@hasna/skills 0.10.48 → 0.10.50

package/bin/maintenance.js

@@ -1872,6 +1872,24 @@ var require_commander = __commonJS((exports) => {
   exports.InvalidOptionArgumentError = InvalidArgumentError;
 });
 
+// src/lib/launch-cwd.ts
+var LAUNCH_CWD_VARIABLE = "HASNA_SKILLS_LAUNCH_CWD";
+function restoreLaunchCwd(env = process.env) {
+  const requested = env[LAUNCH_CWD_VARIABLE];
+  delete env[LAUNCH_CWD_VARIABLE];
+  if (!requested || !requested.startsWith("/"))
+    return { restored: false, cwd: process.cwd() };
+  try {
+    process.chdir(requested);
+    return { restored: true, cwd: process.cwd() };
+  } catch {
+    return { restored: false, cwd: process.cwd() };
+  }
+}
+
+// src/lib/launch-cwd-apply.ts
+restoreLaunchCwd();
+
 // node_modules/commander/esm.mjs
 var import__ = __toESM(require_commander(), 1);
 var {

package/bin/mcp.js

@@ -20019,7 +20019,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.48",
+    version: "0.10.50",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -38370,7 +38370,9 @@ function inferencePreference(key, child, version2) {
 function settingsDigest(text, version2 = 1) {
   const value = parse6(text);
   value.entries = value.entries.filter(([key, child]) => {
-    if (version2 !== 1 && inferencePreference(key, child, version2))
+    if (version2 === 4 && key === "theme" && child.kind === "string" && BUILTIN_THEMES.has(child.value))
+      return false;
+    if (version2 !== 1 && inferencePreference(key, child, version2 === 4 ? 3 : version2))
       return false;
     if (key === "model") {
       need(child.kind === "string", "contains an invalid model selection");
@@ -38418,6 +38420,16 @@ function hashClaudeSettingsReplacementV3(text, budget) {
   budget.remaining -= bytes;
   return settingsDigest(text, 3);
 }
+function captureClaudeSettingsV4(path, budget = { remaining: 256 * 1024 * 1024 }) {
+  return { path, hashMode: "claude-settings-v4", sha256: settingsDigest(readNativeSettingsWitnessFile(path, budget), 4) };
+}
+function hashClaudeSettingsReplacementV4(text, budget) {
+  need(typeof text === "string", "requires settings text");
+  const bytes = Buffer.byteLength(text);
+  need(bytes <= CLAUDE_SETTINGS_WITNESS_LIMITS.bytes && Number.isSafeInteger(budget.remaining) && budget.remaining >= bytes, "exceeds its byte limit");
+  budget.remaining -= bytes;
+  return settingsDigest(text, 4);
+}
 function hashNativeJsonControls(text, excludedMetadata) {
   need(Buffer.byteLength(text) <= CLAUDE_SETTINGS_WITNESS_LIMITS.bytes, "exceeds its byte limit");
   const value = parse6(text);
@@ -38450,7 +38462,7 @@ function hashSumiNativeJsonControls(text) {
   });
   return createHash2("sha256").update("hasna.skills.sumi-settings.v1\x00").update(JSON.stringify(value)).digest("hex");
 }
-var CLAUDE_SETTINGS_WITNESS_LIMITS, sameFile = (a, b) => a.dev === b.dev && a.ino === b.ino && a.mode === b.mode && a.uid === b.uid && a.gid === b.gid && a.nlink === b.nlink && a.size === b.size && a.mtimeNs === b.mtimeNs && a.ctimeNs === b.ctimeNs, BOOLEAN_PREFERENCES, ENUM_PREFERENCES, BUILTIN_MODEL_SELECTIONS, PERSISTED_EFFORT_LEVELS;
+var CLAUDE_SETTINGS_WITNESS_LIMITS, sameFile = (a, b) => a.dev === b.dev && a.ino === b.ino && a.mode === b.mode && a.uid === b.uid && a.gid === b.gid && a.nlink === b.nlink && a.size === b.size && a.mtimeNs === b.mtimeNs && a.ctimeNs === b.ctimeNs, BOOLEAN_PREFERENCES, ENUM_PREFERENCES, BUILTIN_MODEL_SELECTIONS, CLAUDE_BUILTIN_THEMES, BUILTIN_THEMES, PERSISTED_EFFORT_LEVELS;
 var init_claude_settings_witness = __esm(() => {
   CLAUDE_SETTINGS_WITNESS_LIMITS = Object.freeze({ bytes: 1024 * 1024, rows: 1024, depth: 32, nodes: 65536, stringCharacters: 16384, pathCharacters: 4096 });
   BOOLEAN_PREFERENCES = new Set([
@@ -38504,6 +38516,8 @@ var init_claude_settings_witness = __esm(() => {
     "claude-opus-4-6[1m]",
     "claude-sonnet-4-6[1m]"
   ]);
+  CLAUDE_BUILTIN_THEMES = Object.freeze(["auto", "dark", "light", "dark-daltonized", "light-daltonized", "dark-ansi", "light-ansi"]);
+  BUILTIN_THEMES = new Set(CLAUDE_BUILTIN_THEMES);
   PERSISTED_EFFORT_LEVELS = new Set(["low", "medium", "high", "xhigh"]);
 });
 
@@ -38666,14 +38680,14 @@ function assertAgentPolicyCollections(policy) {
       text(source.path);
       requireBound(source.sha256 === null || typeof source.sha256 === "string" && /^[a-f0-9]{64}$/.test(source.sha256));
       if (source.hashMode !== undefined)
-        requireBound(["bytes", "path-bytes", "claude-plugin-manifest-v1", "claude-plugin-registry", "claude-marketplace-registry", "claude-settings-v1", "claude-settings-v2", "claude-settings-v3", "claude-marketplace-registry-v2", "codex-settings-v1", "codex-settings-v2", "codex-settings-v3", "codex-settings-v4", "sumi-settings-v1"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
+        requireBound(["bytes", "path-bytes", "claude-plugin-manifest-v1", "claude-plugin-registry", "claude-marketplace-registry", "claude-settings-v1", "claude-settings-v2", "claude-settings-v3", "claude-settings-v4", "claude-marketplace-registry-v2", "codex-settings-v1", "codex-settings-v2", "codex-settings-v3", "codex-settings-v4", "sumi-settings-v1"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
       if (source.hashMode === "claude-plugin-manifest-v1")
         requireBound(agent === "claude" && value.agent === "claude" && ["automatic", "reviewed"].includes(value.method) && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute4(source.path) && resolve3(source.path) === source.path && source.path.endsWith(join10(sep3, ".claude-plugin", "plugin.json")) && source.managedPlugins === undefined);
       if (source.hashMode === "sumi-settings-v1")
         requireBound(agent === "sumi" && value.agent === "sumi" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute4(source.path) && resolve3(source.path) === source.path && basename4(source.path) === "sumi.json");
       if (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4"))
         requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute4(source.path) && resolve3(source.path) === source.path && basename4(source.path) === "config.toml");
-      if (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || source.hashMode === "claude-settings-v3")
+      if (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4"))
         requireBound(agent === "claude" && value.agent === "claude" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute4(source.path) && resolve3(source.path) === source.path && basename4(source.path) === "settings.json");
       if (source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2")
         requireBound(agent === "claude" && value.agent === "claude" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute4(source.path) && resolve3(source.path) === source.path && basename4(source.path) === "known_marketplaces.json");
@@ -48869,6 +48883,50 @@ function unchanged2(before) {
 var sameStat = (a, b) => ["dev", "ino", "uid", "nlink", "mode", "size", "mtimeNs", "ctimeNs"].every((key) => a[key] === b[key]);
 var init_codex_hook_trust_files = () => {};
 
+// src/cli/commands/runtime-launcher.ts
+var PINNED_LAUNCHER_BUN_FLAGS, PINNED_LAUNCHER_ENV_NAMES, PINNED_LAUNCHER_ENV_PREFIXES, ENV_PREFIX, ENV_EXACT, COMMAND_LINE, PINNED_LAUNCHER_MAX_BYTES;
+var init_runtime_launcher = __esm(() => {
+  PINNED_LAUNCHER_BUN_FLAGS = ["--config=/dev/null", "--no-env-file", "--no-macros", "--no-install"];
+  PINNED_LAUNCHER_ENV_NAMES = [
+    "HOME",
+    "PATH",
+    "TMPDIR",
+    "TERM",
+    "TERM_PROGRAM",
+    "TERM_PROGRAM_VERSION",
+    "COLORTERM",
+    "LANG",
+    "USER",
+    "LOGNAME",
+    "SHELL",
+    "TZ",
+    "NO_COLOR",
+    "FORCE_COLOR",
+    "CI",
+    "COLUMNS",
+    "LINES",
+    "EDITOR",
+    "VISUAL",
+    "PAGER",
+    "SSH_AUTH_SOCK",
+    "DATABASE_URL",
+    "TERMINAL_CWD",
+    "CODEX_HOME",
+    "HERMES_HOME",
+    "HERMES_ENABLE_PROJECT_PLUGINS",
+    "HOST",
+    "PORT",
+    "NODE_ENV",
+    "AGENT_ID",
+    "ECS_CONTAINER_METADATA_URI_V4"
+  ];
+  PINNED_LAUNCHER_ENV_PREFIXES = ["HASNA", "SKILLS", "SKILL", "MCP", "XDG", "LC", "AWS"];
+  ENV_PREFIX = new RegExp(`^(${PINNED_LAUNCHER_ENV_PREFIXES.join("|")})_`);
+  ENV_EXACT = new Set(PINNED_LAUNCHER_ENV_NAMES);
+  COMMAND_LINE = new RegExp(`^set -- '([^']+)' ${PINNED_LAUNCHER_BUN_FLAGS.join(" ")} '--cwd=([^']+)' '([^']+)' "\\$@"$`, "m");
+  PINNED_LAUNCHER_MAX_BYTES = 16 * 1024;
+});
+
 // src/lib/agent-integration.ts
 var init_agent_integration = __esm(() => {
   init_sumi_settings_witness();
@@ -48889,6 +48947,7 @@ var init_agent_integration = __esm(() => {
   init_agent_hermes();
   init_claude_settings_witness();
   init_codex_hook_trust_files();
+  init_runtime_launcher();
 });
 
 // src/lib/home-migration.ts
@@ -50535,13 +50594,13 @@ function projected(source, changes, budget2 = discoveryByteBudget()) {
       throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
     return changes?.has(source.path) ? (source.hashMode === "codex-settings-v4" ? hashCodexSettingsReplacementV4 : source.hashMode === "codex-settings-v3" ? hashCodexSettingsReplacementV3 : source.hashMode === "codex-settings-v2" ? hashCodexSettingsReplacementV2 : hashCodexSettingsReplacement)(changes.get(source.path), budget2) : current;
   }
-  if (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || source.hashMode === "claude-settings-v3") {
+  if (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4")) {
     if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || typeof source.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(source.sha256))
       throw new Error("Claude settings witnesses require exact typed metadata");
-    const current = (source.hashMode === "claude-settings-v3" ? captureClaudeSettingsV3 : source.hashMode === "claude-settings-v2" ? captureClaudeSettingsV2 : captureClaudeSettings)(source.path, budget2).sha256;
+    const current = (source.hashMode === "claude-settings-v4" ? captureClaudeSettingsV4 : source.hashMode === "claude-settings-v3" ? captureClaudeSettingsV3 : source.hashMode === "claude-settings-v2" ? captureClaudeSettingsV2 : captureClaudeSettings)(source.path, budget2).sha256;
     if (current !== source.sha256)
       throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
-    return changes?.has(source.path) ? (source.hashMode === "claude-settings-v3" ? hashClaudeSettingsReplacementV3 : source.hashMode === "claude-settings-v2" ? hashClaudeSettingsReplacementV2 : hashClaudeSettingsReplacement)(changes.get(source.path), budget2) : current;
+    return changes?.has(source.path) ? (source.hashMode === "claude-settings-v4" ? hashClaudeSettingsReplacementV4 : source.hashMode === "claude-settings-v3" ? hashClaudeSettingsReplacementV3 : source.hashMode === "claude-settings-v2" ? hashClaudeSettingsReplacementV2 : hashClaudeSettingsReplacement)(changes.get(source.path), budget2) : current;
   }
   if (source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2") {
     if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || typeof source.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(source.sha256) || changes?.has(source.path))
@@ -50760,7 +50819,7 @@ function assertMarketplaceBinding(binding, source) {
     throw new Error("Sumi settings witnesses require explicit reviewed Sumi configuration");
   if ((source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")) && (binding.agent !== "codex" || binding.method !== "reviewed" || basename8(source.path) !== "config.toml"))
     throw new Error("Codex settings witnesses require explicit reviewed Codex configuration");
-  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || source.hashMode === "claude-settings-v3") && (binding.agent !== "claude" || binding.method !== "reviewed" || basename8(source.path) !== "settings.json"))
+  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4")) && (binding.agent !== "claude" || binding.method !== "reviewed" || basename8(source.path) !== "settings.json"))
     throw new Error("Claude settings witnesses require explicit reviewed Claude configuration");
   if ((source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2") && (binding.agent !== "claude" || binding.method !== "reviewed"))
     throw new Error("Claude marketplace witnesses require explicit reviewed Claude discovery");
@@ -50882,7 +50941,7 @@ function resolveAgentDiscovery(options) {
     verifyAgentDiscovery(retained);
     if (!retained.sources.some((source) => source.path === canonical7(configPath) && source.format === undefined && source.fields === undefined))
       unresolved("retained review is missing the full agent configuration source");
-    if (retained.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical7(configPath)))
+    if (retained.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical7(configPath)))
       unresolved("retained settings witness names another configuration source");
     const covered = supersedesSettingsProjection(agent, retained.sources, canonical7(configPath)) ? sources.filter((source) => !isSupersededSettingsProjection(agent, canonical7(configPath), source)) : sources;
     if (covered.some((source) => !retained.sources.some((saved) => isDeepStrictEqual4(saved, source))) || [...roots].some((root) => !retained.roots.includes(root)) || agent === "gemini" && JSON.stringify(retained.builtinNames) !== JSON.stringify(builtinNames))
@@ -50896,7 +50955,7 @@ function resolveAgentDiscovery(options) {
     if (review.sources.some((source) => source.format !== undefined || source.fields !== undefined))
       throw new Error("Explicit discovery reviews require full source-file hashes");
     verifyAgentDiscovery(supplied);
-    if (review.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical7(configPath)))
+    if (review.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical7(configPath)))
       throw new Error("Semantic settings witnesses must name the configured agent configuration source");
     if (!review.sources.some((source) => source.path === canonical7(configPath)))
       throw new Error("Discovery review must include the agent configuration source");
@@ -63996,6 +64055,24 @@ var init_http = __esm(() => {
   init_server3();
 });
 
+// src/lib/launch-cwd.ts
+var LAUNCH_CWD_VARIABLE = "HASNA_SKILLS_LAUNCH_CWD";
+function restoreLaunchCwd(env = process.env) {
+  const requested = env[LAUNCH_CWD_VARIABLE];
+  delete env[LAUNCH_CWD_VARIABLE];
+  if (!requested || !requested.startsWith("/"))
+    return { restored: false, cwd: process.cwd() };
+  try {
+    process.chdir(requested);
+    return { restored: true, cwd: process.cwd() };
+  } catch {
+    return { restored: false, cwd: process.cwd() };
+  }
+}
+
+// src/lib/launch-cwd-apply.ts
+restoreLaunchCwd();
+
 // src/mcp/index.ts
 init_stdio2();
 init_package();

package/bin/migrate.js

@@ -1,13 +1,31 @@
 #!/usr/bin/env bun
 // @bun
 
+// src/lib/launch-cwd.ts
+var LAUNCH_CWD_VARIABLE = "HASNA_SKILLS_LAUNCH_CWD";
+function restoreLaunchCwd(env = process.env) {
+  const requested = env[LAUNCH_CWD_VARIABLE];
+  delete env[LAUNCH_CWD_VARIABLE];
+  if (!requested || !requested.startsWith("/"))
+    return { restored: false, cwd: process.cwd() };
+  try {
+    process.chdir(requested);
+    return { restored: true, cwd: process.cwd() };
+  } catch {
+    return { restored: false, cwd: process.cwd() };
+  }
+}
+
+// src/lib/launch-cwd-apply.ts
+restoreLaunchCwd();
+
 // src/server/migrate.ts
 import { existsSync as existsSync4, readdirSync as readdirSync2, readFileSync as readFileSync3 } from "fs";
 import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.48",
+  version: "0.10.50",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/server.js

@@ -24119,10 +24119,28 @@ __export(exports_dist_es8, {
 var init_dist_es9 = __esm(() => {
   init_fromIni();
 });
+
+// src/lib/launch-cwd.ts
+var LAUNCH_CWD_VARIABLE = "HASNA_SKILLS_LAUNCH_CWD";
+function restoreLaunchCwd(env = process.env) {
+  const requested = env[LAUNCH_CWD_VARIABLE];
+  delete env[LAUNCH_CWD_VARIABLE];
+  if (!requested || !requested.startsWith("/"))
+    return { restored: false, cwd: process.cwd() };
+  try {
+    process.chdir(requested);
+    return { restored: true, cwd: process.cwd() };
+  } catch {
+    return { restored: false, cwd: process.cwd() };
+  }
+}
+
+// src/lib/launch-cwd-apply.ts
+restoreLaunchCwd();
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.48",
+  version: "0.10.50",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/worker.js

@@ -24120,12 +24120,30 @@ var init_dist_es9 = __esm(() => {
   init_fromIni();
 });
 
+// src/lib/launch-cwd.ts
+var LAUNCH_CWD_VARIABLE = "HASNA_SKILLS_LAUNCH_CWD";
+function restoreLaunchCwd(env = process.env) {
+  const requested = env[LAUNCH_CWD_VARIABLE];
+  delete env[LAUNCH_CWD_VARIABLE];
+  if (!requested || !requested.startsWith("/"))
+    return { restored: false, cwd: process.cwd() };
+  try {
+    process.chdir(requested);
+    return { restored: true, cwd: process.cwd() };
+  } catch {
+    return { restored: false, cwd: process.cwd() };
+  }
+}
+
+// src/lib/launch-cwd-apply.ts
+restoreLaunchCwd();
+
 // src/server/worker.ts
 import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.48",
+  version: "0.10.50",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/cli/commands/runtime-launcher.d.ts

@@ -0,0 +1,102 @@
+export declare const PINNED_LAUNCHER_SCHEMA = "hasna-skills-pinned-launcher-v1";
+/** The variable the launcher uses to hand the caller's directory to the CLI. */
+export declare const LAUNCH_CWD_VARIABLE = "HASNA_SKILLS_LAUNCH_CWD";
+/** Bun runtime flags that remove every working-directory configuration source. */
+export declare const PINNED_LAUNCHER_BUN_FLAGS: readonly ["--config=/dev/null", "--no-env-file", "--no-macros", "--no-install"];
+/**
+ * Environment names passed through `env -i`, by exact name. Everything else,
+ * including `BUN_*`, `NODE_OPTIONS`, `DYLD_*`, `LD_*` and proxy settings, is
+ * dropped. The handling is total on purpose: a name is either listed here,
+ * matches a prefix below, or never reaches the runtime.
+ */
+export declare const PINNED_LAUNCHER_ENV_NAMES: readonly ["HOME", "PATH", "TMPDIR", "TERM", "TERM_PROGRAM", "TERM_PROGRAM_VERSION", "COLORTERM", "LANG", "USER", "LOGNAME", "SHELL", "TZ", "NO_COLOR", "FORCE_COLOR", "CI", "COLUMNS", "LINES", "EDITOR", "VISUAL", "PAGER", "SSH_AUTH_SOCK", "DATABASE_URL", "TERMINAL_CWD", "CODEX_HOME", "HERMES_HOME", "HERMES_ENABLE_PROJECT_PLUGINS", "HOST", "PORT", "NODE_ENV", "AGENT_ID", "ECS_CONTAINER_METADATA_URI_V4"];
+/** Environment name prefixes passed through, for the app's own documented overrides. */
+export declare const PINNED_LAUNCHER_ENV_PREFIXES: readonly ["HASNA", "SKILLS", "SKILL", "MCP", "XDG", "LC", "AWS"];
+/** The allowlisted subset of an environment, by the same rule the launcher applies. */
+export declare function pinnedLauncherEnvironment(env: Record<string, string | undefined>): Record<string, string>;
+export type LauncherShape = "symlink" | "pinned";
+export interface PinnedLauncherBinding {
+    runtime: string;
+    cwd: string;
+    entry: string;
+}
+export type LauncherState = {
+    shape: "symlink";
+    linkTarget: string;
+    target: string;
+} | {
+    shape: "pinned";
+    runtime: string;
+    cwd: string;
+    target: string;
+    sha256: string;
+};
+export type InspectedLauncher = {
+    kind: "symlink";
+    linkTarget: string;
+    target: string;
+} | {
+    kind: "pinned";
+    runtime: string;
+    cwd: string;
+    target: string;
+    sha256: string;
+    text: string;
+} | {
+    kind: "foreign";
+};
+/** The exact launcher text for one Bun binary, trusted directory and entry. Deterministic. */
+export declare function renderPinnedLauncher(binding: PinnedLauncherBinding): string;
+/** Parse launcher text; only the exact rendered shape is accepted. */
+export declare function parsePinnedLauncher(text: string): PinnedLauncherBinding | null;
+/**
+ * Resolve a command path the way the symlink checks used to: the physical file
+ * it reaches and, when that file is a managed pinned launcher (its exact
+ * rendered text), the entry the launcher runs. `entry` equals `physical` for a
+ * symlink or a plain executable. A pinned entry must itself be a physical path.
+ */
+export declare function resolveLauncherCommand(path: string): {
+    physical: string;
+    entry: string;
+    pinned: (PinnedLauncherBinding & {
+        sha256: string;
+    }) | null;
+};
+/** Classify the launcher at `path` without following anything but its own symlink. */
+export declare function inspectLauncher(path: string): InspectedLauncher;
+/** The entry a managed launcher runs, whichever shape it has. */
+export declare function launcherTarget(path: string): string;
+/** The "link text" of a managed launcher: the symlink text, or the pinned entry path. */
+export declare function launcherLinkText(path: string): string;
+/** Whether the launcher at `path` is exactly `state`: same shape, text and target. */
+export declare function launcherIs(path: string, state: LauncherState): boolean;
+/** The pinned launcher text for a state, verified against the recorded digest. */
+export declare function pinnedLauncherText(state: {
+    runtime: string;
+    cwd: string;
+    target: string;
+    sha256: string;
+}): string;
+/** Build the pinned state for an entry under the given Bun binary and trusted directory. */
+export declare function pinnedLauncherState(runtime: string, cwd: string, target: string): Extract<LauncherState, {
+    shape: "pinned";
+}>;
+/**
+ * Create a launcher in `state` at a path that must not exist yet, and read it
+ * back. Symlinks are created as-is; pinned launchers are regular 0755 files.
+ */
+export declare function materializeLauncher(path: string, state: LauncherState): void;
+/**
+ * The Bun binary launchers are pinned to: the exact runtime running the
+ * updater, resolved physically and required to be owned by root or the
+ * current user, executable, and not writable by group or others.
+ */
+export declare function pinnedLauncherRuntime(): string;
+/** A pinned runtime is a physical, executable regular file owned by root or the current user and not group/world-writable. */
+export declare function assertPinnedLauncherRuntimeSafe(runtime: string): void;
+/**
+ * The launcher depends on `/bin/sh -p`, `/usr/bin/awk` and `/usr/bin/env`.
+ * Refuse before any launcher is written when this station's shell rejects
+ * `-p` (for example dash before 0.5.11), so no launcher is left unusable.
+ */
+export declare function assertPinnedLauncherShell(): void;

package/dist/cli/commands/runtime.d.ts

@@ -1,2 +1,9 @@
 import type { Command } from "commander";
 export declare function registerRuntime(parent: Command): void;
+/**
+ * The command to run for the Skills selected on PATH, after checking that it
+ * runs the installed entry. A symlink is compared by its physical target, as
+ * before; a managed pinned launcher by the exact entry it runs, and it is run
+ * through the launcher so the caller's directory configures nothing.
+ */
+export declare function selectedSkillsCommand(selected: string, installed: string): string;

package/dist/cli/index.d.ts

@@ -1,2 +1,2 @@
 #!/usr/bin/env bun
-export {};
+import "../lib/launch-cwd-apply.js";

package/dist/index.d.ts

@@ -64,7 +64,7 @@ export { planAgentIntegration, planClaudeStopHookUpdate, planClaudePreToolUseHoo
 export type { ClaudeManagedHookProjection, ClaudeManagedHookProjectionOptions } from "./lib/agent-integration.js";
 export { captureDiscoveryDirectories, captureDiscoveryByteSources, captureDiscoveryPathSources, type DiscoveryDirectory, type DiscoverySource } from "./lib/agent-discovery.js";
 export { captureClaudeMarketplaceRegistry, captureClaudeMarketplaceRegistryV2 } from "./lib/claude-marketplace-registry.js";
-export { captureClaudeSettings, captureClaudeSettingsV2, captureClaudeSettingsV3, upgradeClaudeSettingsWitness } from "./lib/claude-settings-witness.js";
+export { captureClaudeSettings, captureClaudeSettingsV2, captureClaudeSettingsV3, captureClaudeSettingsV4, upgradeClaudeSettingsWitness, upgradeClaudeSettingsWitnessV4 } from "./lib/claude-settings-witness.js";
 export { buildPluginProjection, pluginTreeDigest, type PluginProjectionManifest, type PluginPayloadMapping, type PluginFileWitness } from "./lib/plugin-projection.js";
 export { planPluginAdmission, admitPlugin, resolveAdmittedPlugin, pluginResolverCommand, type PluginAdmissionTarget, type PluginAdmissionBinding, type PluginAdmissionPrincipal, type PluginAdmissionPlan, type PluginAdmissionIdentity, type PluginBundleIdentity, type PluginRoutingIdentity, type PluginAdmissionReceipt } from "./lib/plugin-admission.js";
 export { captureManagedPluginRegistry, type ManagedPluginRegistrationWitness } from "./lib/plugin-discovery.js";