsWith(".json") ? "application/json" : "text/markdown; charset=utf-8") {
-  const bytes = new TextEncoder().encode(bodyText);
-  return {
-    meta: {
-      id: createArtifactId(),
-      runId: run.id,
-      orgId: run.orgId,
-      fileName: relativePath.split("/").pop() || relativePath,
-      relativePath,
-      contentType,
-      byteSize: bytes.byteLength,
-      sha256: createHash5("sha256").update(bytes).digest("hex"),
-      visibility: "private"
-    },
-    body: { relativePath, bodyText, contentType }
-  };
-}
-async function completeRun(store, run, preview) {
-  const next = await fencedTransition(store, run, {
-    status: "succeeded",
-    outputType: "artifact_bundle",
-    outputPreview: preview,
-    completedAt: new Date().toISOString()
-  });
-  return next ?? run;
-}
-async function failRun(store, run, code, message) {
-  try {
-    await store.appendLog(run.id, run.orgId, "error", message);
-  } catch {}
-  const next = await fencedTransition(store, run, {
-    status: "failed",
-    errorCode: code,
-    errorMessage: message,
-    completedAt: new Date().toISOString()
-  });
-  return next ?? run;
-}
-async function fencedTransition(store, run, patch) {
-  if (!store.transitionRun)
-    return store.updateRun(run.id, patch);
-  const next = await store.transitionRun(run.id, patch, run.leaseGeneration);
-  if (!next) {
-    try {
-      await store.appendLog(run.id, run.orgId, "warn", `late write rejected: run no longer owned at lease_generation ${run.leaseGeneration}`);
-    } catch {}
-  }
-  return next;
-}
-function extractText(run) {
-  return stringInput(run.input, "transcript") || stringInput(run.input, "text") || extractOption(run.args, "--text") || extractOption(run.args, "--source") || run.args.filter((arg) => !arg.startsWith("--")).join(" ");
-}
-function stringInput(input, key) {
-  const value = input[key];
-  return typeof value === "string" && value.trim() ? value : undefined;
-}
-function extractOption(args, flag) {
-  for (let i3 = 0;i3 < args.length; i3++) {
-    const arg = args[i3];
-    if (arg === flag && args[i3 + 1])
-      return args[i3 + 1];
-    if (arg.startsWith(`${flag}=`))
-      return arg.slice(flag.length + 1);
-  }
-  return;
-}
-function summarize(text) {
-  const normalized = redactForClient(text).replace(/\s+/g, " ").trim();
-  if (normalized.length <= 220)
-    return normalized;
-  return `${normalized.slice(0, 217)}...`;
-}
-function csv(value) {
-  return value.replace(/"/g, '""');
-}
-
-// src/lib/registry-data/development-tools.ts
-var DEVELOPMENT_TOOLS_SKILLS = [
-  {
-    name: "repo-onboarding-report",
-    displayName: "Repo Onboarding Report",
-    description: "Generate repository onboarding packages with architecture maps, setup guides, risk registers, and first-week plans",
-    category: "Development Tools",
-    kind: "instruction",
-    tags: ["repository", "onboarding", "architecture", "developer-tools"]
-  },
-  {
-    name: "security-audit-report",
-    displayName: "Security Audit Report",
-    description: "Generate application security hardening reports covering auth, secrets, headers, webhooks, RLS, permissions, dependencies, and prioritized fixes",
-    category: "Development Tools",
-    kind: "instruction",
-    tags: ["security", "audit", "hardening", "rls", "webhooks"]
-  },
-  {
-    name: "performance-audit-report",
-    displayName: "Performance Audit Report",
-    description: "Generate performance audit reports with metrics, findings, budgets, remediation plans, and manifest artifacts",
-    category: "Development Tools",
-    kind: "instruction",
-    tags: ["performance", "audit", "latency", "budget", "web"]
-  },
-  {
-    name: "migration-plan-pack",
-    displayName: "Migration Plan Pack",
-    description: "Generate migration plans for frameworks, libraries, databases, infrastructure, and architecture upgrades with risk matrix, checklist, rollout, and test strategy artifacts",
-    category: "Development Tools",
-    kind: "instruction",
-    tags: ["migration", "upgrade", "planning", "frameworks", "databases"]
-  },
-  {
-    name: "test-suite-generator",
-    displayName: "Test Suite Generator",
-    description: "Generate runnable API, unit, and browser test suite packages with coverage notes",
-    category: "Development Tools",
-    kind: "instruction",
-    tags: ["testing", "qa", "api-tests", "browser-tests", "coverage"]
-  },
-  {
-    name: "api-test-suite",
-    displayName: "API Test Suite",
-    description: "Generate and run API test suites with comprehensive endpoint coverage",
-    category: "Development Tools",
-    tags: ["api", "testing", "automation", "qa"]
-  },
-  {
-    name: "api-docs-portal",
-    displayName: "API Docs Portal",
-    description: "Generate static API documentation portals from OpenAPI specs, route lists, and endpoint examples",
-    category: "Development Tools",
-    tags: ["api", "documentation", "openapi", "portal"]
-  },
-  {
-    name: "codefix",
-    displayName: "Code Fix",
-    description: "Code quality CLI for auto-linting, formatting, fixing, and style enforcement",
-    category: "Development Tools",
-    tags: ["code", "linting", "formatting", "quality"]
-  },
-  {
-    name: "commitpush",
-    displayName: "Commit Push",
-    description: "Create logical commits from repo changes and push directly to the main branch",
-    category: "Development Tools",
-    tags: ["git", "commit", "push", "automation"]
-  },
-  {
-    name: "commitpushpr",
-    displayName: "Commit Push PR",
-    description: "Create logical commits, push a feature branch, and open a GitHub pull request",
-    category: "Development Tools",
-    dependencies: ["commitpush"],
-    tags: ["git", "commit", "pull-request", "github", "automation"]
-  },
-  {
-    name: "database-explorer",
-    displayName: "Database Explorer",
-    description: "Explore and query databases with an interactive interface",
-    category: "Development Tools",
-    tags: ["database", "explorer", "sql", "query"]
-  },
-  {
-    name: "diff-viewer",
-    displayName: "Diff Viewer",
-    description: "View and analyze file differences with visual diff representation",
-    category: "Development Tools",
-    tags: ["diff", "comparison", "files", "code-review"]
-  },
-  {
-    name: "generate-api-client",
-    displayName: "Generate API Client",
-    description: "Generate API client libraries from OpenAPI specs and documentation",
-    category: "Development Tools",
-    tags: ["api", "client", "code-generation", "openapi"]
-  },
-  {
-    name: "generate-dockerfile",
-    displayName: "Generate Dockerfile",
-    description: "Generate optimized Dockerfiles for containerized applications",
-    category: "Development Tools",
-    tags: ["docker", "dockerfile", "containers", "devops"]
-  },
-  {
-    name: "generate-env",
-    displayName: "Generate Env",
-    description: "Generate environment variable files from templates and configurations",
-    category: "Development Tools",
-    tags: ["env", "environment", "configuration", "dotenv"]
-  },
-  {
-    name: "generate-sitemap",
-    displayName: "Generate Sitemap",
-    description: "Generate XML sitemaps for websites and web applications",
-    category: "Development Tools",
-    tags: ["sitemap", "seo", "xml", "web"]
-  },
-  {
-    name: "hook",
-    displayName: "Hook",
-    description: "Claude Code hook creation skill - generates standardized hook scaffolds",
-    category: "Development Tools",
-    tags: ["hooks", "scaffold", "claude-code", "automation"]
-  },
-  {
-    name: "http-server",
-    displayName: "HTTP Server",
-    description: "Spin up local HTTP servers for development and testing",
-    category: "Development Tools",
-    tags: ["http", "server", "development", "local"]
-  },
-  {
-    name: "lorem-generator",
-    displayName: "Lorem Generator",
-    description: "Generate placeholder text in various styles and lengths",
-    category: "Development Tools",
-    tags: ["lorem", "placeholder", "text", "mockup"]
-  },
-  {
-    name: "managemcp",
-    displayName: "Manage MCP",
-    description: "Manage MCP servers with install, configure, and lifecycle operations",
-    category: "Development Tools",
-    tags: ["mcp", "management", "servers", "configuration"]
-  },
-  {
-    name: "markdown-validator",
-    displayName: "Markdown Validator",
-    description: "Validate markdown files for syntax, links, and formatting issues",
-    category: "Development Tools",
-    tags: ["markdown", "validation", "linting", "formatting"]
-  },
-  {
-    name: "monitor",
-    displayName: "Monitor",
-    description: "Operate the monitor MCP for machine health, processes, cron jobs, and cleanup workflows",
-    category: "Development Tools",
-    tags: ["monitoring", "mcp", "processes", "operations"]
-  },
-  {
-    name: "regex-tester",
-    displayName: "Regex Tester",
-    description: "Test and validate regular expressions with sample inputs",
-    category: "Development Tools",
-    tags: ["regex", "testing", "validation", "patterns"]
-  },
-  {
-    name: "scancommitpr",
-    displayName: "Scan Commit PR",
-    description: "Scan repo changes, group into logical commits, push, and optionally create a PR",
-    category: "Development Tools",
-    dependencies: ["scancommitpush"],
-    tags: ["git", "commit", "push", "pull-request", "automation"]
-  },
-  {
-    name: "scancommitpush",
-    displayName: "Scan Commit Push",
-    description: "Scan repo changes, group into logical commits with conventional messages, and push to GitHub",
-    category: "Development Tools",
-    tags: ["git", "commit", "push", "automation"]
-  },
-  {
-    name: "security-audit",
-    displayName: "Security Audit",
-    description: "Perform security audits on codebases and infrastructure configurations",
-    category: "Development Tools",
-    tags: ["security", "audit", "vulnerabilities", "scanning"]
-  },
-  {
-    name: "tmux-session",
-    displayName: "Tmux Session",
-    description: "Create and manage grouped tmux sessions with workspace-aware naming and window layout guidance",
-    category: "Development Tools",
-    tags: ["tmux", "terminal", "sessions", "workspace"]
-  },
-  {
-    name: "validate-config",
-    displayName: "Validate Config",
-    description: "Validate configuration files for syntax and schema compliance",
-    category: "Development Tools",
-    tags: ["config", "validation", "schema", "linting"]
-  },
-  {
-    name: "oss-app-two-backend-storage",
-    displayName: "OSS App Two-Backend Storage",
-    description: "Recipe for the Hasna two-backend storage contract: client transport + HTTP store, server PG/SQLite backend, pg-migrations + apply script, fail-closed URL-without-key, bun bins, contract manifest, Dockerfile",
-    category: "Development Tools",
-    tags: ["storage", "backend", "postgresql", "sqlite", "two-backend", "oss-app"],
-    kind: "instruction"
-  },
-  {
-    name: "session-inject-monitor",
-    displayName: "Session Inject Monitor",
-    description: "Set up a declarative monitor that injects a prompt into a live coding-agent session when a watched source (conversations, email, todos, knowledge, command output) has new content",
-    category: "Development Tools",
-    tags: ["monitor", "session", "injection", "automation", "wake"],
-    kind: "instruction"
-  }
-];
-
-// src/lib/registry-data/business-marketing.ts
-var BUSINESS_MARKETING_SKILLS = [
-  {
-    name: "customer-feedback-report",
-    displayName: "Customer Feedback Report",
-    description: "Generate customer feedback reports with clusters, sentiment, root causes, roadmap recommendations, evidence, and PDF/Markdown artifacts",
-    category: "Business & Marketing",
-    kind: "instruction",
-    tags: ["feedback", "customer", "sentiment", "roadmap", "report"]
-  },
-  {
-    name: "pitch-deck",
-    displayName: "Pitch Deck",
-    description: "Generate investor and sales deck packages with slides, speaker notes, design direction, PDF, and PPTX artifacts",
-    category: "Business & Marketing",
-    kind: "instruction",
-    dependencies: ["market-research-report"],
-    tags: ["deck", "presentation", "investor", "sales", "pptx"]
-  },
-  {
-    name: "proposal-pack",
-    displayName: "Proposal Pack",
-    description: "Generate client proposal packages with proposal, statement of work, pricing, timeline, assumptions, cover email, and PDF/Markdown artifacts",
-    category: "Business & Marketing",
-    kind: "instruction",
-    tags: ["proposal", "sow", "sales", "pricing", "timeline"]
-  },
-  {
-    name: "seo-content-pack",
-    displayName: "SEO Content Pack",
-    description: "Generate SEO content packages with topic clusters, articles, metadata, internal links, FAQs, and publishing cadence",
-    category: "Business & Marketing",
-    kind: "instruction",
-    tags: ["seo", "content", "articles", "metadata"]
-  },
-  {
-    name: "landing-page-pack",
-    displayName: "Landing Page Pack",
-    description: "Generate landing page packages with conversion copy, wireframes, CTA maps, experiments, preview HTML, and implementation notes",
-    category: "Business & Marketing",
-    kind: "instruction",
-    tags: ["landing-page", "sales", "copywriting", "conversion"]
-  },
-  {
-    name: "ad-creative-pack",
-    displayName: "Ad Creative Pack",
-    description: "Generate paid ad packages with platform copy, creative concepts, image prompts, audience angles, and test matrices",
-    category: "Business & Marketing",
-    kind: "instruction",
-    tags: ["ads", "creative", "marketing", "copywriting"]
-  },
-  {
-    name: "email-sequence",
-    displayName: "Email Sequence",
-    description: "Generate email campaign packages with subject lines, preview text, body copy, segmentation notes, CTA variants, HTML emails, and send plans",
-    category: "Business & Marketing",
-    kind: "instruction",
-    tags: ["email", "marketing", "campaign", "copywriting"]
-  },
-  {
-    name: "social-content-calendar",
-    displayName: "Social Content Calendar",
-    description: "Generate social content calendars with daily posts, channel strategy, asset briefs, hooks, publishing schedules, and repurposing maps",
-    category: "Business & Marketing",
-    kind: "instruction",
-    tags: ["social", "content", "calendar", "marketing"]
-  },
-  {
-    name: "one-page-website",
-    displayName: "One Page Website",
-    description: "Generate static one-page website bundles with HTML, CSS, JavaScript, copy, section maps, deploy notes, and manifest",
-    category: "Business & Marketing",
-    tags: ["website", "landing-page", "static-site", "html"]
-  }
-];
-
-// src/lib/registry-data/productivity-organization.ts
-var PRODUCTIVITY_ORGANIZATION_SKILLS = [
-  {
-    name: "meeting-pack",
-    displayName: "Meeting Pack",
-    description: "Generate meeting artifact packages with summaries, decisions, action items, follow-up email, timeline, project export, and manifest",
-    category: "Productivity & Organization",
-    kind: "instruction",
-    tags: ["meeting", "summary", "action-items", "decisions"]
-  },
-  {
-    name: "file-organizer",
-    displayName: "File Organizer",
-    description: "Organize files into structured directories based on type, date, or content",
-    category: "Productivity & Organization",
-    tags: ["files", "organization", "sorting", "cleanup"]
-  },
-  {
-    name: "folder-tree",
-    displayName: "Folder Tree",
-    description: "Generate and display folder tree structures for documentation",
-    category: "Productivity & Organization",
-    tags: ["folder", "tree", "structure", "visualization"]
-  },
-  {
-    name: "form-filler",
-    displayName: "Form Filler",
-    description: "Automatically fill out web forms and document templates",
-    category: "Productivity & Organization",
-    tags: ["forms", "automation", "filling", "data-entry"]
-  },
-  {
-    name: "merge-pdfs",
-    displayName: "Merge PDFs",
-    description: "Merge multiple PDF files into a single document",
-    category: "Productivity & Organization",
-    tags: ["pdf", "merge", "documents", "combining"]
-  },
-  {
-    name: "split-pdf",
-    displayName: "Split PDF",
-    description: "Split PDF documents into separate pages or sections",
-    category: "Productivity & Organization",
-    tags: ["pdf", "split", "documents", "pages"]
-  }
-];
-
-// src/lib/registry-data/project-management.ts
-var PROJECT_MANAGEMENT_SKILLS = [
-  {
-    name: "businessactivity",
-    displayName: "Business Activity",
-    description: "Business activity, workflow, and ownership management service",
-    category: "Project Management",
-    tags: ["business", "workflow", "activities", "management"]
-  },
-  {
-    name: "implementation",
-    displayName: "Implementation",
-    description: "Create .implementation scaffold for project development tracking",
-    category: "Project Management",
-    tags: ["implementation", "tracking", "scaffold", "project"]
-  },
-  {
-    name: "implementation-plan",
-    displayName: "Implementation Plan",
-    description: "Generate detailed implementation plans with phases and milestones",
-    category: "Project Management",
-    tags: ["implementation", "planning", "milestones", "phases"]
-  },
-  {
-    name: "implementation-todo",
-    displayName: "Implementation Todo",
-    description: "Manage implementation task lists and todo items",
-    category: "Project Management",
-    tags: ["implementation", "todo", "tasks", "tracking"]
-  },
-  {
-    name: "todos-plan",
-    displayName: "Todos Plan",
-    description: "Author, sync, route, and verify Todos plans using Todos CLI plan IDs as source of truth",
-    category: "Project Management",
-    tags: ["todos", "plans", "tasks", "verification", "workflow"]
-  }
-];
-
-// src/lib/registry-data/content-generation.ts
-var CONTENT_GENERATION_SKILLS = [
-  {
-    name: "pdf-generate",
-    displayName: "PDF Generate",
-    description: "Generate PDF documents with rich formatting and layouts",
-    category: "Content Generation",
-    tags: ["pdf", "document", "generation", "formatting"]
-  },
-  {
-    name: "slide-deck-generator",
-    displayName: "Slide Deck Generator",
-    description: "Generate slide decks from briefs, docs, or outlines with PDF, PPTX, speaker notes, and structured slide metadata",
-    category: "Content Generation",
-    tags: ["presentation", "slides", "deck", "documents"]
-  },
-  {
-    name: "generate-qrcode",
-    displayName: "Generate QR Code",
-    description: "Generate QR codes with custom styling and embedded data",
-    category: "Content Generation",
-    tags: ["qrcode", "generation", "encoding", "visual"]
-  },
-  {
-    name: "generate-resume",
-    displayName: "Generate Resume",
-    description: "Generate professional resumes with formatting and content optimization",
-    category: "Content Generation",
-    tags: ["resume", "cv", "career", "generation"]
-  }
-];
-
-// src/lib/registry-data/finance-compliance.ts
-var FINANCE_COMPLIANCE_SKILLS = [
-  {
-    name: "contract-review-report",
-    displayName: "Contract Review Report",
-    description: "Generate contract review reports with risk register, clause summary, redline suggestions, negotiation email, and manifest artifacts",
-    category: "Finance & Compliance",
-    kind: "instruction",
-    tags: ["contract", "legal", "review", "risk"]
-  },
-  {
-    name: "invoice",
-    displayName: "Invoice",
-    description: "Generate professional invoices with company management and PDF export",
-    category: "Finance & Compliance",
-    tags: ["invoice", "billing", "pdf", "finance"]
-  },
-  {
-    name: "invoice-reconciliation",
-    displayName: "Invoice Reconciliation",
-    description: "Generate invoice reconciliation reports with matched payments, discrepancies, anomaly notes, summaries, and manifest artifacts",
-    category: "Finance & Compliance",
-    tags: ["invoice", "payments", "reconciliation", "finance"]
-  }
-];
-
-// src/lib/registry-data/data-analysis.ts
-var DATA_ANALYSIS_SKILLS = [
-  {
-    name: "analyze-data",
-    displayName: "Analyze Data",
-    description: "Data science insights for CSV and JSON datasets with statistical analysis",
-    category: "Data & Analysis",
-    tags: ["data", "analysis", "csv", "json", "statistics"]
-  },
-  {
-    name: "dashboard-builder",
-    displayName: "Dashboard Builder",
-    description: "Build data dashboards with charts, metrics, and visualizations",
-    category: "Data & Analysis",
-    tags: ["dashboard", "visualization", "charts", "metrics"]
-  },
-  {
-    name: "data-anonymizer",
-    displayName: "Data Anonymizer",
-    description: "Anonymize sensitive data in datasets for privacy compliance",
-    category: "Data & Analysis",
-    tags: ["anonymization", "privacy", "data", "compliance"]
-  },
-  {
-    name: "generate-chart",
-    displayName: "Generate Chart",
-    description: "Generate data charts and visualizations from datasets",
-    category: "Data & Analysis",
-    tags: ["charts", "visualization", "data", "graphs"]
-  },
-  {
-    name: "read-csv",
-    displayName: "Read CSV",
-    description: "Parse CSV files into structured JSON with delimiter and encoding detection",
-    category: "Data & Analysis",
-    tags: ["csv", "parsing", "tabular", "data"]
-  },
-  {
-    name: "read-excel",
-    displayName: "Read Excel",
-    description: "Parse XLS and XLSX workbooks into structured JSON with sheet and formatted cell metadata",
-    category: "Data & Analysis",
-    tags: ["excel", "spreadsheet", "xlsx", "data"]
-  },
-  {
-    name: "pdf-to-markdown",
-    displayName: "PDF to Markdown",
-    description: "Convert PDFs into clean markdown with remote extraction and structure cleanup",
-    category: "Data & Analysis",
-    tags: ["pdf", "markdown", "conversion"]
-  },
-  {
-    name: "pdf-to-dataset",
-    displayName: "PDF to Dataset",
-    description: "Extract PDF tables, forms, invoices, and semi-structured content into CSV and JSON datasets",
-    category: "Data & Analysis",
-    tags: ["pdf", "dataset", "csv", "json", "extraction"]
-  },
-  {
-    name: "doc-read",
-    displayName: "Doc Read",
-    description: "Read and extract text from DOCX files with section parsing and metadata extraction",
-    category: "Data & Analysis",
-    tags: ["docx", "reader", "extraction", "word"]
+      INSERT INTO skills_pins (org_id, principal, slug, pinned_at, metadata_json)
+      VALUES (${principal.orgId}, ${principal.apiKeyId}, ${slug}, now(), ${JSON.stringify(metadata)}::jsonb)
+      ON CONFLICT (org_id, principal, slug) DO UPDATE SET
+        pinned_at = now(),
+        metadata_json = EXCLUDED.metadata_json
+      RETURNING *
+    `;
+    return rowToPin(rows[0]);
   }
-];
-
-// src/lib/registry-data/media-processing.ts
-var MEDIA_PROCESSING_SKILLS = [
-  {
-    name: "video-highlight-pack",
-    displayName: "Video Highlight Pack",
-    description: "Generate video highlight packages with clip plans, captions, thumbnail briefs, chapter markers, social posts, and edit decisions",
-    category: "Media Processing",
-    kind: "instruction",
-    tags: ["video", "highlights", "clips", "captions"]
-  },
-  {
-    name: "compress-video",
-    displayName: "Compress Video",
-    description: "Compress video files while preserving visual quality using ffmpeg",
-    category: "Media Processing",
-    tags: ["video", "compression", "ffmpeg", "optimization"]
-  },
-  {
-    name: "audio-extract",
-    displayName: "Audio Extract",
-    description: "Extract audio tracks from video files with multiple format support",
-    category: "Media Processing",
-    tags: ["audio", "extraction", "video", "conversion"]
-  },
-  {
-    name: "extract-frames",
-    displayName: "Extract Frames",
-    description: "Extract frames from video files at specified intervals or timestamps",
-    category: "Media Processing",
-    tags: ["frames", "video", "extraction", "images"]
-  },
-  {
-    name: "gif-maker",
-    displayName: "GIF Maker",
-    description: "Create animated GIFs from images, videos, or screen recordings",
-    category: "Media Processing",
-    tags: ["gif", "animation", "images", "video"]
-  },
-  {
-    name: "video-downloader",
-    displayName: "Video Downloader",
-    description: "Download videos from various online platforms and services",
-    category: "Media Processing",
-    tags: ["video", "download", "platforms", "media"]
-  },
-  {
-    name: "watermark",
-    displayName: "Watermark",
-    description: "Add watermarks to images and documents for copyright protection",
-    category: "Media Processing",
-    tags: ["watermark", "protection", "copyright", "images"]
+  async unpinSkill(principal, slug) {
+    const rows = await this.sql`
+      DELETE FROM skills_pins WHERE org_id = ${principal.orgId} AND principal = ${principal.apiKeyId} AND slug = ${slug}
+      RETURNING 1 AS present
+    `;
+    return rows.length > 0;
   }
-];
-
-// src/lib/registry-data/design-branding.ts
-var DESIGN_BRANDING_SKILLS = [
-  {
-    name: "brand-kit",
-    displayName: "Brand Kit",
-    description: "Generate brand kits with logo usage, palette, typography, brand voice, sample applications, Markdown guide, PDF guide, and SVG assets",
-    category: "Design & Branding",
-    kind: "instruction",
-    tags: ["brand", "design", "palette", "typography"]
-  },
-  {
-    name: "brand-assets",
-    displayName: "Brand Assets",
-    description: "Fetch official brand assets from a website or brand name with logos, PNG sizes, palette, typography, source metadata, and manifests",
-    category: "Design & Branding",
-    tags: ["brand", "logo", "assets", "palette", "typography"]
-  },
-  {
-    name: "logo-design",
-    displayName: "Logo Design",
-    description: "Generate multi-variant logo packages with transparent PNGs, vector-style SVGs, usage notes, and manifests",
-    category: "Design & Branding",
-    tags: ["logo", "design", "branding", "identity"]
-  },
-  {
-    name: "generate-favicon",
-    displayName: "Generate Favicon",
-    description: "Generate favicons in multiple sizes and formats for websites",
-    category: "Design & Branding",
-    tags: ["favicon", "icon", "design", "web"]
-  },
-  {
-    name: "product-mockup",
-    displayName: "Product Mockup",
-    description: "Generate product mockup packages with visual variants, prompts, usage notes, and asset metadata",
-    category: "Design & Branding",
-    tags: ["product", "mockup", "visualization", "marketing"]
-  },
-  {
-    name: "siteanalyze",
-    displayName: "Site Analyze",
-    description: "Analyze any website's design system \u2014 detects shadcn/ui, Tailwind, extracts colors, typography, and components via Playwright + Claude Vision.",
-    category: "Design & Branding",
-    tags: ["design", "shadcn", "tailwind", "colors", "typography", "playwright", "analysis", "styles"]
+  async listPins(principal) {
+    const rows = await this.sql`
+      SELECT * FROM skills_pins WHERE org_id = ${principal.orgId} AND principal = ${principal.apiKeyId} ORDER BY slug ASC
+    `;
+    return rows.map(rowToPin);
   }
-];
-
-// src/lib/registry-data/web-browser.ts
-var WEB_BROWSER_SKILLS = [
-  {
-    name: "domainpurchase",
-    displayName: "Domain Purchase",
-    description: "Purchase and manage domains via registrar connectors",
-    category: "Web & Browser",
-    tags: ["domain", "purchase", "registrar", "management"]
+  async listTags(principal) {
+    await this.purgeExpiredTombstones(principal);
+    const rows = await this.sql`
+      SELECT DISTINCT tag FROM skills_tags WHERE org_id = ${principal.orgId} ORDER BY tag ASC
+    `;
+    return rows.map((row) => String(row.tag));
   }
-];
-
-// src/lib/registry-data/research-writing.ts
-var RESEARCH_WRITING_SKILLS = [
-  {
-    name: "blog-article",
-    displayName: "Blog Article",
-    description: "Create SEO-optimized blog article artifact packages",
-    category: "Research & Writing",
-    kind: "instruction",
-    tags: ["blog", "article", "writing", "seo"]
-  },
-  {
-    name: "market-research-report",
-    displayName: "Market Research Report",
-    description: "Generate market research packages with competitor tables, positioning, pricing notes, source notes, and PDF/Markdown artifacts",
-    category: "Research & Writing",
-    kind: "instruction",
-    tags: ["market-research", "competitors", "positioning", "pricing", "report"]
+  async listSkillsByTag(principal, tag) {
+    await this.purgeExpiredTombstones(principal);
+    const rows = await this.sql`
+      SELECT s.* FROM skills_registry s
+      JOIN skills_tags t ON t.org_id = s.org_id AND t.slug = s.slug
+      WHERE t.org_id = ${principal.orgId} AND t.tag = ${tag} AND s.tombstoned_at IS NULL
+      ORDER BY s.slug ASC
+    `;
+    return rows.map(rowToSkill);
   }
-];
-
-// src/lib/registry-data/science-academic.ts
-var SCIENCE_ACADEMIC_SKILLS = [
-  {
-    name: "bio-sequence-tool",
-    displayName: "Bio Sequence Tool",
-    description: "Analyze and manipulate biological sequences including DNA, RNA, and protein data",
-    category: "Science & Academic",
-    tags: ["biology", "dna", "sequence", "bioinformatics"]
-  },
-  {
-    name: "experiment-power-calculator",
-    displayName: "Experiment Power Calculator",
-    description: "Calculate statistical power and sample size for experiments",
-    category: "Science & Academic",
-    tags: ["experiment", "statistics", "power-analysis", "sample-size"]
-  },
-  {
-    name: "latex-table-generator",
-    displayName: "LaTeX Table Generator",
-    description: "Generate formatted LaTeX tables from data for academic papers",
-    category: "Science & Academic",
-    tags: ["latex", "tables", "academic", "formatting"]
-  },
-  {
-    name: "scientific-figure-check",
-    displayName: "Scientific Figure Check",
-    description: "Validate scientific figures for accuracy, formatting, and publication standards",
-    category: "Science & Academic",
-    tags: ["scientific", "figures", "validation", "publishing"]
-  },
-  {
-    name: "statistical-test-selector",
-    displayName: "Statistical Test Selector",
-    description: "Recommend appropriate statistical tests based on data and research questions",
-    category: "Science & Academic",
-    tags: ["statistics", "test-selection", "research", "analysis"]
+  async listPinsByTag(principal, tag) {
+    await this.purgeExpiredTombstones(principal);
+    const rows = await this.sql`
+      SELECT p.* FROM skills_pins p
+      JOIN skills_tags t ON t.org_id = p.org_id AND t.slug = p.slug
+      JOIN skills_registry s ON s.org_id = p.org_id AND s.slug = p.slug
+      WHERE p.org_id = ${principal.orgId} AND p.principal = ${principal.apiKeyId}
+        AND t.tag = ${tag} AND s.tombstoned_at IS NULL
+      ORDER BY p.slug ASC
+    `;
+    return rows.map(rowToPin);
   }
-];
-
-// src/lib/registry-data/education-learning.ts
-var EDUCATION_LEARNING_SKILLS = [];
-
-// src/lib/registry-data/communication.ts
-var COMMUNICATION_SKILLS = [];
-
-// src/lib/registry-data/health-wellness.ts
-var HEALTH_WELLNESS_SKILLS = [];
-
-// src/lib/registry-data/travel-lifestyle.ts
-var TRAVEL_LIFESTYLE_SKILLS = [];
-
-// src/lib/registry-data/event-management.ts
-var EVENT_MANAGEMENT_SKILLS = [];
+  async listPublishedSlugs(principal) {
+    const rows = await this.sql`
+      SELECT slug FROM skills_registry WHERE org_id = ${principal.orgId} AND tombstoned_at IS NULL ORDER BY slug ASC
+    `;
+    return rows.map((row) => String(row.slug));
+  }
+  async collectOrphanBundle(orgId, sha256) {
+    await this.sql`
+      DELETE FROM skills_bundles
+      WHERE org_id = ${orgId} AND sha256 = ${sha256}
+        AND NOT EXISTS (SELECT 1 FROM skills_registry WHERE org_id = ${orgId} AND bundle_sha256 = ${sha256})
+        AND NOT EXISTS (SELECT 1 FROM skills_versions WHERE org_id = ${orgId} AND bundle_sha256 = ${sha256})
+    `;
+  }
+}
+var NO_REVISION_SENTINEL2 = "0000000000000000000000000000000000000000000000000000000000000000";
+function isUniqueViolation(error) {
+  const code = error?.code;
+  if (code === "23505" || code === 23505)
+    return true;
+  const message = error instanceof Error ? error.message : String(error);
+  return /duplicate key value violates unique constraint/i.test(message);
+}
+function connectionFailureSummary(error) {
+  const message = error instanceof Error ? error.message : String(error);
+  return message.replace(/[a-z][a-z0-9+.-]*:\/\/\S*/gi, "<redacted-url>").split(`
+`)[0].slice(0, 200);
+}
 
-// src/lib/registry-data/index.ts
-var SKILLS = [
-  ...DEVELOPMENT_TOOLS_SKILLS,
-  ...BUSINESS_MARKETING_SKILLS,
-  ...PRODUCTIVITY_ORGANIZATION_SKILLS,
-  ...PROJECT_MANAGEMENT_SKILLS,
-  ...CONTENT_GENERATION_SKILLS,
-  ...FINANCE_COMPLIANCE_SKILLS,
-  ...DATA_ANALYSIS_SKILLS,
-  ...MEDIA_PROCESSING_SKILLS,
-  ...DESIGN_BRANDING_SKILLS,
-  ...WEB_BROWSER_SKILLS,
-  ...RESEARCH_WRITING_SKILLS,
-  ...SCIENCE_ACADEMIC_SKILLS,
-  ...EDUCATION_LEARNING_SKILLS,
-  ...COMMUNICATION_SKILLS,
-  ...HEALTH_WELLNESS_SKILLS,
-  ...TRAVEL_LIFESTYLE_SKILLS,
-  ...EVENT_MANAGEMENT_SKILLS
+// src/server/redaction.ts
+var SECRET_PATTERNS = [
+  /\bsk-[A-Za-z0-9_-]{8,}\b/g,
+  /\bsk_[A-Za-z0-9_-]{8,}\b/g,
+  /\bgh[opsur]_[A-Za-z0-9_]{8,}\b/g,
+  /\bgithub_pat_[A-Za-z0-9_]{8,}\b/g,
+  /\bnpm_[A-Za-z0-9_]{8,}\b/g,
+  /\bAKIA[A-Z0-9]{12,}\b/g,
+  /\bAIza[A-Za-z0-9_-]{10,}\b/g,
+  /\b[A-Z0-9_]*(?:API_KEY|SECRET|TOKEN|PASSWORD|DATABASE_URL)[A-Z0-9_]*\s*[:=]\s*[^ \n\r\t]+/gi,
+  /\bhttps?:\/\/[^ \n\r\t]+X-Amz-Signature=[^ \n\r\t]+/gi
 ];
+function redactForClient(value) {
+  const text = typeof value === "string" ? value : JSON.stringify(value);
+  return SECRET_PATTERNS.reduce((current, pattern) => current.replace(pattern, "credential"), text).replace(/\s+$/g, "").slice(0, 20000);
+}
 
-// src/lib/hosted-skill-set.ts
-var HOSTED_RUNTIMES = new Set(["hosted"]);
-var HOSTED_SOURCES = new Set(["remote", "private-hosted"]);
-var HOSTED_METADATA_SET_EMPTY_ERROR = [
-  "The hosted metadata skill set is empty, but the packaging guards that depend on it",
-  "only mean anything while it is non-empty: an empty set makes every one of them pass",
-  "vacuously and silently removes the protection that keeps hosted implementation source",
-  "out of the published package.",
-  "",
-  "If emptying the set is intentional (every hosted skill was deleted or converted to a",
-  "runnable in-repo skill), retire the derived guards in the SAME change \u2014 do not let them",
-  "stay green and empty."
-].join(`
-`);
-var SLUG = "[^,{}/]+";
-var BRACE_SOURCE_EXCLUSION = new RegExp(`^!skills/\\{(${SLUG}(?:,${SLUG})+)\\}/src$`);
-var SINGLE_SOURCE_EXCLUSION = new RegExp(`^!skills/(${SLUG})/src$`);
-
-// src/lib/skill-validation.ts
-var RESERVED_SKILL_ENTRIES = new Set([
-  ".env",
-  ".npmrc",
-  ".pypirc",
-  ".netrc",
-  "id_rsa",
-  "id_ed25519"
-]);
-var KNOWN_TOP_LEVEL_ENTRIES = new Set([
-  ".claude",
-  ".env.example",
-  ".gitignore",
-  ".skills",
-  "CLAUDE.md",
-  "AGENTS.md",
-  "LICENSE",
-  "PROJECT_OVERVIEW.md",
-  "QUICKSTART.md",
-  "README.md",
-  "SKILL.md",
-  "api-docs-list.json",
-  "auth.ts",
-  "bun.lock",
-  "bunfig.toml",
-  "data",
-  "dist",
-  "examples",
-  "exports",
-  "http-client.ts",
-  "index.ts",
-  "install.sh",
-  "installer.ts",
-  "logs",
-  "node_modules",
-  "package.json",
-  "scripts",
-  "skill-install.ts",
-  "skill.json",
-  "src",
-  "tests",
-  "references",
-  "assets",
-  "tsconfig.json",
-  "vision.ts"
+// src/server/handlers.ts
+var DETERMINISTIC_TEXT_HANDLERS = new Set([
+  "audio-transcript-pack",
+  "transcript",
+  "video-highlight-pack"
 ]);
-var VALID_PROVENANCE_SOURCES = new Set(["official", "custom", "remote", "private", "private-hosted", "upstream", "extension"]);
+async function executeRun(store, run, storage = new ArtifactStorage) {
+  try {
+    await store.appendLog(run.id, run.orgId, "info", redactForClient(`starting run ${run.skill}`));
+    if (!DETERMINISTIC_TEXT_HANDLERS.has(run.skill)) {
+      await store.appendLog(run.id, run.orgId, "warn", `${run.skill} has no provider-free handler yet`);
+      return await failRun(store, run, "HANDLER_UNAVAILABLE", "This deployment has no safe provider-free handler for that skill yet.");
+    }
+    const text = extractText(run);
+    if (!text.trim()) {
+      return await failRun(store, run, "INVALID_INPUT", "Provide transcript text with input.transcript, input.text, --text, --source, or positional text.");
+    }
+    const title = extractOption(run.args, "--title") || stringInput(run.input, "title") || "Skills run";
+    const summary = summarize(text);
+    const artifacts = [
+      textArtifact(run, "transcript.md", `# ${title}
 
-// src/lib/skill-hash.ts
-var HASH_EXCLUDE_DIRS = new Set([".git", "node_modules", "dist", "build", ".turbo"]);
+${text.trim()}
+`),
+      textArtifact(run, "summary.md", `# Summary
 
-// src/lib/portable-skills-files.ts
-var ANY_SEGMENT_COPY_EXCLUDES = new Set([
-  ".git",
-  ".DS_Store",
-  ".system",
-  "node_modules"
-]);
-var FIRST_SEGMENT_COPY_EXCLUDES = new Set([
-  "dist",
-  "build",
-  ".turbo"
-]);
-// src/lib/portable-skills.ts
-var OFFICIAL_SKILL_NAMES = new Set(SKILLS.map((skill) => skill.name));
-// src/lib/installer.ts
-import { existsSync as existsSync4, readFileSync as readFileSync4, rmSync } from "fs";
-import { dirname as dirname5, join as join8 } from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
-var __dirname2 = dirname5(fileURLToPath2(import.meta.url));
-function findSkillsDir() {
-  let dir = __dirname2;
-  for (let i3 = 0;i3 < 5; i3++) {
-    const candidate = join8(dir, "skills");
-    if (existsSync4(candidate) && !dir.includes(".skills"))
-      return candidate;
-    dir = dirname5(dir);
+${summary}
+`),
+      textArtifact(run, "show-notes.md", `# Show Notes
+
+- ${summary}
+- Generated by the skills deterministic worker.
+`),
+      textArtifact(run, "clips.csv", `start,end,title,summary
+00:00,00:30,"Opening","${csv(summary)}"
+`),
+      textArtifact(run, "manifest.json", JSON.stringify({
+        runId: run.id,
+        skill: run.skill,
+        requestedSlug: run.requestedSlug,
+        generatedAt: new Date().toISOString(),
+        artifacts: ["transcript.md", "summary.md", "show-notes.md", "clips.csv"]
+      }, null, 2) + `
+`, "application/json")
+    ];
+    for (const artifact of artifacts) {
+      await store.addArtifact(await storage.materialize(run, artifact.meta, artifact.body));
+    }
+    await store.appendLog(run.id, run.orgId, "info", `generated ${artifacts.length} artifacts`);
+    return await completeRun(store, run, summary);
+  } catch (error) {
+    return await failRun(store, run, "WORKER_ERROR", redactForClient(error.message));
   }
-  return join8(__dirname2, "..", "skills");
 }
-var SKILLS_DIR = findSkillsDir();
-
-// src/server/skills-api.ts
-var MAX_SKILL_MD_BYTES = 512000;
-var MAX_MANIFEST_BYTES = MAX_SKILL_MD_BYTES + 64000;
-var ALLOWED_PUBLISH_PARTS = new Set(["manifest", "bundle"]);
+function textArtifact(run, relativePath, bodyText, contentType = relativePath.endsWith(".json") ? "application/json" : "text/markdown; charset=utf-8") {
+  const bytes = new TextEncoder().encode(bodyText);
+  return {
+    meta: {
+      id: createArtifactId(),
+      runId: run.id,
+      orgId: run.orgId,
+      fileName: relativePath.split("/").pop() || relativePath,
+      relativePath,
+      contentType,
+      byteSize: bytes.byteLength,
+      sha256: createHash5("sha256").update(bytes).digest("hex"),
+      visibility: "private"
+    },
+    body: { relativePath, bodyText, contentType }
+  };
+}
+async function completeRun(store, run, preview) {
+  const next = await fencedTransition(store, run, {
+    status: "succeeded",
+    outputType: "artifact_bundle",
+    outputPreview: preview,
+    completedAt: new Date().toISOString()
+  });
+  return next ?? run;
+}
+async function failRun(store, run, code, message) {
+  try {
+    await store.appendLog(run.id, run.orgId, "error", message);
+  } catch {}
+  const next = await fencedTransition(store, run, {
+    status: "failed",
+    errorCode: code,
+    errorMessage: message,
+    completedAt: new Date().toISOString()
+  });
+  return next ?? run;
+}
+async function fencedTransition(store, run, patch) {
+  if (!store.transitionRun)
+    return store.updateRun(run.id, patch);
+  const next = await store.transitionRun(run.id, patch, run.leaseGeneration);
+  if (!next) {
+    try {
+      await store.appendLog(run.id, run.orgId, "warn", `late write rejected: run no longer owned at lease_generation ${run.leaseGeneration}`);
+    } catch {}
+  }
+  return next;
+}
+function extractText(run) {
+  return stringInput(run.input, "transcript") || stringInput(run.input, "text") || extractOption(run.args, "--text") || extractOption(run.args, "--source") || run.args.filter((arg) => !arg.startsWith("--")).join(" ");
+}
+function stringInput(input, key) {
+  const value = input[key];
+  return typeof value === "string" && value.trim() ? value : undefined;
+}
+function extractOption(args, flag) {
+  for (let i3 = 0;i3 < args.length; i3++) {
+    const arg = args[i3];
+    if (arg === flag && args[i3 + 1])
+      return args[i3 + 1];
+    if (arg.startsWith(`${flag}=`))
+      return arg.slice(flag.length + 1);
+  }
+  return;
+}
+function summarize(text) {
+  const normalized = redactForClient(text).replace(/\s+/g, " ").trim();
+  if (normalized.length <= 220)
+    return normalized;
+  return `${normalized.slice(0, 217)}...`;
+}
+function csv(value) {
+  return value.replace(/"/g, '""');
+}
 
 // src/server/app.ts
 function assertDurableStore(store, config) {
@@ -35880,6 +36135,26 @@ async function runWorkerOnce(store, workerId = `worker_${randomUUID4().slice(0,
   return true;
 }
 if (import.meta.main) {
+  const EARLY_ARGV = process.argv.slice(2);
+  if (EARLY_ARGV.includes("--version") || EARLY_ARGV.includes("-V")) {
+    console.log(package_default.version);
+    process.exit(0);
+  }
+  if (EARLY_ARGV.includes("--help") || EARLY_ARGV.includes("-h")) {
+    console.log(`Usage: skills-worker [options]
+
+Drains @hasna/skills runs from the store.
+
+Options:
+  -V, --version  output the version number
+  -h, --help     display help for command
+      --once     process exactly one run, then exit
+
+Environment:
+  HASNA_SKILLS_WORKER_ID       Worker identity (default: worker_<random>)
+  HASNA_SKILLS_WORKER_IDLE_MS  Idle pause between polls (default: 1000)`);
+    process.exit(0);
+  }
   const config = resolveServerConfig();
   const store = await createStore({ databaseUrl: config.databaseUrl, bootstrapApiKey: config.bootstrapApiKey });
   assertDurableStore(store, config);