@hasna/skills 0.10.15 → 0.10.16

package/bin/mcp.js

@@ -20019,7 +20019,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.15",
+    version: "0.10.16",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -38251,6 +38251,17 @@ function assertAgentPolicyCollections(policy) {
       for (const key of ["agent", "home", "alias", "target", "link", "aliasIdentity", "targetIdentity"])
         text(alias[key]);
     }
+  if (bridge.codexPluginSkills !== undefined)
+    for (const control of array3(bridge.codexPluginSkills, 4096)) {
+      requireBound(object4(control) && Object.keys(control).every((key) => ["name", "pluginId", "namespace", "pluginParent", "manifestSha256", "appSha256"].includes(key)));
+      text(control.name, 129);
+      text(control.pluginId, 1024);
+      text(control.namespace, 64);
+      text(control.pluginParent);
+      requireBound(isAbsolute3(control.pluginParent) && resolve2(control.pluginParent) === control.pluginParent && /^[a-f0-9]{64}$/.test(control.manifestSha256));
+      if (control.appSha256 !== undefined)
+        requireBound(typeof control.appSha256 === "string" && /^[a-f0-9]{64}$/.test(control.appSha256));
+    }
   if (bridge.disabledBuiltins !== undefined)
     for (const builtin of array3(bridge.disabledBuiltins, AGENT_POLICY_LIMITS.builtinNames)) {
       requireBound(object4(builtin));
@@ -38270,7 +38281,9 @@ function assertAgentPolicyCollections(policy) {
       text(source.path);
       requireBound(source.sha256 === null || typeof source.sha256 === "string" && /^[a-f0-9]{64}$/.test(source.sha256));
       if (source.hashMode !== undefined)
-        requireBound(["bytes", "path-bytes", "claude-plugin-registry", "claude-marketplace-registry", "claude-settings-v1", "claude-settings-v2", "claude-settings-v3", "claude-marketplace-registry-v2"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
+        requireBound(["bytes", "path-bytes", "claude-plugin-registry", "claude-marketplace-registry", "claude-settings-v1", "claude-settings-v2", "claude-settings-v3", "claude-marketplace-registry-v2", "codex-settings-v1"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
+      if (source.hashMode === "codex-settings-v1")
+        requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute3(source.path) && resolve2(source.path) === source.path && basename3(source.path) === "config.toml");
       if (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || source.hashMode === "claude-settings-v3")
         requireBound(agent === "claude" && value.agent === "claude" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute3(source.path) && resolve2(source.path) === source.path && basename3(source.path) === "settings.json");
       if (source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2")
@@ -45605,294 +45618,8 @@ var init_agent_discovery_path_bytes = __esm(() => {
   init_agent_discovery_bytes();
 });
 
-// src/lib/remote-files.ts
-var exports_remote_files = {};
-__export(exports_remote_files, {
-  sha256: () => sha256,
-  readBoundedResponse: () => readBoundedResponse,
-  describeRemoteFiles: () => describeRemoteFiles,
-  decodeRemoteFiles: () => decodeRemoteFiles,
-  MAX_REMOTE_FILE_BYTES: () => MAX_REMOTE_FILE_BYTES
-});
-import { createHash as createHash5 } from "crypto";
-function describeRemoteFiles(files) {
-  if (files.length > 10)
-    throw new Error("At most 10 input files are supported");
-  const names = new Set;
-  let total = 0;
-  return files.map((file2) => {
-    if (typeof file2.name !== "string" || file2.name.length === 0 || file2.name.length > 255 || /[/\\\x00-\x1f\x7f]/.test(file2.name) || /[\ud800-\udfff]/u.test(file2.name) || file2.name === "." || file2.name === ".." || names.has(file2.name))
-      throw new Error("Input file names must be unique safe basenames");
-    names.add(file2.name);
-    total += file2.bytes.byteLength;
-    if (file2.bytes.byteLength > 20 * 1024 * 1024 || total > 50 * 1024 * 1024)
-      throw new Error("Input files exceed the supported size limit");
-    return { name: file2.name, sizeBytes: file2.bytes.byteLength, sha256: sha256(file2.bytes), contentType: file2.contentType ?? "application/octet-stream" };
-  });
-}
-function sha256(bytes) {
-  return createHash5("sha256").update(bytes).digest("hex");
-}
-async function readBoundedResponse(response, maximum) {
-  if (!Number.isSafeInteger(maximum) || maximum < 0 || maximum > MAX_REMOTE_FILE_BYTES)
-    throw new Error("Invalid artifact size limit");
-  const length = response.headers.get("content-length");
-  if (length && (!/^\d+$/.test(length) || Number(length) > maximum)) {
-    await response.body?.cancel();
-    throw new Error("Artifact exceeds its declared size limit");
-  }
-  const reader = response.body?.getReader();
-  if (!reader)
-    return new Uint8Array;
-  const chunks = [];
-  let size = 0;
-  try {
-    while (true) {
-      const next = await reader.read();
-      if (next.done)
-        break;
-      size += next.value.byteLength;
-      if (size > maximum)
-        throw new Error("Artifact exceeds its declared size limit");
-      chunks.push(next.value);
-    }
-  } catch (error61) {
-    await reader.cancel().catch(() => {});
-    throw error61;
-  } finally {
-    reader.releaseLock();
-  }
-  const bytes = new Uint8Array(size);
-  let offset = 0;
-  for (const chunk of chunks) {
-    bytes.set(chunk, offset);
-    offset += chunk.byteLength;
-  }
-  return bytes;
-}
-function decodeRemoteFiles(files) {
-  let total = 0;
-  const decoded = files.map((file2) => {
-    if (file2.base64.length > 1398104 || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(file2.base64))
-      throw new Error("Invalid inline input encoding");
-    const bytes = Buffer.from(file2.base64, "base64");
-    total += bytes.byteLength;
-    if (total > 1024 * 1024 || bytes.toString("base64") !== file2.base64)
-      throw new Error("Inline inputs must total at most 1 MiB");
-    return { name: file2.name, bytes, contentType: file2.contentType };
-  });
-  describeRemoteFiles(decoded);
-  return decoded;
-}
-var MAX_REMOTE_FILE_BYTES;
-var init_remote_files = __esm(() => {
-  MAX_REMOTE_FILE_BYTES = 64 * 1024 * 1024;
-});
-
-// src/lib/selection-aliases.ts
-function selectionAliasError(selections) {
-  const names = new Set(selections.map((selection) => selection.slug));
-  for (const selection of selections) {
-    if (selection.aliases === undefined)
-      continue;
-    if (!Array.isArray(selection.aliases) || selection.aliases.length > 32)
-      return "Selection aliases must be an array of at most 32 names.";
-    for (const alias of selection.aliases) {
-      if (typeof alias !== "string" || alias.length > 128 || !/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(alias))
-        return "Selection aliases must be bounded kebab-case names.";
-      if (names.has(alias))
-        return "Selection aliases must be unique and cannot shadow a selected canonical name.";
-      names.add(alias);
-    }
-  }
-}
-function selectionSnapshotsEqual(left, right) {
-  const snapshot = (selections) => selections.map((selection) => [
-    selection.slug,
-    selection.version,
-    selection.bundleDigest,
-    selection.aliases ?? [],
-    selection.triggers?.keywords ?? [],
-    selection.triggers?.paths ?? [],
-    selection.triggers?.always ?? null
-  ]).sort((a, b) => String(a[0]).localeCompare(String(b[0])));
-  return JSON.stringify(snapshot(left)) === JSON.stringify(snapshot(right));
-}
-
-// src/lib/profile-limits.ts
-function profileDocumentBytes(value) {
-  return new TextEncoder().encode(JSON.stringify(value)).byteLength;
-}
-function requiresProfileCapacity(selections, bodyBytes) {
-  return selections.length > LEGACY_PROFILE_SELECTIONS || bodyBytes > LEGACY_PROFILE_DOCUMENT_BYTES;
-}
-function assertAdvertisedProfileCapacity(value, count, bodyBytes) {
-  const limits = value?.profileLimits;
-  if (!limits || !Number.isSafeInteger(limits.maxSelections) || Number(limits.maxSelections) < count || !Number.isSafeInteger(limits.maxDocumentBytes) || Number(limits.maxDocumentBytes) < bodyBytes || !Number.isSafeInteger(limits.requestBodyLimitBytes) || Number(limits.requestBodyLimitBytes) < bodyBytes || !Number.isSafeInteger(limits.maxResolvedProfileBytes) || Number(limits.maxResolvedProfileBytes) <= 0) {
-    throw new Error("The Skills API does not advertise enough profile capacity. Review the API version and its configured request-body limit before saving this profile.");
-  }
-}
-function profileSelectionSnapshot(selections) {
-  return selections.map(({ slug, version: version2, bundleDigest, aliases, triggers }) => ({
-    slug,
-    version: version2,
-    bundleDigest,
-    ...aliases !== undefined ? { aliases } : {},
-    ...triggers !== undefined ? { triggers } : {}
-  }));
-}
-var MAX_PROFILE_SELECTIONS = 4096, MAX_PROFILE_DOCUMENT_BYTES, MAX_SKILL_SESSION_ID_CHARS = 256, PROFILE_SESSION_ENVELOPE_BYTES, MAX_RESOLVED_PROFILE_BYTES, LEGACY_PROFILE_SELECTIONS = 256, LEGACY_PROFILE_DOCUMENT_BYTES = 1e6;
-var init_profile_limits = __esm(() => {
-  MAX_PROFILE_DOCUMENT_BYTES = 8 * 1024 * 1024;
-  PROFILE_SESSION_ENVELOPE_BYTES = MAX_PROFILE_SELECTIONS * 67 + MAX_SKILL_SESSION_ID_CHARS * 12 + 512;
-  MAX_RESOLVED_PROFILE_BYTES = MAX_PROFILE_DOCUMENT_BYTES - PROFILE_SESSION_ENVELOPE_BYTES;
-});
-
-// src/lib/profile-client.ts
-function object6(value) {
-  return Boolean(value && typeof value === "object" && !Array.isArray(value));
-}
-function identifier(value) {
-  return typeof value === "string" && /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/.test(value) && !value.includes("..");
-}
-function invalid() {
-  throw new Error("The Skills API returned an invalid profile response");
-}
-function validateSelection(value) {
-  if (!object6(value) || !identifier(value.slug) || typeof value.version !== "string" || !/^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$/.test(value.version) || value.version.includes("..") || typeof value.bundleDigest !== "string" || !/^sha256:[a-f0-9]{64}$/.test(value.bundleDigest))
-    invalid();
-  if (selectionAliasError([value]))
-    invalid();
-  if (value.triggers !== undefined) {
-    if (!object6(value.triggers) || Object.keys(value.triggers).some((key) => !["keywords", "paths", "always"].includes(key)))
-      invalid();
-    if (value.triggers.always !== undefined && typeof value.triggers.always !== "boolean")
-      invalid();
-    for (const key of ["keywords", "paths"]) {
-      const values = value.triggers[key];
-      if (values !== undefined && (!Array.isArray(values) || values.length > 32 || values.some((term) => typeof term !== "string" || !term.trim() || term.length > 256)))
-        invalid();
-    }
-  }
-}
-
-class HttpProfileClient {
-  key;
-  authority;
-  origin;
-  constructor(key, origin) {
-    this.key = key;
-    if (!key.trim())
-      throw new Error("A Skills credential is required");
-    this.origin = normalizeSkillsApiOrigin(origin);
-    this.authority = skillsApiRequestUrl(this.origin, "/api/v1/").replace(/\/+$/, "");
-  }
-  async requestRoute(route, init = {}) {
-    let response;
-    try {
-      response = await fetch(skillsApiRequestUrl(this.origin, route), {
-        ...init,
-        redirect: "error",
-        credentials: "omit",
-        signal: AbortSignal.timeout(15000),
-        headers: {
-          "Content-Type": "application/json",
-          "User-Agent": `hasna-skills/${package_default.version}`,
-          Authorization: `Bearer ${this.key}`,
-          ...init.headers
-        }
-      });
-    } catch {
-      throw new Error("Unable to reach the configured Skills API");
-    }
-    if (!response.ok) {
-      response.body?.cancel().catch(() => {});
-      throw new Error(`Skills API request failed (HTTP ${response.status})`);
-    }
-    return response;
-  }
-  request(path, init = {}) {
-    return this.requestRoute(`/api/v1${path}`, init);
-  }
-  async read(response, limit = MAX_PROFILE_DOCUMENT_BYTES) {
-    try {
-      return JSON.parse(new TextDecoder().decode(await readBoundedResponse(response, limit)));
-    } catch {
-      invalid();
-    }
-  }
-  async resolveProfile(id) {
-    if (!identifier(id))
-      throw new Error("Invalid selection profile id");
-    const result = await this.read(await this.request(`/profiles/${encodeURIComponent(id)}/resolve`), MAX_RESOLVED_PROFILE_BYTES);
-    if (!object6(result) || result.profileId !== id || result.authority !== this.authority || !identifier(result.workspaceId) || !identifier(result.profileRevision) || !Array.isArray(result.selections) || result.selections.length > MAX_PROFILE_SELECTIONS)
-      invalid();
-    const seen = new Set;
-    for (const entry of result.selections) {
-      validateSelection(entry);
-      const item = entry;
-      if (seen.has(item.slug) || item.authority !== this.authority || item.workspaceId !== result.workspaceId || item.profileRevision !== result.profileRevision)
-        invalid();
-      seen.add(item.slug);
-    }
-    if (selectionAliasError(result.selections))
-      invalid();
-    return result;
-  }
-  async resolvePrincipal() {
-    const result = await this.read(await this.requestRoute("/api/auth/whoami"), 16 * 1024);
-    if (!object6(result) || Object.keys(result).sort().join(",") !== "organization,user" || !object6(result.user) || Object.keys(result.user).sort().join(",") !== "email,id,role" || !object6(result.organization) || Object.keys(result.organization).sort().join(",") !== "id,name,slug" || !identifier(result.user.id) || typeof result.user.email !== "string" || !result.user.email.trim() || !["owner", "admin", "member", "viewer"].includes(String(result.user.role)) || !identifier(result.organization.id) || !identifier(result.organization.slug) || typeof result.organization.name !== "string" || !result.organization.name.trim())
-      invalid();
-    return { userId: result.user.id, accountId: result.organization.id, role: result.user.role };
-  }
-  async recordStation(id, input2) {
-    if (!identifier(id) || !identifier(input2.profileId) || !identifier(input2.profileRevision) || !Array.isArray(input2.selections) || input2.selections.length > MAX_PROFILE_SELECTIONS)
-      throw new Error("Invalid station state");
-    input2.selections.forEach(validateSelection);
-    if (selectionAliasError(input2.selections))
-      throw new Error("Invalid station selection aliases");
-    const snapshot = { ...input2, selections: profileSelectionSnapshot(input2.selections) };
-    const bodyBytes = profileDocumentBytes(snapshot);
-    if (bodyBytes > MAX_PROFILE_DOCUMENT_BYTES)
-      throw new Error("Station state exceeds the profile document size limit");
-    if (requiresProfileCapacity(input2.selections, bodyBytes)) {
-      const capabilities = await this.read(await this.request("/capabilities"));
-      assertAdvertisedProfileCapacity(capabilities, input2.selections.length, bodyBytes);
-    }
-    const result = await this.read(await this.request(`/stations/${encodeURIComponent(id)}/state`, {
-      method: "PUT",
-      body: JSON.stringify(snapshot)
-    }));
-    if (!object6(result) || result.stationId !== id || result.profileId !== input2.profileId || result.profileRevision !== input2.profileRevision || !identifier(result.workspaceId) || !identifier(result.actorId) || typeof result.appliedAt !== "string" || !Array.isArray(result.selections) || result.selections.length > MAX_PROFILE_SELECTIONS)
-      invalid();
-    result.selections.forEach(validateSelection);
-    if (selectionAliasError(result.selections))
-      invalid();
-    if (!selectionSnapshotsEqual(input2.selections, result.selections))
-      invalid();
-    return result;
-  }
-  async getBundle(slug, version2) {
-    if (!identifier(slug) || !/^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$/.test(version2) || version2.includes(".."))
-      throw new Error("Invalid immutable skill reference");
-    return this.request(`/skills/${encodeURIComponent(slug)}/versions/${encodeURIComponent(version2)}/bundle`);
-  }
-}
-async function createProfileClient() {
-  const connection = await resolveSkillsConnection();
-  if (!connection)
-    throw new Error("Selection profiles require a configured Skills API");
-  return new HttpProfileClient(connection.apiKey, connection.apiOrigin);
-}
-var init_profile_client = __esm(() => {
-  init_package();
-  init_fleet_credentials();
-  init_remote_files();
-  init_profile_limits();
-});
-
 // src/lib/skill-bundle.ts
-import { createHash as createHash6 } from "crypto";
+import { createHash as createHash5 } from "crypto";
 import { readFileSync as readFileSync9, readdirSync as readdirSync4, statSync as statSync6 } from "fs";
 import { join as join13, relative as relative3 } from "path";
 import { createGunzip } from "zlib";
@@ -45924,7 +45651,7 @@ function ownBytes(view) {
   return out;
 }
 function sha256Hex(bytes) {
-  return createHash6("sha256").update(bytes).digest("hex");
+  return createHash5("sha256").update(bytes).digest("hex");
 }
 function collectSkillBundleEntries(dir) {
   const entries = [];
@@ -46076,7 +45803,7 @@ async function inspectSkillBundle(bundle, options = {}) {
     throw new SkillBundleInspectionError("BUNDLE_LIMIT", "Compressed bundle exceeds byte limit");
   const snapshot = ownBytes(bundle);
   check2();
-  const sha2562 = sha256Hex(snapshot);
+  const sha256 = sha256Hex(snapshot);
   check2();
   const parser2 = new BoundedTarReader(limits, check2);
   const streamOptions = { chunkSize: 16 * 1024, highWaterMark: 16 * 1024 };
@@ -46111,7 +45838,7 @@ async function inspectSkillBundle(bundle, options = {}) {
     const entries = parser2.finish();
     return {
       entries,
-      sha256: sha2562,
+      sha256,
       compressedByteSize: snapshot.byteLength,
       decompressedByteSize,
       unpackedByteSize: parser2.fileBytes,
@@ -46399,8 +46126,67 @@ var init_skill_version = __esm(() => {
   SKILL_VERSION_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$/;
 });
 
+// src/lib/selection-aliases.ts
+function selectionAliasError(selections) {
+  const names = new Set(selections.map((selection) => selection.slug));
+  for (const selection of selections) {
+    if (selection.aliases === undefined)
+      continue;
+    if (!Array.isArray(selection.aliases) || selection.aliases.length > 32)
+      return "Selection aliases must be an array of at most 32 names.";
+    for (const alias of selection.aliases) {
+      if (typeof alias !== "string" || alias.length > 128 || !/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(alias))
+        return "Selection aliases must be bounded kebab-case names.";
+      if (names.has(alias))
+        return "Selection aliases must be unique and cannot shadow a selected canonical name.";
+      names.add(alias);
+    }
+  }
+}
+function selectionSnapshotsEqual(left, right) {
+  const snapshot = (selections) => selections.map((selection) => [
+    selection.slug,
+    selection.version,
+    selection.bundleDigest,
+    selection.aliases ?? [],
+    selection.triggers?.keywords ?? [],
+    selection.triggers?.paths ?? [],
+    selection.triggers?.always ?? null
+  ]).sort((a, b) => String(a[0]).localeCompare(String(b[0])));
+  return JSON.stringify(snapshot(left)) === JSON.stringify(snapshot(right));
+}
+
+// src/lib/profile-limits.ts
+function profileDocumentBytes(value) {
+  return new TextEncoder().encode(JSON.stringify(value)).byteLength;
+}
+function requiresProfileCapacity(selections, bodyBytes) {
+  return selections.length > LEGACY_PROFILE_SELECTIONS || bodyBytes > LEGACY_PROFILE_DOCUMENT_BYTES;
+}
+function assertAdvertisedProfileCapacity(value, count, bodyBytes) {
+  const limits = value?.profileLimits;
+  if (!limits || !Number.isSafeInteger(limits.maxSelections) || Number(limits.maxSelections) < count || !Number.isSafeInteger(limits.maxDocumentBytes) || Number(limits.maxDocumentBytes) < bodyBytes || !Number.isSafeInteger(limits.requestBodyLimitBytes) || Number(limits.requestBodyLimitBytes) < bodyBytes || !Number.isSafeInteger(limits.maxResolvedProfileBytes) || Number(limits.maxResolvedProfileBytes) <= 0) {
+    throw new Error("The Skills API does not advertise enough profile capacity. Review the API version and its configured request-body limit before saving this profile.");
+  }
+}
+function profileSelectionSnapshot(selections) {
+  return selections.map(({ slug, version: version2, bundleDigest, aliases, triggers }) => ({
+    slug,
+    version: version2,
+    bundleDigest,
+    ...aliases !== undefined ? { aliases } : {},
+    ...triggers !== undefined ? { triggers } : {}
+  }));
+}
+var MAX_PROFILE_SELECTIONS = 4096, MAX_PROFILE_DOCUMENT_BYTES, MAX_SKILL_SESSION_ID_CHARS = 256, PROFILE_SESSION_ENVELOPE_BYTES, MAX_RESOLVED_PROFILE_BYTES, LEGACY_PROFILE_SELECTIONS = 256, LEGACY_PROFILE_DOCUMENT_BYTES = 1e6;
+var init_profile_limits = __esm(() => {
+  MAX_PROFILE_DOCUMENT_BYTES = 8 * 1024 * 1024;
+  PROFILE_SESSION_ENVELOPE_BYTES = MAX_PROFILE_SELECTIONS * 67 + MAX_SKILL_SESSION_ID_CHARS * 12 + 512;
+  MAX_RESOLVED_PROFILE_BYTES = MAX_PROFILE_DOCUMENT_BYTES - PROFILE_SESSION_ENVELOPE_BYTES;
+});
+
 // src/lib/selection-cache.ts
-import { createHash as createHash7, randomUUID } from "crypto";
+import { createHash as createHash6, randomUUID } from "crypto";
 import { spawnSync as spawnSync2 } from "child_process";
 import { closeSync as closeSync6, constants as constants3, fstatSync as fstatSync6, fsyncSync, lstatSync as lstatSync8, mkdirSync as mkdirSync3, openSync as openSync6, readFileSync as readFileSync10, readlinkSync as readlinkSync2, readSync as readSync3, renameSync, unlinkSync, writeFileSync as writeFileSync3 } from "fs";
 import { hostname as hostname3 } from "os";
@@ -46410,13 +46196,13 @@ function selectionCacheRoot(options = {}) {
   return resolve7(options.cacheDir ?? join14(getDataDirReadOnly(), "selection-cache"));
 }
 function selectionKey(selection) {
-  validateSelection2(selection);
+  validateSelection(selection);
   return hash2([selection.authority, selection.workspaceId, selection.slug, selection.version, selection.bundleDigest]);
 }
 function hash2(value) {
-  return createHash7("sha256").update(JSON.stringify(value)).digest("hex");
+  return createHash6("sha256").update(JSON.stringify(value)).digest("hex");
 }
-function validateSelection2(selection) {
+function validateSelection(selection) {
   if (!selection || !/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(selection.slug) || !isValidSkillVersion(selection.version) || !/^sha256:[a-f0-9]{64}$/.test(selection.bundleDigest) || typeof selection.workspaceId !== "string" || !selection.workspaceId.trim() || typeof selection.profileRevision !== "string" || !selection.profileRevision.trim()) {
     throw new SkillSelectionError("INVALID_SELECTION", "A skill selection must carry an exact version, digest, workspace and profile revision.");
   }
@@ -46439,7 +46225,7 @@ function validateResolvedProfile(profile, authority) {
     throw new SkillSelectionError("RECEIPT_TOO_LARGE", "The resolved Skills profile exceeds its size limit.");
   const slugs = new Set;
   for (const selection of profile.selections) {
-    validateSelection2(selection);
+    validateSelection(selection);
     if (selection.authority !== profile.authority || selection.workspaceId !== profile.workspaceId || selection.profileRevision !== profile.profileRevision || slugs.has(selection.slug)) {
       throw new SkillSelectionError("PROFILE_IDENTITY_MISMATCH", "The resolved profile contains conflicting selection identities.");
     }
@@ -46450,7 +46236,7 @@ function validateResolvedProfile(profile, authority) {
     throw new SkillSelectionError("INVALID_SELECTION_ALIASES", aliasError);
 }
 function selectionBundlePath(selection, options = {}) {
-  validateSelection2(selection);
+  validateSelection(selection);
   return join14(selectionCacheRoot(options), "objects", hash2(selection.authority), hash2(selection.workspaceId), `${selection.bundleDigest.slice(7)}.tar.gz`);
 }
 function assertRegularPath(path, createParents = false) {
@@ -46554,7 +46340,7 @@ async function readCachedSelection(selection, options = {}) {
   return bytes ? verifiedEntries(selection, bytes) : null;
 }
 async function cacheSelectionBundle(selection, response, options = {}) {
-  validateSelection2(selection);
+  validateSelection(selection);
   if (!response?.ok)
     throw new SkillSelectionError("BUNDLE_UNAVAILABLE", `The selected skill bundle is unavailable${response ? ` (HTTP ${response.status})` : ""}.`);
   const declared = response.headers.get("X-Skill-Bundle-Sha256");
@@ -46618,7 +46404,11 @@ function assertFreshCachedProfile(receipt, options = {}) {
   validateSelectionReceipt(receipt);
   const age = (options.now ?? Date.now)() - Date.parse(receipt.verifiedAt);
   const maximum = options.maxAgeMs ?? MAX_CACHED_PROFILE_AGE_MS;
-  if (!Number.isFinite(maximum) || maximum <= 0 || maximum > MAX_CACHED_PROFILE_AGE_MS || age < 0 || age > maximum) {
+  if (!Number.isFinite(maximum) || maximum <= 0 || maximum > MAX_CACHED_PROFILE_AGE_MS)
+    throw new SkillSelectionError("INVALID_CONTEXT_BUDGET", "The cached profile maximum age must be positive and within the supported bound.");
+  if (!Number.isFinite(age) || age < 0)
+    throw new SkillSelectionError("INVALID_RECEIPT", "The cached profile verification timestamp is invalid or in the future.");
+  if (age > maximum) {
     throw new SkillSelectionError("CACHED_PROFILE_EXPIRED", "The cached Skills profile has expired; authenticate and sync it again.");
   }
 }
@@ -46667,8 +46457,8 @@ function readSkillSessionSnapshotIfExists(sessionId, options = {}) {
     throw new SkillSelectionError("INVALID_RECEIPT", "The Skills session receipt is unreadable.");
   }
   validateSkillSessionReceipt(receipt, sessionId);
-  const sha2562 = sha256Hex(bytes);
-  return { path, bytes, receipt, sha256: sha2562, sessionId, generation: skillSessionGeneration(receipt), receiptSha256: sha2562 };
+  const sha256 = sha256Hex(bytes);
+  return { path, bytes, receipt, sha256, sessionId, generation: skillSessionGeneration(receipt), receiptSha256: sha256 };
 }
 function skillSessionSnapshotBinding(snapshot) {
   return { sessionId: snapshot.sessionId, generation: snapshot.generation, receiptSha256: snapshot.receiptSha256 };
@@ -46734,12 +46524,12 @@ function readSessionLock(sessionId, options) {
   const before = lstatSync8(path, { throwIfNoEntry: false });
   if (!before)
     return null;
-  if (!before.isFile() || before.nlink !== 1 || process.getuid && before.uid !== process.getuid()) {
+  if (!before.isFile() || before.nlink !== 1 || (before.mode & 63) !== 0 || process.getuid && before.uid !== process.getuid()) {
     throw new SkillSelectionError("SESSION_WRITE_LOCKED", "The session lock is not a private regular file; recovery requires review.");
   }
   const bytes = readRegularFile(path, SESSION_LOCK_MAX_BYTES);
   const after = lstatSync8(path, { throwIfNoEntry: false });
-  if (!bytes || !after?.isFile() || before.dev !== after.dev || before.ino !== after.ino || before.mtimeMs !== after.mtimeMs) {
+  if (!bytes || !after?.isFile() || before.dev !== after.dev || before.ino !== after.ino || before.mtimeMs !== after.mtimeMs || before.mode !== after.mode || before.uid !== after.uid || before.gid !== after.gid || before.nlink !== after.nlink) {
     throw new SkillSelectionError("SESSION_WRITE_LOCKED", "The session lock changed during inspection; recovery requires review.");
   }
   let marker;
@@ -46865,8 +46655,11 @@ function withSessionWriteLocks(sessionIds, options, action) {
         try {
           fd = openSync6(lock.path, constants3.O_WRONLY | constants3.O_CREAT | constants3.O_EXCL | constants3.O_NOFOLLOW, 384);
         } catch (retryError) {
-          if (retryError.code === "EEXIST")
-            throw new SkillSelectionError("SESSION_WRITE_LOCKED", "Another Skills process owns a required session write lock; retry after it completes. A surviving legacy lock requires explicit recovery review.");
+          if (retryError.code === "EEXIST") {
+            if (!readSessionLock(lock.sessionId, options))
+              throw new SkillSelectionError("SESSION_WRITE_LOCK_CHANGED", "The session lock changed during acquisition.");
+            throw new SkillSelectionError("SESSION_WRITE_BUSY", "Another Skills process owns a required session write lock; retry after it completes. A surviving legacy lock requires explicit recovery review.");
+          }
           throw retryError;
         }
       }
@@ -46908,7 +46701,7 @@ function writeSkillSession(receipt, expected, options = {}) {
   withSessionWriteLocks(lockIds, options, (assertOwned) => {
     const current = readSkillSessionSnapshotIfExists(receipt.sessionId, options);
     if (!sameSnapshot(current, expected.current) || current && !isDeepStrictEqual(current.receipt.profile, receipt.profile)) {
-      throw new SkillSelectionError("SESSION_RECEIPT_CHANGED", "The Skills session receipt changed while context was loading; resolve context again without replacing the current pin.");
+      throw new SkillSelectionError("SESSION_CONTEXT_CONFLICT", "The Skills session receipt changed while context was loading; resolve context again without replacing the current pin.");
     }
     let parent = null;
     if (expected.parent) {
@@ -46963,6 +46756,246 @@ var init_selection_cache = __esm(() => {
   MAX_CACHED_PROFILE_AGE_MS = 24 * 60 * 60 * 1000;
 });
 
+// src/lib/remote-files.ts
+var exports_remote_files = {};
+__export(exports_remote_files, {
+  sha256: () => sha256,
+  readBoundedResponse: () => readBoundedResponse,
+  describeRemoteFiles: () => describeRemoteFiles,
+  decodeRemoteFiles: () => decodeRemoteFiles,
+  MAX_REMOTE_FILE_BYTES: () => MAX_REMOTE_FILE_BYTES
+});
+import { createHash as createHash7 } from "crypto";
+function describeRemoteFiles(files) {
+  if (files.length > 10)
+    throw new Error("At most 10 input files are supported");
+  const names = new Set;
+  let total = 0;
+  return files.map((file2) => {
+    if (typeof file2.name !== "string" || file2.name.length === 0 || file2.name.length > 255 || /[/\\\x00-\x1f\x7f]/.test(file2.name) || /[\ud800-\udfff]/u.test(file2.name) || file2.name === "." || file2.name === ".." || names.has(file2.name))
+      throw new Error("Input file names must be unique safe basenames");
+    names.add(file2.name);
+    total += file2.bytes.byteLength;
+    if (file2.bytes.byteLength > 20 * 1024 * 1024 || total > 50 * 1024 * 1024)
+      throw new Error("Input files exceed the supported size limit");
+    return { name: file2.name, sizeBytes: file2.bytes.byteLength, sha256: sha256(file2.bytes), contentType: file2.contentType ?? "application/octet-stream" };
+  });
+}
+function sha256(bytes) {
+  return createHash7("sha256").update(bytes).digest("hex");
+}
+async function readBoundedResponse(response, maximum) {
+  if (!Number.isSafeInteger(maximum) || maximum < 0 || maximum > MAX_REMOTE_FILE_BYTES)
+    throw new Error("Invalid artifact size limit");
+  const length = response.headers.get("content-length");
+  if (length && (!/^\d+$/.test(length) || Number(length) > maximum)) {
+    await response.body?.cancel();
+    throw new Error("Artifact exceeds its declared size limit");
+  }
+  const reader = response.body?.getReader();
+  if (!reader)
+    return new Uint8Array;
+  const chunks = [];
+  let size = 0;
+  try {
+    while (true) {
+      const next = await reader.read();
+      if (next.done)
+        break;
+      size += next.value.byteLength;
+      if (size > maximum)
+        throw new Error("Artifact exceeds its declared size limit");
+      chunks.push(next.value);
+    }
+  } catch (error61) {
+    await reader.cancel().catch(() => {});
+    throw error61;
+  } finally {
+    reader.releaseLock();
+  }
+  const bytes = new Uint8Array(size);
+  let offset = 0;
+  for (const chunk of chunks) {
+    bytes.set(chunk, offset);
+    offset += chunk.byteLength;
+  }
+  return bytes;
+}
+function decodeRemoteFiles(files) {
+  let total = 0;
+  const decoded = files.map((file2) => {
+    if (file2.base64.length > 1398104 || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(file2.base64))
+      throw new Error("Invalid inline input encoding");
+    const bytes = Buffer.from(file2.base64, "base64");
+    total += bytes.byteLength;
+    if (total > 1024 * 1024 || bytes.toString("base64") !== file2.base64)
+      throw new Error("Inline inputs must total at most 1 MiB");
+    return { name: file2.name, bytes, contentType: file2.contentType };
+  });
+  describeRemoteFiles(decoded);
+  return decoded;
+}
+var MAX_REMOTE_FILE_BYTES;
+var init_remote_files = __esm(() => {
+  MAX_REMOTE_FILE_BYTES = 64 * 1024 * 1024;
+});
+
+// src/lib/profile-client.ts
+function object6(value) {
+  return Boolean(value && typeof value === "object" && !Array.isArray(value));
+}
+function identifier(value) {
+  return typeof value === "string" && /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/.test(value) && !value.includes("..");
+}
+function invalid() {
+  throw new Error("The Skills API returned an invalid profile response");
+}
+function validateSelection2(value) {
+  if (!object6(value) || !identifier(value.slug) || typeof value.version !== "string" || !/^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$/.test(value.version) || value.version.includes("..") || typeof value.bundleDigest !== "string" || !/^sha256:[a-f0-9]{64}$/.test(value.bundleDigest))
+    invalid();
+  if (selectionAliasError([value]))
+    invalid();
+  if (value.triggers !== undefined) {
+    if (!object6(value.triggers) || Object.keys(value.triggers).some((key) => !["keywords", "paths", "always"].includes(key)))
+      invalid();
+    if (value.triggers.always !== undefined && typeof value.triggers.always !== "boolean")
+      invalid();
+    for (const key of ["keywords", "paths"]) {
+      const values = value.triggers[key];
+      if (values !== undefined && (!Array.isArray(values) || values.length > 32 || values.some((term) => typeof term !== "string" || !term.trim() || term.length > 256)))
+        invalid();
+    }
+  }
+}
+
+class HttpProfileClient {
+  key;
+  authority;
+  origin;
+  constructor(key, origin) {
+    this.key = key;
+    if (!key.trim())
+      throw new Error("A Skills credential is required");
+    this.origin = normalizeSkillsApiOrigin(origin);
+    this.authority = skillsApiRequestUrl(this.origin, "/api/v1/").replace(/\/+$/, "");
+  }
+  async requestRoute(route, init = {}) {
+    const requestUrl = skillsApiRequestUrl(this.origin, route);
+    let response;
+    try {
+      response = await fetch(requestUrl, {
+        ...init,
+        redirect: "error",
+        credentials: "omit",
+        signal: AbortSignal.timeout(15000),
+        headers: {
+          "Content-Type": "application/json",
+          "User-Agent": `hasna-skills/${package_default.version}`,
+          Authorization: `Bearer ${this.key}`,
+          ...init.headers
+        }
+      });
+    } catch {
+      throw new SkillSelectionError("SKILLS_API_UNAVAILABLE", "Unable to reach the configured Skills API");
+    }
+    if (!response.ok) {
+      response.body?.cancel().catch(() => {});
+      const code = response.status === 401 ? "SKILLS_API_UNAUTHORIZED" : response.status === 403 ? "SKILLS_API_FORBIDDEN" : [404, 410].includes(response.status) ? "SKILLS_API_RESOURCE_UNAVAILABLE" : response.status === 429 || response.status >= 500 ? "SKILLS_API_UNAVAILABLE" : undefined;
+      if (code)
+        throw new SkillSelectionError(code, `Skills API request failed (HTTP ${response.status})`);
+      throw new Error(`Skills API request failed (HTTP ${response.status})`);
+    }
+    return response;
+  }
+  request(path, init = {}) {
+    return this.requestRoute(`/api/v1${path}`, init);
+  }
+  async read(response, limit = MAX_PROFILE_DOCUMENT_BYTES) {
+    try {
+      return JSON.parse(new TextDecoder().decode(await readBoundedResponse(response, limit)));
+    } catch {
+      invalid();
+    }
+  }
+  async resolveProfile(id) {
+    if (!identifier(id))
+      throw new Error("Invalid selection profile id");
+    const result = await this.read(await this.request(`/profiles/${encodeURIComponent(id)}/resolve`), MAX_RESOLVED_PROFILE_BYTES);
+    if (!object6(result) || result.profileId !== id || result.authority !== this.authority || !identifier(result.workspaceId) || !identifier(result.profileRevision) || !Array.isArray(result.selections) || result.selections.length > MAX_PROFILE_SELECTIONS)
+      invalid();
+    const seen = new Set;
+    for (const entry of result.selections) {
+      validateSelection2(entry);
+      const item = entry;
+      if (seen.has(item.slug) || item.authority !== this.authority || item.workspaceId !== result.workspaceId || item.profileRevision !== result.profileRevision)
+        invalid();
+      seen.add(item.slug);
+    }
+    if (selectionAliasError(result.selections))
+      invalid();
+    return result;
+  }
+  async resolvePrincipal() {
+    const result = await this.read(await this.requestRoute("/api/auth/whoami"), 16 * 1024);
+    if (!object6(result) || Object.keys(result).sort().join(",") !== "organization,user" || !object6(result.user) || Object.keys(result.user).sort().join(",") !== "email,id,role" || !object6(result.organization) || Object.keys(result.organization).sort().join(",") !== "id,name,slug" || !identifier(result.user.id) || typeof result.user.email !== "string" || !result.user.email.trim() || !["owner", "admin", "member", "viewer"].includes(String(result.user.role)) || !identifier(result.organization.id) || !identifier(result.organization.slug) || typeof result.organization.name !== "string" || !result.organization.name.trim())
+      invalid();
+    return { userId: result.user.id, accountId: result.organization.id, role: result.user.role };
+  }
+  async recordStation(id, input2) {
+    if (!identifier(id) || !identifier(input2.profileId) || !identifier(input2.profileRevision) || !Array.isArray(input2.selections) || input2.selections.length > MAX_PROFILE_SELECTIONS)
+      throw new Error("Invalid station state");
+    input2.selections.forEach(validateSelection2);
+    if (selectionAliasError(input2.selections))
+      throw new Error("Invalid station selection aliases");
+    const snapshot = { ...input2, selections: profileSelectionSnapshot(input2.selections) };
+    const bodyBytes = profileDocumentBytes(snapshot);
+    if (bodyBytes > MAX_PROFILE_DOCUMENT_BYTES)
+      throw new Error("Station state exceeds the profile document size limit");
+    if (requiresProfileCapacity(input2.selections, bodyBytes)) {
+      const capabilities = await this.read(await this.request("/capabilities"));
+      assertAdvertisedProfileCapacity(capabilities, input2.selections.length, bodyBytes);
+    }
+    const result = await this.read(await this.request(`/stations/${encodeURIComponent(id)}/state`, {
+      method: "PUT",
+      body: JSON.stringify(snapshot)
+    }));
+    if (!object6(result) || result.stationId !== id || result.profileId !== input2.profileId || result.profileRevision !== input2.profileRevision || !identifier(result.workspaceId) || !identifier(result.actorId) || typeof result.appliedAt !== "string" || !Array.isArray(result.selections) || result.selections.length > MAX_PROFILE_SELECTIONS)
+      invalid();
+    result.selections.forEach(validateSelection2);
+    if (selectionAliasError(result.selections))
+      invalid();
+    if (!selectionSnapshotsEqual(input2.selections, result.selections))
+      invalid();
+    return result;
+  }
+  async getBundle(slug, version2) {
+    if (!identifier(slug) || !/^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$/.test(version2) || version2.includes(".."))
+      throw new Error("Invalid immutable skill reference");
+    return this.request(`/skills/${encodeURIComponent(slug)}/versions/${encodeURIComponent(version2)}/bundle`);
+  }
+}
+async function createProfileClient() {
+  let connection;
+  try {
+    connection = await resolveSkillsConnection();
+  } catch (error61) {
+    if (isSkillsFleetCredentialError(error61) && error61.code === "MISSING_API_CREDENTIAL") {
+      throw new SkillSelectionError("SKILLS_API_CREDENTIAL_UNAVAILABLE", "The configured Skills authority has no usable credential. Sign in through the configured credential resolver; no payload was delivered.");
+    }
+    throw error61;
+  }
+  if (!connection)
+    throw new Error("Selection profiles require a configured Skills API");
+  return new HttpProfileClient(connection.apiKey, connection.apiOrigin);
+}
+var init_profile_client = __esm(() => {
+  init_selection_cache();
+  init_package();
+  init_fleet_credentials();
+  init_remote_files();
+  init_profile_limits();
+});
+
 // src/lib/preparation-process.ts
 function capturePreparationProcess(child, platform = process.platform, signalGroup = (pid, signal) => process.kill(pid, signal)) {
   let spawnedPid;
@@ -47167,116 +47200,9 @@ async function prepareSkillDependencies(skillPath, env, timeoutMs = DEFAULT_PREP
 var DEPENDENCY_PREPARATION_MARKER = ".skills-dependency-preparation", RECOVERY = "Skill dependency preparation is incomplete. Confirm no installer is running, successfully run bun install --no-save in the skill directory, then remove only .skills-dependency-preparation. See docs/skill-standard.md#recovering-interrupted-dependency-preparation.", DEFAULT_PREPARATION_TIMEOUT_MS = 60000;
 var init_dependency_preparation = () => {};
 
-// src/lib/managed-policy.ts
-import { closeSync as closeSync8, constants as constants5, fstatSync as fstatSync8, lstatSync as lstatSync10, openSync as openSync8, readSync as readSync4 } from "fs";
-import { join as join16 } from "path";
-function refusal(reason = "is unreadable") {
-  return new SkillSelectionError("INVALID_AGENT_POLICY", `The Skills agent loading policy ${reason}; refusing legacy fallback.`);
-}
-function parseManagedSkillPolicy(text2) {
-  if (Buffer.byteLength(text2) > AGENT_POLICY_LIMITS.bytes)
-    throw refusal("exceeds its size limit");
-  let value;
-  try {
-    value = JSON.parse(text2);
-  } catch {
-    throw refusal();
-  }
-  if (!value || typeof value !== "object" || Array.isArray(value) || value.loading !== "cli" || value.version !== undefined && value.version !== 1)
-    throw refusal();
-  if (value.profileId !== undefined && (typeof value.profileId !== "string" || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(value.profileId) || value.profileId.includes("..")))
-    throw refusal();
-  try {
-    assertAgentPolicyCollections(value);
-  } catch {
-    throw refusal("has invalid collection bounds");
-  }
-  return value;
-}
-function readManagedSkillPolicySnapshot(dataDir2 = getDataDirReadOnly()) {
-  const path = join16(dataDir2, "agent-policy.json");
-  let descriptor, observed = false;
-  try {
-    const stat = lstatSync10(path);
-    observed = true;
-    if (!stat.isFile() || stat.isSymbolicLink())
-      throw refusal();
-    if (stat.size > AGENT_POLICY_LIMITS.bytes)
-      throw refusal("exceeds its size limit");
-    descriptor = openSync8(path, constants5.O_RDONLY | (constants5.O_NOFOLLOW ?? 0) | constants5.O_NONBLOCK);
-    const opened = fstatSync8(descriptor);
-    if (!opened.isFile())
-      throw refusal();
-    if (opened.size > AGENT_POLICY_LIMITS.bytes)
-      throw refusal("exceeds its size limit");
-    const bytes = Buffer.allocUnsafe(AGENT_POLICY_LIMITS.bytes + 1);
-    let length = 0;
-    while (length < bytes.length) {
-      const count = readSync4(descriptor, bytes, length, bytes.length - length, null);
-      if (count === 0)
-        break;
-      length += count;
-    }
-    if (length > AGENT_POLICY_LIMITS.bytes)
-      throw refusal("exceeds its size limit");
-    const text2 = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(bytes.subarray(0, length));
-    return { text: text2, value: parseManagedSkillPolicy(text2) };
-  } catch (error61) {
-    if (error61.code === "ENOENT" && !observed) {
-      if (lstatSync10(path, { throwIfNoEntry: false }) === undefined)
-        return null;
-    }
-    if (error61 instanceof SkillSelectionError)
-      throw error61;
-    throw refusal();
-  } finally {
-    if (descriptor !== undefined)
-      closeSync8(descriptor);
-  }
-}
-function readManagedSkillPolicy(dataDir2 = getDataDirReadOnly()) {
-  return readManagedSkillPolicySnapshot(dataDir2)?.value ?? null;
-}
-function requiresCliSkillLoading(dataDir2 = getDataDirReadOnly()) {
-  return readManagedSkillPolicy(dataDir2)?.loading === "cli";
-}
-var init_managed_policy = __esm(() => {
-  init_config();
-  init_selection_cache();
-  init_agent_policy_limits();
-});
-
-// src/lib/agent-bridge.ts
-import { createHash as createHash8 } from "crypto";
-var CLI_BRIDGE_VERSION = 1, markdown = `---
-name: skills-cli
-description: Discover, load, author, and run versioned skills through the Skills CLI when a task needs reusable instructions or an executable skill.
----
-
-Use the Skills CLI as the skill authority for this station.
-
-- Discover available skills with \`skills list --json\` or \`skills search <query> --json\`.
-- Read selected instructions with \`skills load <slug>\`. Use \`skills sync\` to refresh the station's shared selection profile.
-- Create local drafts with \`skills new <name> --kind instruction\` or \`--kind executable\` in the Skills-owned source directory. Validate with \`skills validate <name>\`; use \`skills push --help\` for explicit versioned publication.
-- Run a skill only when the user's task calls for execution. Use \`skills run --help\` and select the intended local or cloud target explicitly.
-
-This bridge contains no skill payloads. Do not copy skill content into agent-native skill directories or load other native skill copies. If a Skills command refuses authority, selection, integrity, or native drift, report that refusal and use its repair guidance; do not substitute bundled or stale local content. Explicit local draft authoring remains available.
-`, CLI_BRIDGE_DIGEST, CLI_BRIDGE_FILES;
-var init_agent_bridge = __esm(() => {
-  CLI_BRIDGE_DIGEST = createHash8("sha256").update(markdown).digest("hex");
-  CLI_BRIDGE_FILES = Object.freeze({
-    "SKILL.md": markdown,
-    ".hasna-skills.json": `${JSON.stringify({ managedBy: "@hasna/skills", kind: "cli-bridge", version: CLI_BRIDGE_VERSION, protocol: "selection-v1", contentSha256: CLI_BRIDGE_DIGEST }, null, 2)}
-`
-  });
-});
-
-// src/lib/agent-codex.ts
-var init_agent_codex = () => {};
-
 // src/lib/claude-settings-witness.ts
-import { createHash as createHash9 } from "crypto";
-import { closeSync as closeSync9, constants as constants6, fstatSync as fstatSync9, lstatSync as lstatSync11, openSync as openSync9, readSync as readSync5 } from "fs";
+import { createHash as createHash8 } from "crypto";
+import { closeSync as closeSync8, constants as constants5, fstatSync as fstatSync8, lstatSync as lstatSync10, openSync as openSync8, readSync as readSync4 } from "fs";
 import { basename as basename4, dirname as dirname9, isAbsolute as isAbsolute8, resolve as resolve8 } from "path";
 function need2(value, reason) {
   if (!value)
@@ -47288,36 +47214,36 @@ function absolutePath(value) {
 function parents(path) {
   const result = [];
   for (let at = dirname9(path);; at = dirname9(at)) {
-    const stat = lstatSync11(at, { bigint: true });
+    const stat = lstatSync10(at, { bigint: true });
     need2(stat.isDirectory() && !stat.isSymbolicLink(), "path traverses a symlink or non-directory");
     result.push([at, stat]);
     if (at === dirname9(at))
       return result;
   }
 }
-function readSettings(path, budget) {
+function readNativeSettingsWitnessFile(path, budget, filename = "settings.json") {
   absolutePath(path);
-  need2(basename4(path) === "settings.json", "requires settings.json");
+  need2(basename4(path) === filename, `requires ${filename}`);
   need2(Number.isSafeInteger(budget.remaining) && budget.remaining >= 0, "has an invalid byte budget");
-  const ancestors = parents(path), initial = lstatSync11(path, { bigint: true });
+  const ancestors = parents(path), initial = lstatSync10(path, { bigint: true });
   need2(initial.isFile() && !initial.isSymbolicLink() && initial.size <= BigInt(CLAUDE_SETTINGS_WITNESS_LIMITS.bytes), "is not a bounded regular file");
   need2(initial.size <= BigInt(budget.remaining), "exceeds its aggregate byte limit");
-  const fd = openSync9(path, constants6.O_RDONLY | constants6.O_NOFOLLOW | constants6.O_NONBLOCK);
+  const fd = openSync8(path, constants5.O_RDONLY | constants5.O_NOFOLLOW | constants5.O_NONBLOCK);
   try {
-    const opened = fstatSync9(fd, { bigint: true });
+    const opened = fstatSync8(fd, { bigint: true });
     need2(opened.isFile() && sameFile(initial, opened), "changed during open");
     const bytes = Buffer.alloc(Number(opened.size) + 1);
     let length = 0;
     while (length < bytes.length) {
-      const count = readSync5(fd, bytes, length, bytes.length - length, null);
+      const count = readSync4(fd, bytes, length, bytes.length - length, null);
       if (!count)
         break;
       length += count;
     }
-    const after = fstatSync9(fd, { bigint: true }), current = lstatSync11(path, { bigint: true });
+    const after = fstatSync8(fd, { bigint: true }), current = lstatSync10(path, { bigint: true });
     need2(current.isFile() && sameFile(opened, after) && sameFile(after, current) && BigInt(length) === opened.size, "changed during read");
     for (const [ancestor, before] of ancestors) {
-      const now = lstatSync11(ancestor, { bigint: true });
+      const now = lstatSync10(ancestor, { bigint: true });
       need2(now.isDirectory() && before.dev === now.dev && before.ino === now.ino && before.mode === now.mode, "parent changed during read");
     }
     budget.remaining -= length;
@@ -47327,7 +47253,7 @@ function readSettings(path, budget) {
       throw new Error("Claude settings witness is not strict UTF-8");
     }
   } finally {
-    closeSync9(fd);
+    closeSync8(fd);
   }
 }
 function parse8(text2) {
@@ -47451,7 +47377,7 @@ function settingsDigest(text2, version2 = 1) {
     }
     return true;
   });
-  return createHash9("sha256").update(`hasna.skills.claude-settings.v${version2}\x00`).update(JSON.stringify(canonical2(value))).digest("hex");
+  return createHash8("sha256").update(`hasna.skills.claude-settings.v${version2}\x00`).update(JSON.stringify(canonical2(value))).digest("hex");
 }
 function hashClaudeSettingsReplacement(text2, budget) {
   need2(typeof text2 === "string", "requires settings text");
@@ -47461,10 +47387,10 @@ function hashClaudeSettingsReplacement(text2, budget) {
   return settingsDigest(text2);
 }
 function captureClaudeSettings(path, budget = { remaining: 256 * 1024 * 1024 }) {
-  return { path, hashMode: "claude-settings-v1", sha256: settingsDigest(readSettings(path, budget)) };
+  return { path, hashMode: "claude-settings-v1", sha256: settingsDigest(readNativeSettingsWitnessFile(path, budget)) };
 }
 function captureClaudeSettingsV2(path, budget = { remaining: 256 * 1024 * 1024 }) {
-  return { path, hashMode: "claude-settings-v2", sha256: settingsDigest(readSettings(path, budget), 2) };
+  return { path, hashMode: "claude-settings-v2", sha256: settingsDigest(readNativeSettingsWitnessFile(path, budget), 2) };
 }
 function hashClaudeSettingsReplacementV2(text2, budget) {
   need2(typeof text2 === "string", "requires settings text");
@@ -47474,7 +47400,7 @@ function hashClaudeSettingsReplacementV2(text2, budget) {
   return settingsDigest(text2, 2);
 }
 function captureClaudeSettingsV3(path, budget = { remaining: 256 * 1024 * 1024 }) {
-  return { path, hashMode: "claude-settings-v3", sha256: settingsDigest(readSettings(path, budget), 3) };
+  return { path, hashMode: "claude-settings-v3", sha256: settingsDigest(readNativeSettingsWitnessFile(path, budget), 3) };
 }
 function hashClaudeSettingsReplacementV3(text2, budget) {
   need2(typeof text2 === "string", "requires settings text");
@@ -47540,8 +47466,233 @@ var init_claude_settings_witness = __esm(() => {
   PERSISTED_EFFORT_LEVELS = new Set(["low", "medium", "high", "xhigh"]);
 });
 
+// src/lib/codex-hook-rpc.ts
+var init_codex_hook_rpc = () => {};
+
+// src/lib/codex-native-skill-catalog.ts
+var SUPPORTED_NAME_CONTROL_VERSIONS;
+var init_codex_native_skill_catalog = __esm(() => {
+  init_codex_hook_rpc();
+  SUPPORTED_NAME_CONTROL_VERSIONS = new Set(["codex-cli 0.159.2"]);
+});
+
+// src/lib/codex-plugin-skill-controls.ts
+var init_codex_plugin_skill_controls = __esm(() => {
+  init_claude_settings_witness();
+  init_codex_native_skill_catalog();
+});
+
+// src/lib/codex-settings-witness.ts
+import { createHash as createHash9 } from "crypto";
+function need3(value) {
+  if (!value)
+    throw new Error("Invalid Codex settings witness");
+}
+function numericTokens(text2) {
+  const result = [];
+  for (let at = 0;at < text2.length; ) {
+    const char = text2[at];
+    if (char === "#") {
+      while (at < text2.length && text2[at] !== `
+`)
+        at++;
+      continue;
+    }
+    if (char === '"' || char === "'") {
+      const quote = char, triple = text2.slice(at, at + 3) === quote.repeat(3);
+      at += triple ? 3 : 1;
+      while (at < text2.length) {
+        if (quote === '"' && text2[at] === "\\") {
+          at += 2;
+          continue;
+        }
+        if (text2.slice(at, at + (triple ? 3 : 1)) === quote.repeat(triple ? 3 : 1)) {
+          at += triple ? 3 : 1;
+          break;
+        }
+        at++;
+      }
+      continue;
+    }
+    if (/[0-9+-]/.test(char)) {
+      const start = at;
+      while (at < text2.length && !/[\s,\]{}#=]/.test(text2[at]))
+        at++;
+      if (at > start) {
+        result.push(text2.slice(start, at));
+        continue;
+      }
+    }
+    at++;
+  }
+  return result;
+}
+function canonical3(value, depth = 0, budget = { remaining: 65536 }) {
+  need3(depth <= 32 && --budget.remaining >= 0);
+  if (value === null)
+    return ["null"];
+  if (typeof value === "string")
+    return ["string", value];
+  if (typeof value === "boolean")
+    return ["boolean", value];
+  if (typeof value === "number") {
+    need3(Number.isFinite(value));
+    return ["number", String(value)];
+  }
+  if (value instanceof Date) {
+    need3(Number.isFinite(value.getTime()));
+    return ["date", value.toISOString()];
+  }
+  if (Array.isArray(value))
+    return ["array", value.map((child) => canonical3(child, depth + 1, budget))];
+  need3(value && typeof value === "object");
+  return ["object", Object.entries(value).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([key, child]) => [key, canonical3(child, depth + 1, budget)])];
+}
+function hashCodexSettingsReplacement(text2, budget = { remaining: 256 * 1024 * 1024 }) {
+  need3(Buffer.byteLength(text2) <= 1024 * 1024 && budget.remaining >= Buffer.byteLength(text2));
+  budget.remaining -= Buffer.byteLength(text2);
+  let config2;
+  try {
+    config2 = Bun.TOML.parse(text2);
+  } catch {
+    throw new Error("Invalid Codex settings witness");
+  }
+  need3(config2 && typeof config2 === "object" && !Array.isArray(config2));
+  if (Object.hasOwn(config2, "model")) {
+    need3(typeof config2.model === "string" && /^[A-Za-z0-9][A-Za-z0-9._:/-]{0,127}$/.test(config2.model));
+    delete config2.model;
+  }
+  for (const [key, values] of [["model_reasoning_effort", EFFORT], ["model_verbosity", VERBOSITY]])
+    if (Object.hasOwn(config2, key)) {
+      need3(typeof config2[key] === "string" && values.has(config2[key]));
+      delete config2[key];
+    }
+  return sha(`hasna.skills.codex-settings.v1\x00${JSON.stringify([canonical3(config2), numericTokens(text2)])}`);
+}
+function captureCodexSettings(path, budget = { remaining: 256 * 1024 * 1024 }) {
+  const text2 = readNativeSettingsWitnessFile(path, budget, "config.toml");
+  return { path, hashMode: "codex-settings-v1", sha256: hashCodexSettingsReplacement(text2) };
+}
+var sha = (text2) => createHash9("sha256").update(text2).digest("hex"), EFFORT, VERBOSITY;
+var init_codex_settings_witness = __esm(() => {
+  init_claude_settings_witness();
+  EFFORT = new Set(["none", "minimal", "low", "medium", "high", "xhigh"]);
+  VERBOSITY = new Set(["low", "medium", "high"]);
+});
+
+// src/lib/managed-policy.ts
+import { closeSync as closeSync9, constants as constants6, fstatSync as fstatSync9, lstatSync as lstatSync11, openSync as openSync9, readSync as readSync5 } from "fs";
+import { join as join16 } from "path";
+function refusal(reason = "is unreadable") {
+  return new SkillSelectionError("INVALID_AGENT_POLICY", `The Skills agent loading policy ${reason}; refusing legacy fallback.`);
+}
+function parseManagedSkillPolicy(text2) {
+  if (Buffer.byteLength(text2) > AGENT_POLICY_LIMITS.bytes)
+    throw refusal("exceeds its size limit");
+  let value;
+  try {
+    value = JSON.parse(text2);
+  } catch {
+    throw refusal();
+  }
+  if (!value || typeof value !== "object" || Array.isArray(value) || value.loading !== "cli" || value.version !== undefined && value.version !== 1)
+    throw refusal();
+  if (value.profileId !== undefined && (typeof value.profileId !== "string" || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(value.profileId) || value.profileId.includes("..")))
+    throw refusal();
+  try {
+    assertAgentPolicyCollections(value);
+  } catch {
+    throw refusal("has invalid collection bounds");
+  }
+  return value;
+}
+function readManagedSkillPolicySnapshot(dataDir2 = getDataDirReadOnly()) {
+  const path = join16(dataDir2, "agent-policy.json");
+  let descriptor, observed = false;
+  try {
+    const stat = lstatSync11(path);
+    observed = true;
+    if (!stat.isFile() || stat.isSymbolicLink())
+      throw refusal();
+    if (stat.size > AGENT_POLICY_LIMITS.bytes)
+      throw refusal("exceeds its size limit");
+    descriptor = openSync9(path, constants6.O_RDONLY | (constants6.O_NOFOLLOW ?? 0) | constants6.O_NONBLOCK);
+    const opened = fstatSync9(descriptor);
+    if (!opened.isFile())
+      throw refusal();
+    if (opened.size > AGENT_POLICY_LIMITS.bytes)
+      throw refusal("exceeds its size limit");
+    const bytes = Buffer.allocUnsafe(AGENT_POLICY_LIMITS.bytes + 1);
+    let length = 0;
+    while (length < bytes.length) {
+      const count = readSync5(descriptor, bytes, length, bytes.length - length, null);
+      if (count === 0)
+        break;
+      length += count;
+    }
+    if (length > AGENT_POLICY_LIMITS.bytes)
+      throw refusal("exceeds its size limit");
+    const text2 = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(bytes.subarray(0, length));
+    return { text: text2, value: parseManagedSkillPolicy(text2) };
+  } catch (error61) {
+    if (error61.code === "ENOENT" && !observed) {
+      if (lstatSync11(path, { throwIfNoEntry: false }) === undefined)
+        return null;
+    }
+    if (error61 instanceof SkillSelectionError)
+      throw error61;
+    throw refusal();
+  } finally {
+    if (descriptor !== undefined)
+      closeSync9(descriptor);
+  }
+}
+function readManagedSkillPolicy(dataDir2 = getDataDirReadOnly()) {
+  return readManagedSkillPolicySnapshot(dataDir2)?.value ?? null;
+}
+function requiresCliSkillLoading(dataDir2 = getDataDirReadOnly()) {
+  return readManagedSkillPolicy(dataDir2)?.loading === "cli";
+}
+var init_managed_policy = __esm(() => {
+  init_config();
+  init_selection_cache();
+  init_agent_policy_limits();
+});
+
+// src/lib/agent-bridge.ts
+import { createHash as createHash10 } from "crypto";
+var CLI_BRIDGE_VERSION = 1, markdown = `---
+name: skills-cli
+description: Discover, load, author, and run versioned skills through the Skills CLI when a task needs reusable instructions or an executable skill.
+---
+
+Use the Skills CLI as the skill authority for this station.
+
+- Discover available skills with \`skills list --json\` or \`skills search <query> --json\`.
+- Read selected instructions with \`skills load <slug>\`. Use \`skills sync\` to refresh the station's shared selection profile.
+- Create local drafts with \`skills new <name> --kind instruction\` or \`--kind executable\` in the Skills-owned source directory. Validate with \`skills validate <name>\`; use \`skills push --help\` for explicit versioned publication.
+- Run a skill only when the user's task calls for execution. Use \`skills run --help\` and select the intended local or cloud target explicitly.
+
+This bridge contains no skill payloads. Do not copy skill content into agent-native skill directories or load other native skill copies. If a Skills command refuses authority, selection, integrity, or native drift, report that refusal and use its repair guidance; do not substitute bundled or stale local content. Explicit local draft authoring remains available.
+`, CLI_BRIDGE_DIGEST, CLI_BRIDGE_FILES;
+var init_agent_bridge = __esm(() => {
+  CLI_BRIDGE_DIGEST = createHash10("sha256").update(markdown).digest("hex");
+  CLI_BRIDGE_FILES = Object.freeze({
+    "SKILL.md": markdown,
+    ".hasna-skills.json": `${JSON.stringify({ managedBy: "@hasna/skills", kind: "cli-bridge", version: CLI_BRIDGE_VERSION, protocol: "selection-v1", contentSha256: CLI_BRIDGE_DIGEST }, null, 2)}
+`
+  });
+});
+
+// src/lib/agent-codex.ts
+var init_agent_codex = () => {};
+
 // src/lib/agent-integration.ts
 var init_agent_integration = __esm(() => {
+  init_codex_plugin_skill_controls();
+  init_codex_native_skill_catalog();
+  init_codex_settings_witness();
+  init_claude_settings_witness();
   init_native_discovery_roots();
   init_config();
   init_managed_policy();
@@ -48219,7 +48370,7 @@ var init_selection_resolver = __esm(() => {
 });
 
 // src/lib/plugin-projection.ts
-import { createHash as createHash10 } from "crypto";
+import { createHash as createHash11 } from "crypto";
 function pluginRefusal(message) {
   throw new SkillSelectionError("PLUGIN_ADMISSION_REFUSED", message);
 }
@@ -48282,7 +48433,7 @@ function validatePluginManifest(value) {
     pluginNeed(item.kind === "skill" || item.kind === "command", "Unknown plugin payload kind");
     pluginDigest(item.sourceDigest);
     pluginKeys(item.target, ["slug", "version", "bundleDigest"]);
-    validateSelection2({ ...item.target, authority: "https://example.com/skills/v1", workspaceId: "validation", profileRevision: "validation" });
+    validateSelection({ ...item.target, authority: "https://example.com/skills/v1", workspaceId: "validation", profileRevision: "validation" });
   }
 }
 function pluginFileWitnesses(entries) {
@@ -48297,7 +48448,7 @@ function pluginFileWitnesses(entries) {
     return { path: item.path, mode: item.mode, size: item.bytes.byteLength, sha256: pluginHash(item.bytes) };
   });
 }
-var PLUGIN_PROJECTION_LIMITS, pluginHash = (bytes) => createHash10("sha256").update(bytes).digest("hex");
+var PLUGIN_PROJECTION_LIMITS, pluginHash = (bytes) => createHash11("sha256").update(bytes).digest("hex");
 var init_plugin_projection = __esm(() => {
   init_selection_cache();
   PLUGIN_PROJECTION_LIMITS = Object.freeze({ files: 1024, bytes: 64 * 1024 * 1024, fileBytes: 16 * 1024 * 1024, metadataBytes: 512 * 1024, registrations: 64, history: 128 });
@@ -48315,7 +48466,7 @@ function stat(path) {
     return pluginRefusal("Cannot inspect plugin filesystem entry");
   }
 }
-function canonical3(path) {
+function canonical4(path) {
   pluginNeed(typeof path === "string" && path.length <= 8192 && isAbsolute9(path) && resolve9(path) === path && !/[\x00-\x1f\x7f]/.test(path), "Plugin storage paths must be canonical absolute paths");
 }
 function owner(stats, system = false) {
@@ -48326,7 +48477,7 @@ function same3(left, right, identityOnly = false) {
   pluginNeed(right && left.dev === right.dev && left.ino === right.ino && left.mode === right.mode && left.uid === right.uid && left.gid === right.gid && (identityOnly || left.size === right.size && left.nlink === right.nlink && left.mtimeNs === right.mtimeNs && left.ctimeNs === right.ctimeNs), "Plugin filesystem entry changed during access");
 }
 function ancestors(path, create = false) {
-  canonical3(path);
+  canonical4(path);
   const result = [], parent = dirname10(path), filesystemRoot = parse9(parent).root;
   let current = filesystemRoot;
   for (const segment of ["", ...parent.slice(filesystemRoot.length).split("/").filter(Boolean)]) {
@@ -48617,11 +48768,11 @@ function validateBinding(value) {
   for (const key of ["authority", "workspaceId", "profileId", "bundleSlug"])
     pluginText(value[key]);
   pluginNeed(value.principal.accountId === value.workspaceId, "Plugin principal account differs from its workspace");
-  validateSelection2({ slug: value.bundleSlug, version: "1.0.0", bundleDigest: `sha256:${"0".repeat(64)}`, authority: value.authority, workspaceId: value.workspaceId, profileRevision: "validation" });
+  validateSelection({ slug: value.bundleSlug, version: "1.0.0", bundleDigest: `sha256:${"0".repeat(64)}`, authority: value.authority, workspaceId: value.workspaceId, profileRevision: "validation" });
 }
 function validateObservedSelection(value) {
   pluginKeys(value, ["slug", "version", "bundleDigest", "aliases", "triggers", "authority", "workspaceId", "profileRevision"]);
-  validateSelection2(value);
+  validateSelection(value);
   if (value.triggers !== undefined) {
     pluginKeys(value.triggers, ["keywords", "paths", "always"]);
     pluginNeed(value.triggers.always === undefined || typeof value.triggers.always === "boolean", "Invalid plugin selection trigger");
@@ -48904,21 +49055,21 @@ var init_plugin_discovery = __esm(() => {
 });
 
 // src/lib/claude-marketplace-registry.ts
-import { createHash as createHash11 } from "crypto";
+import { createHash as createHash12 } from "crypto";
 import { closeSync as closeSync12, constants as constants9, fstatSync as fstatSync12, lstatSync as lstatSync14, openSync as openSync12, readSync as readSync8 } from "fs";
 import { basename as basename6, dirname as dirname12, isAbsolute as isAbsolute12, resolve as resolve12 } from "path";
-function need3(value, reason) {
+function need4(value, reason) {
   if (!value)
     throw new Error(`Claude marketplace registry ${reason}`);
 }
 function absolutePath2(value) {
-  need3(typeof value === "string" && value.length > 0 && value.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.pathCharacters && !/[\x00-\x1f\x7f]/.test(value) && isAbsolute12(value) && resolve12(value) === value, "requires a normalized absolute path");
+  need4(typeof value === "string" && value.length > 0 && value.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.pathCharacters && !/[\x00-\x1f\x7f]/.test(value) && isAbsolute12(value) && resolve12(value) === value, "requires a normalized absolute path");
 }
 function parents2(path) {
   const result = [];
   for (let at = dirname12(path);; at = dirname12(at)) {
     const stat2 = lstatSync14(at, { bigint: true });
-    need3(stat2.isDirectory() && !stat2.isSymbolicLink(), "path traverses a symlink or non-directory");
+    need4(stat2.isDirectory() && !stat2.isSymbolicLink(), "path traverses a symlink or non-directory");
     result.push([at, stat2]);
     if (at === dirname12(at))
       return result;
@@ -48926,15 +49077,15 @@ function parents2(path) {
 }
 function readRegistry2(path, budget) {
   absolutePath2(path);
-  need3(basename6(path) === "known_marketplaces.json", "requires known_marketplaces.json");
-  need3(Number.isSafeInteger(budget.remaining) && budget.remaining >= 0, "has an invalid byte budget");
+  need4(basename6(path) === "known_marketplaces.json", "requires known_marketplaces.json");
+  need4(Number.isSafeInteger(budget.remaining) && budget.remaining >= 0, "has an invalid byte budget");
   const ancestors2 = parents2(path), initial = lstatSync14(path, { bigint: true });
-  need3(initial.isFile() && !initial.isSymbolicLink() && initial.size <= BigInt(CLAUDE_MARKETPLACE_REGISTRY_LIMITS.bytes), "is not a bounded regular file");
-  need3(initial.size <= BigInt(budget.remaining), "exceeds its aggregate byte limit");
+  need4(initial.isFile() && !initial.isSymbolicLink() && initial.size <= BigInt(CLAUDE_MARKETPLACE_REGISTRY_LIMITS.bytes), "is not a bounded regular file");
+  need4(initial.size <= BigInt(budget.remaining), "exceeds its aggregate byte limit");
   const fd = openSync12(path, constants9.O_RDONLY | constants9.O_NOFOLLOW | constants9.O_NONBLOCK);
   try {
     const opened = fstatSync12(fd, { bigint: true });
-    need3(opened.isFile() && sameFile2(initial, opened), "changed during open");
+    need4(opened.isFile() && sameFile2(initial, opened), "changed during open");
     const bytes = Buffer.alloc(Number(opened.size) + 1);
     let length = 0;
     while (length < bytes.length) {
@@ -48944,10 +49095,10 @@ function readRegistry2(path, budget) {
       length += count;
     }
     const after = fstatSync12(fd, { bigint: true }), current = lstatSync14(path, { bigint: true });
-    need3(current.isFile() && sameFile2(opened, after) && sameFile2(after, current) && BigInt(length) === opened.size, "changed during read");
+    need4(current.isFile() && sameFile2(opened, after) && sameFile2(after, current) && BigInt(length) === opened.size, "changed during read");
     for (const [ancestor, before] of ancestors2) {
       const now = lstatSync14(ancestor, { bigint: true });
-      need3(now.isDirectory() && before.dev === now.dev && before.ino === now.ino && before.mode === now.mode, "parent changed during read");
+      need4(now.isDirectory() && before.dev === now.dev && before.ino === now.ino && before.mode === now.mode, "parent changed during read");
     }
     budget.remaining -= length;
     try {
@@ -48967,7 +49118,7 @@ function parse10(text2) {
       at++;
   };
   function string5() {
-    need3(text2[at] === '"', "contains invalid JSON");
+    need4(text2[at] === '"', "contains invalid JSON");
     const start = at++;
     while (at < text2.length) {
       const character = text2[at++];
@@ -48978,7 +49129,7 @@ function parse10(text2) {
         } catch {
           throw new Error("Claude marketplace registry contains invalid JSON string");
         }
-        need3(value2.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.stringCharacters, "exceeds its string limit");
+        need4(value2.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.stringCharacters, "exceeds its string limit");
         return value2;
       }
       if (character === "\\")
@@ -48987,7 +49138,7 @@ function parse10(text2) {
     throw new Error("Claude marketplace registry contains an unterminated JSON string");
   }
   function value(depth) {
-    need3(depth <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.depth && ++nodes <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.nodes, "exceeds its nesting or node limit");
+    need4(depth <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.depth && ++nodes <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.nodes, "exceeds its nesting or node limit");
     space();
     const character = text2[at];
     if (character === '"')
@@ -49001,17 +49152,17 @@ function parse10(text2) {
           if (object7) {
             space();
             const key = string5();
-            need3(!keys.has(key), "contains a duplicate JSON key");
+            need4(!keys.has(key), "contains a duplicate JSON key");
             keys.add(key);
             space();
-            need3(text2[at++] === ":", "contains invalid JSON");
+            need4(text2[at++] === ":", "contains invalid JSON");
             entries.push([key, value(depth + 1)]);
           } else
             items.push(value(depth + 1));
           space();
           if (text2[at] === end)
             break;
-          need3(text2[at++] === ",", "contains invalid JSON");
+          need4(text2[at++] === ",", "contains invalid JSON");
         }
       at++;
       return object7 ? { kind: "object", entries } : { kind: "array", items };
@@ -49023,21 +49174,21 @@ function parse10(text2) {
       }
     numberPattern.lastIndex = at;
     const number5 = numberPattern.exec(text2);
-    need3(number5, "contains invalid JSON");
+    need4(number5, "contains invalid JSON");
     at += number5[0].length;
     return { kind: "number", value: number5[0] };
   }
   const root = value(0);
   space();
-  need3(at === text2.length && root.kind === "object", "requires a JSON object without trailing content");
-  need3(root.entries.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.rows, "exceeds its marketplace row limit");
+  need4(at === text2.length && root.kind === "object", "requires a JSON object without trailing content");
+  need4(root.entries.length <= CLAUDE_MARKETPLACE_REGISTRY_LIMITS.rows, "exceeds its marketplace row limit");
   return root;
 }
 function exactKeys(value, keys) {
   return value?.kind === "object" && value.entries.length === keys.length && value.entries.every(([key]) => keys.includes(key));
 }
 function textField(value) {
-  need3(value?.kind === "string" && value.value.length > 0 && !/[\x00-\x1f\x7f]/.test(value.value), "contains an invalid recognized field");
+  need4(value?.kind === "string" && value.value.length > 0 && !/[\x00-\x1f\x7f]/.test(value.value), "contains an invalid recognized field");
   return value.value;
 }
 function normalizeRow(row, version2 = 1) {
@@ -49045,7 +49196,7 @@ function normalizeRow(row, version2 = 1) {
     if (version2 !== 2 || !exactKeys(row, ["source", "installLocation", "lastUpdated", "autoUpdate"]))
       return;
     const autoUpdate = field(row, "autoUpdate");
-    need3(autoUpdate?.kind === "literal" && (autoUpdate.value === "true" || autoUpdate.value === "false"), "contains an invalid automatic-update preference");
+    need4(autoUpdate?.kind === "literal" && (autoUpdate.value === "true" || autoUpdate.value === "false"), "contains an invalid automatic-update preference");
   }
   const source = field(row, "source");
   if (source?.kind !== "object")
@@ -49061,23 +49212,23 @@ function normalizeRow(row, version2 = 1) {
     absolutePath2(sourceLocation);
   absolutePath2(textField(field(row, "installLocation")));
   const updated = textField(field(row, "lastUpdated"));
-  need3(/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(updated), "contains an invalid recognized update timestamp");
+  need4(/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(updated), "contains an invalid recognized update timestamp");
   const millis = Date.parse(updated);
-  need3(Number.isFinite(millis) && new Date(millis).toISOString() === updated, "contains an invalid recognized update timestamp");
+  need4(Number.isFinite(millis) && new Date(millis).toISOString() === updated, "contains an invalid recognized update timestamp");
   row.entries = row.entries.map(([key, value]) => [key, key === "lastUpdated" ? { kind: "validated-update-time" } : value]);
 }
 function captureClaudeMarketplaceRegistry(path, budget = { remaining: 256 * 1024 * 1024 }) {
   const value = parse10(readRegistry2(path, budget));
   for (const [, row] of value.entries)
     normalizeRow(row);
-  const sha2562 = createHash11("sha256").update("hasna.skills.claude-marketplace-registry.v1\x00").update(JSON.stringify(value)).digest("hex");
+  const sha2562 = createHash12("sha256").update("hasna.skills.claude-marketplace-registry.v1\x00").update(JSON.stringify(value)).digest("hex");
   return { path, hashMode: "claude-marketplace-registry", sha256: sha2562 };
 }
 function captureClaudeMarketplaceRegistryV2(path, budget = { remaining: 256 * 1024 * 1024 }) {
   const value = parse10(readRegistry2(path, budget));
   for (const [, row] of value.entries)
     normalizeRow(row, 2);
-  const sha2562 = createHash11("sha256").update("hasna.skills.claude-marketplace-registry.v2\x00").update(JSON.stringify(value)).digest("hex");
+  const sha2562 = createHash12("sha256").update("hasna.skills.claude-marketplace-registry.v2\x00").update(JSON.stringify(value)).digest("hex");
   return { path, hashMode: "claude-marketplace-registry-v2", sha256: sha2562 };
 }
 var CLAUDE_MARKETPLACE_REGISTRY_LIMITS, sameFile2 = (a, b) => a.dev === b.dev && a.ino === b.ino && a.mode === b.mode && a.uid === b.uid && a.gid === b.gid && a.nlink === b.nlink && a.size === b.size && a.mtimeNs === b.mtimeNs && a.ctimeNs === b.ctimeNs, field = (object7, key) => object7.entries.find(([name]) => name === key)?.[1];
@@ -49087,17 +49238,17 @@ var init_claude_marketplace_registry = __esm(() => {
 
 // src/lib/codex-hook-trust-files.ts
 import { closeSync as closeSync13, constants as constants10, fstatSync as fstatSync13, fsyncSync as fsyncSync3, lstatSync as lstatSync15, openSync as openSync13, readSync as readSync9, writeFileSync as writeFileSync5 } from "fs";
-import { createHash as createHash12 } from "crypto";
+import { createHash as createHash13 } from "crypto";
 import { dirname as dirname13 } from "path";
-function need4(value, code) {
+function need5(value, code) {
   if (!value)
     throw new Error(`CODEX_HOOK_TRUST_${code}`);
 }
 function safeParents(file2) {
   for (let p = dirname13(file2);; p = dirname13(p)) {
     const s = lstatSync15(p);
-    need4(s.isDirectory() && !s.isSymbolicLink(), "UNSAFE_PARENT");
-    need4((s.mode & 18) === 0 || s.uid === 0 && (s.mode & 512) !== 0, "UNSAFE_PARENT");
+    need5(s.isDirectory() && !s.isSymbolicLink(), "UNSAFE_PARENT");
+    need5((s.mode & 18) === 0 || s.uid === 0 && (s.mode & 512) !== 0, "UNSAFE_PARENT");
     if (dirname13(p) === p)
       break;
   }
@@ -49106,12 +49257,12 @@ function snapshot(file2, privateFile = false, options = {}) {
   const readOnlyPackage = options.readOnlyPackage === true && !privateFile;
   safeParents(file2);
   const initial = lstatSync15(file2, { bigint: true });
-  need4(initial.isFile() && initial.uid === BigInt(process.getuid()) && (initial.nlink === 1n || readOnlyPackage && initial.nlink > 1n) && (initial.mode & 0o022n) === 0n && (!privateFile || (initial.mode & 0o777n) === 0o600n), "UNSAFE_FILE");
-  need4(initial.size <= 8n * 1024n * 1024n, "FILE_BOUND");
+  need5(initial.isFile() && initial.uid === BigInt(process.getuid()) && (initial.nlink === 1n || readOnlyPackage && initial.nlink > 1n) && (initial.mode & 0o022n) === 0n && (!privateFile || (initial.mode & 0o777n) === 0o600n), "UNSAFE_FILE");
+  need5(initial.size <= 8n * 1024n * 1024n, "FILE_BOUND");
   const fd = openSync13(file2, constants10.O_RDONLY | constants10.O_NOFOLLOW | constants10.O_NONBLOCK);
   try {
     const before = fstatSync13(fd, { bigint: true });
-    need4(sameStat(initial, before), "INPUT_CHANGED");
+    need5(sameStat(initial, before), "INPUT_CHANGED");
     const bytes = Buffer.alloc(Number(before.size) + 1);
     let length = 0;
     while (length < bytes.length) {
@@ -49120,16 +49271,16 @@ function snapshot(file2, privateFile = false, options = {}) {
         break;
       length += n2;
     }
-    need4(length === Number(before.size) && sameStat(before, fstatSync13(fd, { bigint: true })) && sameStat(before, lstatSync15(file2, { bigint: true })), "INPUT_CHANGED");
+    need5(length === Number(before.size) && sameStat(before, fstatSync13(fd, { bigint: true })) && sameStat(before, lstatSync15(file2, { bigint: true })), "INPUT_CHANGED");
     const content = bytes.subarray(0, length), text2 = new TextDecoder("utf-8", { fatal: true }).decode(content);
-    return { file: file2, privateFile, readOnlyPackage, text: text2, bytes: content, stat: before, sha256: createHash12("sha256").update(content).digest("hex") };
+    return { file: file2, privateFile, readOnlyPackage, text: text2, bytes: content, stat: before, sha256: createHash13("sha256").update(content).digest("hex") };
   } finally {
     closeSync13(fd);
   }
 }
 function unchanged2(before) {
   const after = snapshot(before.file, before.privateFile, before.readOnlyPackage ? { readOnlyPackage: true } : {});
-  need4(sameStat(before.stat, after.stat) && after.sha256 === before.sha256, "INPUT_CHANGED");
+  need5(sameStat(before.stat, after.stat) && after.sha256 === before.sha256, "INPUT_CHANGED");
 }
 var sameStat = (a, b) => ["dev", "ino", "uid", "nlink", "mode", "size", "mtimeNs", "ctimeNs"].every((key) => a[key] === b[key]);
 var init_codex_hook_trust_files = () => {};
@@ -49148,10 +49299,10 @@ var init_codex_hook_additions_review = __esm(() => {
 });
 
 // src/lib/codex-hook-discovery-recovery.ts
-import { createHash as createHash13 } from "crypto";
+import { createHash as createHash14 } from "crypto";
 function assertCodexHookDiscoveryRecovery(binding, witness) {
   const proof = proofs2.get(witness);
-  need4(!!proof && binding.agent === "codex" && witness.discoverySha256 === sha(JSON.stringify(binding)), "RECONCILE_DISCOVERY_RECOVERY_CHANGED");
+  need5(!!proof && binding.agent === "codex" && witness.discoverySha256 === sha2(JSON.stringify(binding)), "RECONCILE_DISCOVERY_RECOVERY_CHANGED");
   unchanged2(proof.before);
   unchanged2(proof.current);
   proof.recheckAdditions();
@@ -49160,10 +49311,10 @@ function verifiesCodexHookDiscoverySource(binding, source, currentDigest, witnes
   if (!witness || source.path !== witness.configPath || source.hashMode !== "bytes")
     return false;
   assertCodexHookDiscoveryRecovery(binding, witness);
-  need4(source.sha256 === witness.beforeSha256 && currentDigest === witness.currentSha256, "RECONCILE_DISCOVERY_RECOVERY_CHANGED");
+  need5(source.sha256 === witness.beforeSha256 && currentDigest === witness.currentSha256, "RECONCILE_DISCOVERY_RECOVERY_CHANGED");
   return true;
 }
-var sha = (text2) => createHash13("sha256").update(text2).digest("hex"), proofs2;
+var sha2 = (text2) => createHash14("sha256").update(text2).digest("hex"), proofs2;
 var init_codex_hook_discovery_recovery = __esm(() => {
   init_codex_hook_trust_files();
   init_codex_hook_trust_layout();
@@ -49172,7 +49323,7 @@ var init_codex_hook_discovery_recovery = __esm(() => {
 });
 
 // src/lib/agent-discovery.ts
-import { createHash as createHash14 } from "crypto";
+import { createHash as createHash15 } from "crypto";
 import { lstatSync as lstatSync16, readFileSync as readFileSync15, readdirSync as readdirSync6, realpathSync as realpathSync3 } from "fs";
 import { basename as basename7, dirname as dirname14, isAbsolute as isAbsolute13, join as join23, resolve as resolve13, sep as sep4 } from "path";
 import { isDeepStrictEqual as isDeepStrictEqual2 } from "util";
@@ -49208,6 +49359,14 @@ function read(path, changes) {
   return readFileSync15(path, "utf8");
 }
 function projected(source, changes, budget = discoveryByteBudget()) {
+  if (source.hashMode === "codex-settings-v1") {
+    if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || typeof source.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(source.sha256))
+      throw new Error("Codex settings witnesses require exact typed metadata");
+    const current = captureCodexSettings(source.path, budget).sha256;
+    if (current !== source.sha256)
+      throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
+    return changes?.has(source.path) ? hashCodexSettingsReplacement(changes.get(source.path), budget) : current;
+  }
   if (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || source.hashMode === "claude-settings-v3") {
     if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || typeof source.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(source.sha256))
       throw new Error("Claude settings witnesses require exact typed metadata");
@@ -49276,6 +49435,8 @@ function verifyAgentDiscovery(binding, codexRecovery) {
     safe4(root);
 }
 function assertMarketplaceBinding(binding, source) {
+  if (source.hashMode === "codex-settings-v1" && (binding.agent !== "codex" || binding.method !== "reviewed" || basename7(source.path) !== "config.toml"))
+    throw new Error("Codex settings witnesses require explicit reviewed Codex configuration");
   if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || source.hashMode === "claude-settings-v3") && (binding.agent !== "claude" || binding.method !== "reviewed" || basename7(source.path) !== "settings.json"))
     throw new Error("Claude settings witnesses require explicit reviewed Claude configuration");
   if ((source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2") && (binding.agent !== "claude" || binding.method !== "reviewed"))
@@ -49285,10 +49446,10 @@ function agentDiscoveryConfigPath(home, agent) {
   return join23(home, agent === "hermes" ? ".hermes/config.yaml" : agent === "opencode" ? ".config/opencode/opencode.json" : `.${agent}/${agent === "codex" ? "config.toml" : agent === "cursor" ? "hooks.json" : "settings.json"}`);
 }
 function resolveAgentDiscovery(options) {
-  const canonical4 = options.canonical ?? resolve13, home = resolve13(options.home), agent = options.agent;
+  const canonical5 = options.canonical ?? resolve13, home = resolve13(options.home), agent = options.agent;
   const sources = [], roots = new Set, builtinNames = [];
   const witness = (path, format, fields) => {
-    const source = { path: canonical4(path), sha256: null, ...format ? { format, fields } : {} };
+    const source = { path: canonical5(path), sha256: null, ...format ? { format, fields } : {} };
     source.sha256 = projected(source);
     sources.push(source);
     return read(source.path);
@@ -49355,9 +49516,9 @@ function resolveAgentDiscovery(options) {
     if (retained.agent !== agent || retained.method !== "reviewed")
       unresolved("invalid retained review");
     verifyAgentDiscovery(retained);
-    if (!retained.sources.some((source) => source.path === canonical4(configPath) && source.format === undefined && source.fields === undefined))
+    if (!retained.sources.some((source) => source.path === canonical5(configPath) && source.format === undefined && source.fields === undefined))
       unresolved("retained review is missing the full agent configuration source");
-    if (retained.sources.some((source) => (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || source.hashMode === "claude-settings-v3") && source.path !== canonical4(configPath)))
+    if (retained.sources.some((source) => (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "codex-settings-v1")) && source.path !== canonical5(configPath)))
       unresolved("retained settings witness names another configuration source");
     if (sources.some((source) => !retained.sources.some((saved) => isDeepStrictEqual2(saved, source))) || [...roots].some((root) => !retained.roots.includes(root)) || agent === "gemini" && JSON.stringify(retained.builtinNames) !== JSON.stringify(builtinNames))
       unresolved("retained review is missing current runtime discovery coverage");
@@ -49373,14 +49534,14 @@ function resolveAgentDiscovery(options) {
     if (review.sources.some((source) => source.format !== undefined || source.fields !== undefined))
       throw new Error("Explicit discovery reviews require full source-file hashes");
     verifyAgentDiscovery(supplied);
-    if (review.sources.some((source) => (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || source.hashMode === "claude-settings-v3") && source.path !== canonical4(configPath)))
+    if (review.sources.some((source) => (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "codex-settings-v1")) && source.path !== canonical5(configPath)))
       throw new Error("Semantic settings witnesses must name the configured Claude configuration source");
-    if (!review.sources.some((source) => source.path === canonical4(configPath)))
+    if (!review.sources.some((source) => source.path === canonical5(configPath)))
       throw new Error("Discovery review must include the agent configuration source");
     return { ...supplied, roots: [...new Set([...roots, ...supplied.roots])].sort(), sources: [...sources, ...review.sources], ...agent === "gemini" ? { builtinNames } : {} };
   }
   function plugin(root) {
-    root = canonical4(root);
+    root = canonical5(root);
     safe4(root);
     const manifestPath = join23(root, agent === "claude" ? ".claude-plugin/plugin.json" : ".codex-plugin/plugin.json");
     const raw = witness(manifestPath);
@@ -49412,7 +49573,7 @@ function resolveAgentDiscovery(options) {
   if (agent === "claude") {
     const registrations = witness(join23(home, ".claude/plugins/installed_plugins.json"));
     const installed = registrations === null ? {} : parseConfig(registrations, join23(home, ".claude/plugins/installed_plugins.json")).plugins;
-    const commands = canonical4(join23(home, ".claude/commands"));
+    const commands = canonical5(join23(home, ".claude/commands"));
     safe4(commands);
     if (lstatSync16(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync6(commands).length)
       unresolved("legacy home command discovery requires a dedicated format adapter");
@@ -49486,9 +49647,9 @@ function resolveAgentDiscovery(options) {
         roots.add(join23(root, "skills"));
       }
   }
-  return { agent, roots: [...roots].sort(), sources, method: "automatic", ...agent === "gemini" ? { builtinNames } : {}, ...agent === "hermes" ? { directories: captureDiscoveryDirectories([join23(home, ".hermes/plugins"), join23(home, ".hermes/hermes-agent")].map((path) => canonical4(path))) } : {} };
+  return { agent, roots: [...roots].sort(), sources, method: "automatic", ...agent === "gemini" ? { builtinNames } : {}, ...agent === "hermes" ? { directories: captureDiscoveryDirectories([join23(home, ".hermes/plugins"), join23(home, ".hermes/hermes-agent")].map((path) => canonical5(path))) } : {} };
 }
-var digest = (text2) => createHash14("sha256").update(text2).digest("hex");
+var digest = (text2) => createHash15("sha256").update(text2).digest("hex");
 var init_agent_discovery = __esm(() => {
   init_agent_policy_limits();
   init_agent_hermes();
@@ -49500,6 +49661,7 @@ var init_agent_discovery = __esm(() => {
   init_claude_marketplace_registry();
   init_claude_settings_witness();
   init_codex_hook_discovery_recovery();
+  init_codex_settings_witness();
   init_agent_discovery_directories();
 });
 
@@ -50564,7 +50726,7 @@ var init_remote_customer_operations = __esm(() => {
 });
 
 // src/lib/canonical-json.ts
-import { createHash as createHash15 } from "crypto";
+import { createHash as createHash16 } from "crypto";
 function canonicalJson2(value, maximumBytes = 2 * 1024 * 1024) {
   return canonicalJsonAtDepth(value, maximumBytes, 64);
 }
@@ -50608,7 +50770,7 @@ function canonicalJsonAtDepth(value, maximumBytes, maximumDepth) {
   return visit3(value, 0);
 }
 function canonicalJsonSha256(value, maximumBytes) {
-  return createHash15("sha256").update(canonicalJson2(value, maximumBytes)).digest("hex");
+  return createHash16("sha256").update(canonicalJson2(value, maximumBytes)).digest("hex");
 }
 var init_canonical_json = () => {};
 
@@ -52834,7 +52996,7 @@ var init_remote_invitation_recovery = __esm(() => {
 });
 
 // src/lib/remote-private-publications.ts
-import { createHash as createHash16 } from "crypto";
+import { createHash as createHash17 } from "crypto";
 function checkedPublicationDeclaration(value) {
   if (!exact(value, ["idempotencyKey", "version", "expectedCurrentVersionId", "manifestText", "archiveSha256", "archiveByteSize"]) || !publicationUuid(value.idempotencyKey) || !(value.expectedCurrentVersionId === null || publicationUuid(value.expectedCurrentVersionId)) || typeof value.version !== "string" || !value.version || value.version.length > 128 || /[\p{Cc}\p{Cs}]/u.test(value.version) || typeof value.manifestText !== "string" || Buffer.byteLength(value.manifestText) > 16384 || !hash3(value.archiveSha256) || !Number.isSafeInteger(value.archiveByteSize) || Number(value.archiveByteSize) < 1 || Number(value.archiveByteSize) > PRIVATE_PUBLICATION_MAX_BYTES)
     return bad();
@@ -53095,7 +53257,7 @@ var PRIVATE_PUBLICATION_MAX_BYTES, failures2, PrivatePublicationError, bad = ()
   throw new PrivatePublicationError("INVALID_PUBLICATION_INPUT", "Invalid publication input or recovery data.");
 }, invalid4 = () => {
   throw new PrivatePublicationError("INVALID_PUBLICATION_RESPONSE", "The server returned an invalid publication result.");
-}, publicationUuid = (v) => typeof v === "string" && /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(v), hash3 = (v) => typeof v === "string" && /^[a-f0-9]{64}$/.test(v), record9 = (v) => !!v && typeof v === "object" && !Array.isArray(v), exact = (v, keys) => record9(v) && Object.keys(v).sort().join(",") === keys.sort().join(","), date6 = (v) => typeof v === "string" && /^\d{4}-\d\d-\d\dT[0-9:.]+(?:Z|[+-](?:[01]\d|2[0-3]):[0-5]\d)$/.test(v) && Number.isFinite(Date.parse(v)), publicationSha256 = (bytes) => createHash16("sha256").update(bytes).digest("hex");
+}, publicationUuid = (v) => typeof v === "string" && /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(v), hash3 = (v) => typeof v === "string" && /^[a-f0-9]{64}$/.test(v), record9 = (v) => !!v && typeof v === "object" && !Array.isArray(v), exact = (v, keys) => record9(v) && Object.keys(v).sort().join(",") === keys.sort().join(","), date6 = (v) => typeof v === "string" && /^\d{4}-\d\d-\d\dT[0-9:.]+(?:Z|[+-](?:[01]\d|2[0-3]):[0-5]\d)$/.test(v) && Number.isFinite(Date.parse(v)), publicationSha256 = (bytes) => createHash17("sha256").update(bytes).digest("hex");
 var init_remote_private_publications = __esm(() => {
   init_fleet_credentials();
   init_remote_workspace_selection();
@@ -53873,7 +54035,7 @@ async function continueRecurringRecovery(customer, directory, options) {
     throw error61;
   }
 }
-var uuid12, sha2, common, intentSchema, stateSchema, invalid5 = () => {
+var uuid12, sha3, common, intentSchema, stateSchema, invalid5 = () => {
   throw new RecurringCustomerError("RECURRING_RECOVERY_INVALID", "The original recovery directory or record is invalid or changed. Preserve it; do not create a replacement activation automatically.");
 };
 var init_recurring_recovery = __esm(() => {
@@ -53883,7 +54045,7 @@ var init_recurring_recovery = __esm(() => {
   init_remote_recurring();
   init_recurring_customer();
   uuid12 = exports_external.string().regex(/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/);
-  sha2 = exports_external.string().regex(/^[a-f0-9]{64}$/);
+  sha3 = exports_external.string().regex(/^[a-f0-9]{64}$/);
   common = exports_external.object({
     contractVersion: exports_external.literal(1),
     apiOrigin: exports_external.string().min(1).max(4096),
@@ -53896,7 +54058,7 @@ var init_recurring_recovery = __esm(() => {
     common.extend({
       operation: exports_external.literal("activate"),
       draftId: uuid12,
-      termsSha256: sha2,
+      termsSha256: sha3,
       approvalDeadline: exports_external.string().datetime(),
       approval: recurringActivationSchema
     }).strict(),
@@ -53904,7 +54066,7 @@ var init_recurring_recovery = __esm(() => {
   ]);
   stateSchema = exports_external.object({
     contractVersion: exports_external.literal(1),
-    intentSha256: sha2,
+    intentSha256: sha3,
     phase: exports_external.enum(["prepared", "pending", "observed"]),
     consentId: uuid12.nullable()
   }).strict();
@@ -55845,7 +56007,7 @@ var init_credential_state = __esm(() => {
 });
 
 // src/lib/run-state.ts
-import { createHash as createHash17, randomBytes } from "crypto";
+import { createHash as createHash18, randomBytes } from "crypto";
 import { existsSync as existsSync14, mkdirSync as mkdirSync11, readFileSync as readFileSync19, readdirSync as readdirSync9, statSync as statSync9, writeFileSync as writeFileSync10 } from "fs";
 import { extname, join as join29, relative as relative5 } from "path";
 function createSkillRun(params, targetDir = process.cwd()) {
@@ -55960,7 +56122,7 @@ function collectRunArtifacts(context2) {
     artifacts.push({
       path: toProjectRelative(context2.targetDir, path),
       mime: mimeForPath(path),
-      sha256: createHash17("sha256").update(bytes).digest("hex"),
+      sha256: createHash18("sha256").update(bytes).digest("hex"),
       sizeBytes: stat3.size
     });
   }
@@ -57774,7 +57936,7 @@ __export(exports_selected_run, {
   prepareSelectedSecretBindings: () => prepareSelectedSecretBindings,
   executeSelectedLocal: () => executeSelectedLocal
 });
-import { createHash as createHash18 } from "crypto";
+import { createHash as createHash19 } from "crypto";
 import { spawn } from "child_process";
 import { mkdirSync as mkdirSync12, mkdtempSync as mkdtempSync3, writeFileSync as writeFileSync11, realpathSync as realpathSync8 } from "fs";
 import { dirname as dirname19, join as join31, resolve as resolve17 } from "path";
@@ -57900,7 +58062,7 @@ async function executeSelectedLocal(selected, options = {}) {
     selection: selection2,
     target: "local",
     runtime: runtimeName,
-    inputDigest: `sha256:${createHash18("sha256").update(input2).digest("hex")}`,
+    inputDigest: `sha256:${createHash19("sha256").update(input2).digest("hex")}`,
     runDirectory,
     ...executionGrant ? { executionGrant } : {},
     ...bindings ? { secretBinding: { schema: bindings.schema, selection: bindings.selection, consumer: bindings.consumer, secretsAuthority: bindings.secretsAuthority, bindings: bindings.bindings } } : {},
@@ -59128,7 +59290,7 @@ var init_schedule_tools = __esm(() => {
 });
 
 // src/lib/native-storage.ts
-import { createHash as createHash19, createHmac } from "crypto";
+import { createHash as createHash20, createHmac } from "crypto";
 import {
   existsSync as existsSync18,
   mkdirSync as mkdirSync15,
@@ -59205,7 +59367,7 @@ function exportSkillsLocalSnapshot(targetDir = process.cwd(), options = {}) {
       files.push({
         path: relativePath,
         sizeBytes: bytes.byteLength,
-        sha256: createHash19("sha256").update(bytes).digest("hex"),
+        sha256: createHash20("sha256").update(bytes).digest("hex"),
         ...options.includeFileContents ? { contentBase64: Buffer.from(bytes).toString("base64") } : {}
       });
     }