@hasna/skills 0.10.48 → 0.10.50

package/dist/sdk/index.js

@@ -9004,7 +9004,7 @@ var require_client = __commonJS((exports) => {
 var require_config = __commonJS((exports) => {
   var { homedir: homedir7 } = __require("os");
   var { sep: sep11, join: join4 } = __require("path");
-  var { createHash: createHash26 } = __require("crypto");
+  var { createHash: createHash27 } = __require("crypto");
   var { readFile: readFile$1 } = __require("fs/promises");
   var { IniSectionType } = require_dist_cjs();
   var { normalizeProvider } = require_client();
@@ -9159,7 +9159,7 @@ var require_config = __commonJS((exports) => {
   var DEFAULT_PROFILE = "default";
   var getProfileName = (init) => init.profile || process.env[ENV_PROFILE] || DEFAULT_PROFILE;
   var getSSOTokenFilepath = (id2) => {
-    const hasher = createHash26("sha1");
+    const hasher = createHash27("sha1");
     const cacheName = hasher.update(id2).digest("hex");
     return join4(getHomeDir(), ".aws", "sso", "cache", `${cacheName}.json`);
   };
@@ -9311,11 +9311,11 @@ var require_config = __commonJS((exports) => {
   };
   function getSelectorName(functionString) {
     try {
-      const constants15 = new Set(Array.from(functionString.match(/([A-Z_]){3,}/g) ?? []));
-      constants15.delete("CONFIG");
-      constants15.delete("CONFIG_PREFIX_SEPARATOR");
-      constants15.delete("ENV");
-      return [...constants15].join(", ");
+      const constants16 = new Set(Array.from(functionString.match(/([A-Z_]){3,}/g) ?? []));
+      constants16.delete("CONFIG");
+      constants16.delete("CONFIG_PREFIX_SEPARATOR");
+      constants16.delete("ENV");
+      return [...constants16].join(", ");
     } catch (ignored) {
       return functionString;
     }
@@ -10511,10 +10511,10 @@ var require_endpoints = __commonJS((exports) => {
 
 // node_modules/@smithy/core/dist-cjs/submodules/serde/index.js
 var require_serde = __commonJS((exports) => {
-  var { createHmac: createHmac2, createHash: createHash26, getRandomValues } = __require("crypto");
+  var { createHmac: createHmac2, createHash: createHash27, getRandomValues } = __require("crypto");
   var { hasOwn: hasOwn2, HttpResponse } = require_transport();
   exports.hasOwn = hasOwn2;
-  var { ReadStream, lstatSync: lstatSync26, fstatSync: fstatSync4 } = __require("fs");
+  var { ReadStream, lstatSync: lstatSync27, fstatSync: fstatSync4 } = __require("fs");
   var { toEndpointV1 } = require_endpoints();
   var { Readable, Writable, PassThrough } = __require("stream");
   var isArrayBuffer = (arg) => typeof ArrayBuffer === "function" && arg instanceof ArrayBuffer || Object.prototype.toString.call(arg) === "[object ArrayBuffer]";
@@ -11280,7 +11280,7 @@ var require_serde = __commonJS((exports) => {
       return body.end + 1 - body.start;
     } else if (body instanceof ReadStream) {
       if (body.path != null) {
-        return lstatSync26(body.path).size;
+        return lstatSync27(body.path).size;
       } else if (typeof body.fd === "number") {
         return fstatSync4(body.fd).size;
       }
@@ -11416,7 +11416,7 @@ var require_serde = __commonJS((exports) => {
       return Promise.resolve(this.hash.digest());
     }
     reset() {
-      this.hash = this.secret ? createHmac2(this.algorithmIdentifier, castSourceData(this.secret)) : createHash26(this.algorithmIdentifier);
+      this.hash = this.secret ? createHmac2(this.algorithmIdentifier, castSourceData(this.secret)) : createHash27(this.algorithmIdentifier);
     }
   }
   function castSourceData(toCast, encoding) {
@@ -12155,7 +12155,7 @@ var require_checksum = __commonJS((exports) => {
   var { createReadStream } = __require("fs");
   var { Writable } = __require("stream");
   var { toUint8Array, concatBytes } = require_serde();
-  var { createHash: createHash26, createHmac: createHmac2 } = __require("crypto");
+  var { createHash: createHash27, createHmac: createHmac2 } = __require("crypto");
   var zlib = __require("zlib");
   async function blobReader(blob, onChunk, chunkSize = 1024 * 1024) {
     const size = blob.size;
@@ -12320,7 +12320,7 @@ var require_checksum = __commonJS((exports) => {
   }
   var hasNativeCrypto$1 = (() => {
     try {
-      createHash26("md5");
+      createHash27("md5");
       return true;
     } catch {
       return false;
@@ -12330,7 +12330,7 @@ var require_checksum = __commonJS((exports) => {
   function buildNativeClass$2() {
     return class Md5Node2 {
       digestLength = 16;
-      hash = createHash26("md5");
+      hash = createHash27("md5");
       update(data) {
         this.hash.update(toUint8Array(data));
       }
@@ -12339,7 +12339,7 @@ var require_checksum = __commonJS((exports) => {
         return new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength);
       }
       reset() {
-        this.hash = createHash26("md5");
+        this.hash = createHash27("md5");
       }
     };
   }
@@ -12629,7 +12629,7 @@ var require_checksum = __commonJS((exports) => {
   ]);
   var hasNativeCrypto = (() => {
     try {
-      createHash26("sha256");
+      createHash27("sha256");
       return true;
     } catch {
       return false;
@@ -12669,7 +12669,7 @@ var require_checksum = __commonJS((exports) => {
         this.finished = false;
       }
       createHash() {
-        return this.secret ? createHmac2("sha256", toBuffer(this.secret)) : createHash26("sha256");
+        return this.secret ? createHmac2("sha256", toBuffer(this.secret)) : createHash27("sha256");
       }
     };
   }
@@ -12730,9 +12730,9 @@ var require_checksum = __commonJS((exports) => {
         const hash2 = await subtle.digest("SHA-256", data);
         return new Uint8Array(hash2);
       }
-      const sha2562 = new Sha256Js(this.secret);
-      sha2562.update(data);
-      return sha2562.digest();
+      const sha2563 = new Sha256Js(this.secret);
+      sha2563.update(data);
+      return sha2563.digest();
     }
     reset() {
       this.pending = [];
@@ -18071,9 +18071,9 @@ var require_dist_cjs3 = __commonJS((exports) => {
     sha256;
     uriEscapePath;
     applyChecksum;
-    constructor({ applyChecksum, credentials, region, service, sha256: sha2562, uriEscapePath = true }) {
+    constructor({ applyChecksum, credentials, region, service, sha256: sha2563, uriEscapePath = true }) {
       this.service = service;
-      this.sha256 = sha2562;
+      this.sha256 = sha2563;
       this.uriEscapePath = uriEscapePath;
       this.applyChecksum = typeof applyChecksum === "boolean" ? applyChecksum : true;
       this.regionProvider = normalizeProvider2(region);
@@ -18240,13 +18240,13 @@ ${toHex(hashedRequest)}`;
 
   class SignatureV4 extends SignatureV4Base {
     headerFormatter = new HeaderFormatter;
-    constructor({ applyChecksum, credentials, region, service, sha256: sha2562, uriEscapePath = true }) {
+    constructor({ applyChecksum, credentials, region, service, sha256: sha2563, uriEscapePath = true }) {
       super({
         applyChecksum,
         credentials,
         region,
         service,
-        sha256: sha2562,
+        sha256: sha2563,
         uriEscapePath
       });
     }
@@ -24474,7 +24474,7 @@ var require_httpAuthSchemes = __commonJS((exports) => {
       configurable: true
     });
     config.credentials = inputCredentials;
-    const { signingEscapePath = true, systemClockOffset = config.systemClockOffset || 0, sha256: sha2562 } = config;
+    const { signingEscapePath = true, systemClockOffset = config.systemClockOffset || 0, sha256: sha2563 } = config;
     let signer;
     if (config.signer) {
       signer = normalizeProvider2(config.signer);
@@ -24494,7 +24494,7 @@ var require_httpAuthSchemes = __commonJS((exports) => {
           credentials: config.credentials,
           region: config.signingRegion,
           service: config.signingName,
-          sha256: sha2562,
+          sha256: sha2563,
           uriEscapePath: signingEscapePath
         };
         const SignerCtor = config.signerConstructor || SignatureV4;
@@ -24517,7 +24517,7 @@ var require_httpAuthSchemes = __commonJS((exports) => {
           credentials: config.credentials,
           region: config.signingRegion,
           service: config.signingName,
-          sha256: sha2562,
+          sha256: sha2563,
           uriEscapePath: signingEscapePath
         };
         const SignerCtor = config.signerConstructor || SignatureV4;
@@ -25679,7 +25679,7 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
       return this.connectOptions === undefined ? http2.connect(url) : http2.connect(url, this.connectOptions);
     }
   }
-  var { constants: constants15 } = http2;
+  var { constants: constants16 } = http2;
 
   class NodeHttp2Handler {
     config;
@@ -25770,8 +25770,8 @@ or increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler conf
         }
         const clientHttp2Stream = session.request({
           ...request2.headers,
-          [constants15.HTTP2_HEADER_PATH]: path,
-          [constants15.HTTP2_HEADER_METHOD]: method
+          [constants16.HTTP2_HEADER_PATH]: path,
+          [constants16.HTTP2_HEADER_METHOD]: method
         });
         if (effectiveRequestTimeout) {
           clientHttp2Stream.setTimeout(effectiveRequestTimeout, () => {
@@ -29443,7 +29443,7 @@ var require_signin = __commonJS((exports) => {
 });
 
 // node_modules/@aws-sdk/credential-provider-ini/node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js
-import { createHash as createHash26, createPrivateKey, createPublicKey, sign } from "crypto";
+import { createHash as createHash27, createPrivateKey, createPublicKey, sign } from "crypto";
 import { promises as fs2 } from "fs";
 import { homedir as homedir7 } from "os";
 import { dirname as dirname23, join as join38 } from "path";
@@ -29615,7 +29615,7 @@ var init_LoginCredentialsFetcher = __esm(() => {
     getTokenFilePath() {
       const directory = process.env.AWS_LOGIN_CACHE_DIRECTORY ?? join38(homedir7(), ".aws", "login", "cache");
       const loginSessionBytes = Buffer.from(this.loginSession, "utf8");
-      const loginSessionSha256 = createHash26("sha256").update(loginSessionBytes).digest("hex");
+      const loginSessionSha256 = createHash27("sha256").update(loginSessionBytes).digest("hex");
       return join38(directory, `${loginSessionSha256}.json`);
     }
     derToRawSignature(derSignature) {
@@ -30946,7 +30946,7 @@ var fromWebToken = (init) => async (awsIdentityProperties) => {
 };
 
 // node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromTokenFile.js
-import { readFileSync as readFileSync24 } from "fs";
+import { readFileSync as readFileSync25 } from "fs";
 var import_client19, import_config32, ENV_TOKEN_FILE = "AWS_WEB_IDENTITY_TOKEN_FILE", ENV_ROLE_ARN = "AWS_ROLE_ARN", ENV_ROLE_SESSION_NAME = "AWS_ROLE_SESSION_NAME", fromTokenFile = (init = {}) => async (awsIdentityProperties) => {
   init.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");
   const webIdentityTokenFile = init?.webIdentityTokenFile ?? process.env[ENV_TOKEN_FILE];
@@ -30959,7 +30959,7 @@ var import_client19, import_config32, ENV_TOKEN_FILE = "AWS_WEB_IDENTITY_TOKEN_F
   }
   const credentials = await fromWebToken({
     ...init,
-    webIdentityToken: import_config32.externalDataInterceptor?.getTokenRecord?.()[webIdentityTokenFile] ?? readFileSync24(webIdentityTokenFile, { encoding: "ascii" }),
+    webIdentityToken: import_config32.externalDataInterceptor?.getTokenRecord?.()[webIdentityTokenFile] ?? readFileSync25(webIdentityTokenFile, { encoding: "ascii" }),
     roleArn,
     roleSessionName
   })(awsIdentityProperties);
@@ -32373,7 +32373,7 @@ var init_event_sink = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.48",
+  version: "0.10.50",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -37554,9 +37554,9 @@ async function reconcileSkillSession(input, options = {}) {
   return { applied: true, plan, planDigest, ...result };
 }
 // src/lib/selected-run.ts
-import { createHash as createHash25 } from "crypto";
+import { createHash as createHash26 } from "crypto";
 import { spawn as spawn2 } from "child_process";
-import { mkdirSync as mkdirSync11, mkdtempSync as mkdtempSync3, writeFileSync as writeFileSync10, realpathSync as realpathSync14 } from "fs";
+import { mkdirSync as mkdirSync11, mkdtempSync as mkdtempSync3, writeFileSync as writeFileSync10, realpathSync as realpathSync15 } from "fs";
 import { dirname as dirname22, join as join37, resolve as resolve21 } from "path";
 import { tmpdir, hostname as stationHostname2 } from "os";
 
@@ -37768,7 +37768,7 @@ async function prepareSkillDependencies(skillPath, env, timeoutMs = DEFAULT_PREP
 }
 
 // src/lib/skillinfo.ts
-import { existsSync as existsSync15, readFileSync as readFileSync23 } from "fs";
+import { existsSync as existsSync15, readFileSync as readFileSync24 } from "fs";
 import { join as join36 } from "path";
 
 // src/lib/codex-corpus-write.ts
@@ -37933,7 +37933,7 @@ function withCodexCorpusWrite(roots, run, options = {}) {
 }
 
 // src/lib/installer.ts
-import { existsSync as existsSync14, readFileSync as readFileSync22, rmSync as rmSync4 } from "fs";
+import { existsSync as existsSync14, readFileSync as readFileSync23, rmSync as rmSync4 } from "fs";
 import { join as join35 } from "path";
 import { homedir as homedir6 } from "os";
 
@@ -37941,10 +37941,10 @@ import { homedir as homedir6 } from "os";
 import {
   cpSync as cpSync2,
   existsSync as existsSync11,
-  lstatSync as lstatSync25,
+  lstatSync as lstatSync26,
   mkdirSync as mkdirSync9,
   mkdtempSync as mkdtempSync2,
-  readFileSync as readFileSync19,
+  readFileSync as readFileSync20,
   readdirSync as readdirSync11,
   renameSync as renameSync6,
   rmSync as rmSync3,
@@ -38140,6 +38140,8 @@ var BUILTIN_MODEL_SELECTIONS = new Set([
   "claude-opus-4-6[1m]",
   "claude-sonnet-4-6[1m]"
 ]);
+var CLAUDE_BUILTIN_THEMES = Object.freeze(["auto", "dark", "light", "dark-daltonized", "light-daltonized", "dark-ansi", "light-ansi"]);
+var BUILTIN_THEMES = new Set(CLAUDE_BUILTIN_THEMES);
 function canonical(value) {
   if (value.kind === "object")
     return { kind: "object", entries: value.entries.map(([key, child]) => [key, canonical(child)]).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0) };
@@ -38198,7 +38200,9 @@ function inferencePreference(key, child, version) {
 function settingsDigest(text, version = 1) {
   const value = parse2(text);
   value.entries = value.entries.filter(([key, child]) => {
-    if (version !== 1 && inferencePreference(key, child, version))
+    if (version === 4 && key === "theme" && child.kind === "string" && BUILTIN_THEMES.has(child.value))
+      return false;
+    if (version !== 1 && inferencePreference(key, child, version === 4 ? 3 : version))
       return false;
     if (key === "model") {
       need(child.kind === "string", "contains an invalid model selection");
@@ -38256,6 +38260,26 @@ function upgradeClaudeSettingsWitness(previous, reviewedSettingsPath) {
   need(settingsDigest(before, 3) === sha2562, "non-preference settings changed; explicit discovery review required");
   return { path: previous.path, hashMode: "claude-settings-v3", sha256: sha2562 };
 }
+function captureClaudeSettingsV4(path, budget = { remaining: 256 * 1024 * 1024 }) {
+  return { path, hashMode: "claude-settings-v4", sha256: settingsDigest(readNativeSettingsWitnessFile(path, budget), 4) };
+}
+function hashClaudeSettingsReplacementV4(text, budget) {
+  need(typeof text === "string", "requires settings text");
+  const bytes = Buffer.byteLength(text);
+  need(bytes <= CLAUDE_SETTINGS_WITNESS_LIMITS.bytes && Number.isSafeInteger(budget.remaining) && budget.remaining >= bytes, "exceeds its byte limit");
+  budget.remaining -= bytes;
+  return settingsDigest(text, 4);
+}
+function upgradeClaudeSettingsWitnessV4(previous, reviewedSettingsPath) {
+  need(previous && Object.keys(previous).every((key) => ["path", "hashMode", "sha256"].includes(key)) && (previous.hashMode === undefined || previous.hashMode === "bytes" || previous.hashMode === "claude-settings-v1" || previous.hashMode === "claude-settings-v2" || previous.hashMode === "claude-settings-v3") && typeof previous.sha256 === "string" && /^[a-f0-9]{64}$/.test(previous.sha256), "requires an exact prior settings witness");
+  const budget = { remaining: 2 * CLAUDE_SETTINGS_WITNESS_LIMITS.bytes };
+  const before = readNativeSettingsWitnessFile(reviewedSettingsPath, budget), current = readNativeSettingsWitnessFile(previous.path, budget);
+  const beforeDigest = previous.hashMode === undefined || previous.hashMode === "bytes" ? createHash6("sha256").update(before).digest("hex") : settingsDigest(before, previous.hashMode === "claude-settings-v1" ? 1 : previous.hashMode === "claude-settings-v2" ? 2 : 3);
+  need(beforeDigest === previous.sha256, "reviewed preimage does not match the prior witness");
+  const sha2562 = settingsDigest(current, 4);
+  need(settingsDigest(before, 4) === sha2562, "non-preference settings changed; explicit discovery review required");
+  return { path: previous.path, hashMode: "claude-settings-v4", sha256: sha2562 };
+}
 function hashNativeJsonControls(text, excludedMetadata) {
   need(Buffer.byteLength(text) <= CLAUDE_SETTINGS_WITNESS_LIMITS.bytes, "exceeds its byte limit");
   const value = parse2(text);
@@ -40252,10 +40276,10 @@ var NATIVE_SKILL_ROOTS = [
 ];
 
 // src/lib/agent-integration.ts
-import { createHash as createHash23, randomUUID as randomUUID4 } from "crypto";
+import { createHash as createHash24, randomUUID as randomUUID4 } from "crypto";
 import { isDeepStrictEqual as isDeepStrictEqual8 } from "util";
-import { existsSync as existsSync7, lstatSync as lstatSync22, statSync as statSync7, mkdirSync as mkdirSync6, readFileSync as readFileSync16, readdirSync as readdirSync8, opendirSync as opendirSync5, readlinkSync as readlinkSync5, realpathSync as realpathSync10, renameSync as renameSync4, rmdirSync as rmdirSync3, writeFileSync as writeFileSync5, unlinkSync as unlinkSync5, chmodSync, openSync as openSync17, closeSync as closeSync17, fsyncSync as fsyncSync5, fstatSync as fstatSync17, readSync as readSync12, constants as constants14, linkSync as linkSync3 } from "fs";
-import { dirname as dirname17, join as join27, resolve as resolve18, relative as relative5, isAbsolute as isAbsolute19, sep as sep7 } from "path";
+import { existsSync as existsSync7, lstatSync as lstatSync23, statSync as statSync7, mkdirSync as mkdirSync6, readFileSync as readFileSync17, readdirSync as readdirSync8, opendirSync as opendirSync5, readlinkSync as readlinkSync6, realpathSync as realpathSync11, renameSync as renameSync4, rmdirSync as rmdirSync3, writeFileSync as writeFileSync5, unlinkSync as unlinkSync5, chmodSync, openSync as openSync18, closeSync as closeSync18, fsyncSync as fsyncSync6, fstatSync as fstatSync18, readSync as readSync12, constants as constants15, linkSync as linkSync3 } from "fs";
+import { dirname as dirname17, join as join27, resolve as resolve18, relative as relative5, isAbsolute as isAbsolute20, sep as sep7 } from "path";
 import { homedir as homedir3 } from "os";
 
 // src/lib/managed-policy.ts
@@ -40405,14 +40429,14 @@ function assertAgentPolicyCollections(policy) {
       text(source.path);
       requireBound(source.sha256 === null || typeof source.sha256 === "string" && /^[a-f0-9]{64}$/.test(source.sha256));
       if (source.hashMode !== undefined)
-        requireBound(["bytes", "path-bytes", "claude-plugin-manifest-v1", "claude-plugin-registry", "claude-marketplace-registry", "claude-settings-v1", "claude-settings-v2", "claude-settings-v3", "claude-marketplace-registry-v2", "codex-settings-v1", "codex-settings-v2", "codex-settings-v3", "codex-settings-v4", "sumi-settings-v1"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
+        requireBound(["bytes", "path-bytes", "claude-plugin-manifest-v1", "claude-plugin-registry", "claude-marketplace-registry", "claude-settings-v1", "claude-settings-v2", "claude-settings-v3", "claude-settings-v4", "claude-marketplace-registry-v2", "codex-settings-v1", "codex-settings-v2", "codex-settings-v3", "codex-settings-v4", "sumi-settings-v1"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
       if (source.hashMode === "claude-plugin-manifest-v1")
         requireBound(agent === "claude" && value.agent === "claude" && ["automatic", "reviewed"].includes(value.method) && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute8(source.path) && resolve7(source.path) === source.path && source.path.endsWith(join14(sep4, ".claude-plugin", "plugin.json")) && source.managedPlugins === undefined);
       if (source.hashMode === "sumi-settings-v1")
         requireBound(agent === "sumi" && value.agent === "sumi" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute8(source.path) && resolve7(source.path) === source.path && basename5(source.path) === "sumi.json");
       if (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4"))
         requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute8(source.path) && resolve7(source.path) === source.path && basename5(source.path) === "config.toml");
-      if (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || source.hashMode === "claude-settings-v3")
+      if (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4"))
         requireBound(agent === "claude" && value.agent === "claude" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute8(source.path) && resolve7(source.path) === source.path && basename5(source.path) === "settings.json");
       if (source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2")
         requireBound(agent === "claude" && value.agent === "claude" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute8(source.path) && resolve7(source.path) === source.path && basename5(source.path) === "known_marketplaces.json");
@@ -43246,13 +43270,13 @@ function projected(source, changes, budget2 = discoveryByteBudget()) {
       throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
     return changes?.has(source.path) ? (source.hashMode === "codex-settings-v4" ? hashCodexSettingsReplacementV4 : source.hashMode === "codex-settings-v3" ? hashCodexSettingsReplacementV3 : source.hashMode === "codex-settings-v2" ? hashCodexSettingsReplacementV2 : hashCodexSettingsReplacement)(changes.get(source.path), budget2) : current;
   }
-  if (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || source.hashMode === "claude-settings-v3") {
+  if (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4")) {
     if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || typeof source.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(source.sha256))
       throw new Error("Claude settings witnesses require exact typed metadata");
-    const current = (source.hashMode === "claude-settings-v3" ? captureClaudeSettingsV3 : source.hashMode === "claude-settings-v2" ? captureClaudeSettingsV2 : captureClaudeSettings)(source.path, budget2).sha256;
+    const current = (source.hashMode === "claude-settings-v4" ? captureClaudeSettingsV4 : source.hashMode === "claude-settings-v3" ? captureClaudeSettingsV3 : source.hashMode === "claude-settings-v2" ? captureClaudeSettingsV2 : captureClaudeSettings)(source.path, budget2).sha256;
     if (current !== source.sha256)
       throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
-    return changes?.has(source.path) ? (source.hashMode === "claude-settings-v3" ? hashClaudeSettingsReplacementV3 : source.hashMode === "claude-settings-v2" ? hashClaudeSettingsReplacementV2 : hashClaudeSettingsReplacement)(changes.get(source.path), budget2) : current;
+    return changes?.has(source.path) ? (source.hashMode === "claude-settings-v4" ? hashClaudeSettingsReplacementV4 : source.hashMode === "claude-settings-v3" ? hashClaudeSettingsReplacementV3 : source.hashMode === "claude-settings-v2" ? hashClaudeSettingsReplacementV2 : hashClaudeSettingsReplacement)(changes.get(source.path), budget2) : current;
   }
   if (source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2") {
     if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || typeof source.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(source.sha256) || changes?.has(source.path))
@@ -43487,7 +43511,7 @@ function assertMarketplaceBinding(binding, source) {
     throw new Error("Sumi settings witnesses require explicit reviewed Sumi configuration");
   if ((source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")) && (binding.agent !== "codex" || binding.method !== "reviewed" || basename8(source.path) !== "config.toml"))
     throw new Error("Codex settings witnesses require explicit reviewed Codex configuration");
-  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || source.hashMode === "claude-settings-v3") && (binding.agent !== "claude" || binding.method !== "reviewed" || basename8(source.path) !== "settings.json"))
+  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4")) && (binding.agent !== "claude" || binding.method !== "reviewed" || basename8(source.path) !== "settings.json"))
     throw new Error("Claude settings witnesses require explicit reviewed Claude configuration");
   if ((source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2") && (binding.agent !== "claude" || binding.method !== "reviewed"))
     throw new Error("Claude marketplace witnesses require explicit reviewed Claude discovery");
@@ -43689,7 +43713,7 @@ function resolveAgentDiscovery(options) {
     verifyAgentDiscovery(retained);
     if (!retained.sources.some((source) => source.path === canonical7(configPath) && source.format === undefined && source.fields === undefined))
       unresolved("retained review is missing the full agent configuration source");
-    if (retained.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical7(configPath)))
+    if (retained.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical7(configPath)))
       unresolved("retained settings witness names another configuration source");
     const covered = supersedesSettingsProjection(agent, retained.sources, canonical7(configPath)) ? sources.filter((source) => !isSupersededSettingsProjection(agent, canonical7(configPath), source)) : sources;
     if (covered.some((source) => !retained.sources.some((saved) => isDeepStrictEqual6(saved, source))) || [...roots].some((root2) => !retained.roots.includes(root2)) || agent === "gemini" && JSON.stringify(retained.builtinNames) !== JSON.stringify(builtinNames))
@@ -43703,7 +43727,7 @@ function resolveAgentDiscovery(options) {
     if (review.sources.some((source) => source.format !== undefined || source.fields !== undefined))
       throw new Error("Explicit discovery reviews require full source-file hashes");
     verifyAgentDiscovery(supplied);
-    if (review.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical7(configPath)))
+    if (review.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical7(configPath)))
       throw new Error("Semantic settings witnesses must name the configured agent configuration source");
     if (!review.sources.some((source) => source.path === canonical7(configPath)))
       throw new Error("Discovery review must include the agent configuration source");
@@ -44188,8 +44212,144 @@ function disableCodexBundledSkills(text2) {
   return [...candidates][0];
 }
 
+// src/cli/commands/runtime-launcher.ts
+import { createHash as createHash23 } from "crypto";
+import { closeSync as closeSync17, constants as constants14, fchmodSync as fchmodSync2, fstatSync as fstatSync17, fsyncSync as fsyncSync5, lstatSync as lstatSync22, openSync as openSync17, readFileSync as readFileSync16, readlinkSync as readlinkSync5, realpathSync as realpathSync10, symlinkSync, writeSync as writeSync3 } from "fs";
+import { isAbsolute as isAbsolute19 } from "path";
+var PINNED_LAUNCHER_SCHEMA = "hasna-skills-pinned-launcher-v1";
+var LAUNCH_CWD_VARIABLE = "HASNA_SKILLS_LAUNCH_CWD";
+var PINNED_LAUNCHER_BUN_FLAGS = ["--config=/dev/null", "--no-env-file", "--no-macros", "--no-install"];
+var PINNED_LAUNCHER_ENV_NAMES = [
+  "HOME",
+  "PATH",
+  "TMPDIR",
+  "TERM",
+  "TERM_PROGRAM",
+  "TERM_PROGRAM_VERSION",
+  "COLORTERM",
+  "LANG",
+  "USER",
+  "LOGNAME",
+  "SHELL",
+  "TZ",
+  "NO_COLOR",
+  "FORCE_COLOR",
+  "CI",
+  "COLUMNS",
+  "LINES",
+  "EDITOR",
+  "VISUAL",
+  "PAGER",
+  "SSH_AUTH_SOCK",
+  "DATABASE_URL",
+  "TERMINAL_CWD",
+  "CODEX_HOME",
+  "HERMES_HOME",
+  "HERMES_ENABLE_PROJECT_PLUGINS",
+  "HOST",
+  "PORT",
+  "NODE_ENV",
+  "AGENT_ID",
+  "ECS_CONTAINER_METADATA_URI_V4"
+];
+var PINNED_LAUNCHER_ENV_PREFIXES = ["HASNA", "SKILLS", "SKILL", "MCP", "XDG", "LC", "AWS"];
+var ENV_PREFIX = new RegExp(`^(${PINNED_LAUNCHER_ENV_PREFIXES.join("|")})_`);
+var ENV_EXACT = new Set(PINNED_LAUNCHER_ENV_NAMES);
+function sha2562(bytes) {
+  return createHash23("sha256").update(bytes).digest("hex");
+}
+function assertLauncherPath(value, code) {
+  if (typeof value !== "string" || !isAbsolute19(value) || /['\x00-\x1f\x7f]/.test(value))
+    throw new Error(code);
+}
+function renderPinnedLauncher(binding) {
+  assertLauncherPath(binding.runtime, "LAUNCHER_RUNTIME_PATH_INVALID");
+  assertLauncherPath(binding.cwd, "LAUNCHER_CWD_PATH_INVALID");
+  assertLauncherPath(binding.entry, "LAUNCHER_ENTRY_PATH_INVALID");
+  const names = PINNED_LAUNCHER_ENV_NAMES.join(" ");
+  const prefixes = PINNED_LAUNCHER_ENV_PREFIXES.join("|");
+  return [
+    "#!/bin/sh -p",
+    `# ${PINNED_LAUNCHER_SCHEMA}`,
+    "# Written by `skills self-update`; rewrite it with `skills self-update`, do not edit by hand.",
+    "# Runs the exact Skills entry below under one exact Bun from one trusted directory with",
+    "# no working-directory configuration (no bunfig.toml, no .env, no macros, no auto-install)",
+    "# and only the environment names allowed here. Everything else, BUN_* and NODE_OPTIONS",
+    "# included, never reaches the runtime. The CLI returns to the caller's directory itself.",
+    "# `-p` keeps the caller's exported functions and shell options out of this shell.",
+    "set -eu",
+    `${LAUNCH_CWD_VARIABLE}=$(pwd -P 2>/dev/null || :)`,
+    `export ${LAUNCH_CWD_VARIABLE}`,
+    `set -- '${binding.runtime}' ${PINNED_LAUNCHER_BUN_FLAGS.join(" ")} '--cwd=${binding.cwd}' '${binding.entry}' "$@"`,
+    "hasna_skills_env=$(LC_ALL=C /usr/bin/awk 'BEGIN {",
+    `  n = split("${names}", exact, " ")`,
+    "  for (i = 1; i <= n; i++) allow[exact[i]] = 1",
+    "  for (name in ENVIRON) {",
+    "    if (name !~ /^[A-Za-z_][A-Za-z0-9_]*$/) continue",
+    `    if (name == "LC_ALL" || (!(name in allow) && name !~ /^(${prefixes})_/)) continue`,
+    '    value = ENVIRON[name]; quoted = ""',
+    '    while ((k = index(value, "\\047")) > 0) { quoted = quoted substr(value, 1, k - 1) "\\047\\\\\\047\\047"; value = substr(value, k + 1) }',
+    '    printf "\\047%s=%s\\047 ", name, quoted value',
+    "  }",
+    "}')",
+    'eval "set -- $hasna_skills_env \\"\\$@\\""',
+    'if [ "${LC_ALL+x}" = x ]; then set -- "LC_ALL=$LC_ALL" "$@"; fi',
+    'exec /usr/bin/env -i "$@"',
+    ""
+  ].join(`
+`);
+}
+var COMMAND_LINE = new RegExp(`^set -- '([^']+)' ${PINNED_LAUNCHER_BUN_FLAGS.join(" ")} '--cwd=([^']+)' '([^']+)' "\\$@"$`, "m");
+function parsePinnedLauncher(text2) {
+  const match = COMMAND_LINE.exec(text2);
+  if (!match)
+    return null;
+  const binding = { runtime: match[1], cwd: match[2], entry: match[3] };
+  try {
+    if (renderPinnedLauncher(binding) !== text2)
+      return null;
+  } catch {
+    return null;
+  }
+  return binding;
+}
+var PINNED_LAUNCHER_MAX_BYTES = 16 * 1024;
+function resolveLauncherCommand(path) {
+  const physical = realpathSync10(path);
+  const stat2 = lstatSync22(physical);
+  if (stat2.isFile() && stat2.size <= PINNED_LAUNCHER_MAX_BYTES) {
+    const text2 = readFileSync16(physical, "utf8");
+    const binding = parsePinnedLauncher(text2);
+    if (binding) {
+      let entry;
+      try {
+        entry = realpathSync10(binding.entry);
+      } catch {
+        throw new Error("LAUNCHER_ENTRY_UNREADABLE");
+      }
+      if (entry !== binding.entry)
+        throw new Error("LAUNCHER_ENTRY_NOT_PHYSICAL");
+      return { physical, entry, pinned: { ...binding, sha256: sha2562(text2) } };
+    }
+  }
+  return { physical, entry: physical, pinned: null };
+}
+function assertPinnedLauncherRuntimeSafe(runtime) {
+  assertLauncherPath(runtime, "LAUNCHER_RUNTIME_PATH_INVALID");
+  let stat2;
+  try {
+    stat2 = lstatSync22(runtime);
+  } catch {
+    throw new Error("LAUNCHER_RUNTIME_UNSAFE");
+  }
+  const uid2 = process.getuid?.() ?? -1;
+  if (!stat2.isFile() || stat2.isSymbolicLink() || ![0, uid2].includes(stat2.uid) || (stat2.mode & 18) !== 0 || (stat2.mode & 64) === 0) {
+    throw new Error("LAUNCHER_RUNTIME_UNSAFE");
+  }
+}
+
 // src/lib/agent-integration.ts
-var sha4 = (data) => createHash23("sha256").update(data).digest("hex");
+var sha4 = (data) => createHash24("sha256").update(data).digest("hex");
 var ROOTS = NATIVE_SKILL_ROOTS;
 function hasTrustedDarwinAcl(fd, allowDenyOnly = false) {
   try {
@@ -44240,11 +44400,11 @@ function isSystemRootAlias(path) {
   const target = `/private${path}`, link = `private${path}`;
   const identity5 = (stat2) => `${stat2.dev}:${stat2.ino}:${stat2.ctimeNs}:${stat2.uid}:${stat2.mode}`;
   try {
-    const before = lstatSync22(path, { bigint: true });
-    if (!before.isSymbolicLink() || before.uid !== 0n || readlinkSync5(path) !== link)
+    const before = lstatSync23(path, { bigint: true });
+    if (!before.isSymbolicLink() || before.uid !== 0n || readlinkSync6(path) !== link)
       return false;
     const directories = ["/", "/private", target].map((directory) => {
-      const stat2 = lstatSync22(directory, { bigint: true });
+      const stat2 = lstatSync23(directory, { bigint: true });
       if (!stat2.isDirectory() || stat2.uid !== 0n)
         throw new Error("Untrusted system alias directory");
       if (directory !== "/private/tmp") {
@@ -44252,23 +44412,23 @@ function isSystemRootAlias(path) {
           throw new Error("Writable system alias directory");
       } else if ((stat2.mode & 0o1000n) === 0n)
         throw new Error("Unprotected system temporary directory");
-      const fd = openSync17(directory, constants14.O_RDONLY | constants14.O_DIRECTORY | constants14.O_NOFOLLOW);
+      const fd = openSync18(directory, constants15.O_RDONLY | constants15.O_DIRECTORY | constants15.O_NOFOLLOW);
       try {
-        if (identity5(fstatSync17(fd, { bigint: true })) !== identity5(stat2) || !hasTrustedDarwinAcl(fd) || identity5(fstatSync17(fd, { bigint: true })) !== identity5(stat2))
+        if (identity5(fstatSync18(fd, { bigint: true })) !== identity5(stat2) || !hasTrustedDarwinAcl(fd) || identity5(fstatSync18(fd, { bigint: true })) !== identity5(stat2))
           throw new Error("Unverified system alias directory ACL");
       } finally {
-        closeSync17(fd);
+        closeSync18(fd);
       }
       return { directory, identity: identity5(stat2) };
     });
-    return realpathSync10(path) === target && readlinkSync5(path) === link && identity5(lstatSync22(path, { bigint: true })) === identity5(before) && directories.every((item) => identity5(lstatSync22(item.directory, { bigint: true })) === item.identity);
+    return realpathSync11(path) === target && readlinkSync6(path) === link && identity5(lstatSync23(path, { bigint: true })) === identity5(before) && directories.every((item) => identity5(lstatSync23(item.directory, { bigint: true })) === item.identity);
   } catch {
     return false;
   }
 }
 function canonicalSystemPath(path) {
   const absolute = resolve18(path), root2 = `/${absolute.split(sep7)[1]}`;
-  if (process.platform !== "darwin" || !["/var", "/tmp", "/etc"].includes(root2) || !lstatSync22(root2, { throwIfNoEntry: false })?.isSymbolicLink())
+  if (process.platform !== "darwin" || !["/var", "/tmp", "/etc"].includes(root2) || !lstatSync23(root2, { throwIfNoEntry: false })?.isSymbolicLink())
     return absolute;
   if (!isSystemRootAlias(root2))
     throw new Error(`Refusing symlink path: ${root2}`);
@@ -44277,7 +44437,7 @@ function canonicalSystemPath(path) {
 function assertSafePath(path) {
   let cursor = resolve18(path);
   while (true) {
-    if (lstatSync22(cursor, { throwIfNoEntry: false })?.isSymbolicLink() && !isSystemRootAlias(cursor))
+    if (lstatSync23(cursor, { throwIfNoEntry: false })?.isSymbolicLink() && !isSystemRootAlias(cursor))
       throw new Error(`Refusing symlink path: ${cursor}`);
     const parent = dirname17(cursor);
     if (parent === cursor)
@@ -44287,17 +44447,17 @@ function assertSafePath(path) {
 }
 function readRootAlias(home, agent) {
   assertSafePath(home);
-  const realHome = realpathSync10(home), alias = join27(realHome, `.${agent}`);
-  const stat2 = lstatSync22(alias, { throwIfNoEntry: false, bigint: true });
+  const realHome = realpathSync11(home), alias = join27(realHome, `.${agent}`);
+  const stat2 = lstatSync23(alias, { throwIfNoEntry: false, bigint: true });
   if (!stat2?.isSymbolicLink())
     throw new Error(`Agent root alias changed after planning: ${alias}`);
-  const link = readlinkSync5(alias), targetPath = resolve18(dirname17(alias), link);
+  const link = readlinkSync6(alias), targetPath = resolve18(dirname17(alias), link);
   assertSafePath(targetPath);
-  const targetStat = lstatSync22(targetPath, { throwIfNoEntry: false });
+  const targetStat = lstatSync23(targetPath, { throwIfNoEntry: false });
   if (!targetStat?.isDirectory())
     throw new Error(`Agent root alias must target an existing directory: ${alias}`);
-  const target = realpathSync10(targetPath), inside = relative5(realHome, target);
-  if (!inside || inside === ".." || inside.startsWith(`..${sep7}`) || isAbsolute19(inside))
+  const target = realpathSync11(targetPath), inside = relative5(realHome, target);
+  if (!inside || inside === ".." || inside.startsWith(`..${sep7}`) || isAbsolute20(inside))
     throw new Error(`Agent root alias target must be inside the real home: ${alias}`);
   return { agent, home: realHome, alias, target, link, aliasIdentity: `${stat2.dev}:${stat2.ino}:${stat2.ctimeNs}`, targetIdentity: `${targetStat.dev}:${targetStat.ino}` };
 }
@@ -44306,7 +44466,7 @@ function rootAliases(home, allowed = false) {
     return [];
   const result = [];
   for (const agent of ["claude", "codex"])
-    if (lstatSync22(join27(home, `.${agent}`), { throwIfNoEntry: false })?.isSymbolicLink())
+    if (lstatSync23(join27(home, `.${agent}`), { throwIfNoEntry: false })?.isSymbolicLink())
       result.push(readRootAlias(home, agent));
   if (result.some((item, index) => result.slice(index + 1).some((other) => item.target === other.target || item.target.startsWith(other.target + sep7) || other.target.startsWith(item.target + sep7))))
     throw new Error("Agent root alias targets must not overlap");
@@ -44323,17 +44483,17 @@ function disabledCodexSkillPaths(config, aliases) {
   const rows = skills.config;
   if (!Array.isArray(rows))
     return [];
-  if (rows.some((entry) => !entry || typeof entry !== "object" || Array.isArray(entry) || typeof entry.enabled !== "boolean" || entry.path !== undefined === (entry.name !== undefined) || entry.path !== undefined && (typeof entry.path !== "string" || !isAbsolute19(entry.path)) || entry.name !== undefined && (typeof entry.name !== "string" || !entry.name.trim())))
+  if (rows.some((entry) => !entry || typeof entry !== "object" || Array.isArray(entry) || typeof entry.enabled !== "boolean" || entry.path !== undefined === (entry.name !== undefined) || entry.path !== undefined && (typeof entry.path !== "string" || !isAbsolute20(entry.path)) || entry.name !== undefined && (typeof entry.name !== "string" || !entry.name.trim())))
     return [];
   if (rows.some((entry) => entry.name !== undefined && entry.enabled !== false))
     return [];
   const settings = new Map;
   for (const entry of rows) {
-    if (typeof entry.path !== "string" || !isAbsolute19(entry.path))
+    if (typeof entry.path !== "string" || !isAbsolute20(entry.path))
       continue;
     let document2;
     try {
-      document2 = realpathSync10(canonicalAgentPath(entry.path, aliases));
+      document2 = realpathSync11(canonicalAgentPath(entry.path, aliases));
     } catch {
       continue;
     }
@@ -44354,16 +44514,16 @@ function recheckRootAliases(aliases) {
 }
 function nativeSourceDigest(path) {
   assertSafePath(path);
-  return lstatSync22(path, { throwIfNoEntry: false }) ? sha4(readNativeBytes(path, 1024 * 1024)) : null;
+  return lstatSync23(path, { throwIfNoEntry: false }) ? sha4(readNativeBytes(path, 1024 * 1024)) : null;
 }
 function readNativeBytes(path, maximum = 64 * 1024 * 1024) {
   assertSafePath(path);
-  const before = lstatSync22(path);
+  const before = lstatSync23(path);
   if (!before.isFile() || before.size > maximum)
     throw new Error("Unsupported or oversized native skill file");
-  const descriptor = openSync17(path, constants14.O_RDONLY | constants14.O_NOFOLLOW | constants14.O_NONBLOCK);
+  const descriptor = openSync18(path, constants15.O_RDONLY | constants15.O_NOFOLLOW | constants15.O_NONBLOCK);
   try {
-    const opened = fstatSync17(descriptor);
+    const opened = fstatSync18(descriptor);
     if (!opened.isFile() || opened.dev !== before.dev || opened.ino !== before.ino || opened.size !== before.size)
       throw new Error("Native skill file changed while reading");
     const bytes = Buffer.allocUnsafe(before.size + 1);
@@ -44374,19 +44534,19 @@ function readNativeBytes(path, maximum = 64 * 1024 * 1024) {
         break;
       length += count;
     }
-    const after = fstatSync17(descriptor), current = lstatSync22(path);
+    const after = fstatSync18(descriptor), current = lstatSync23(path);
     if (current.dev !== opened.dev || current.ino !== opened.ino || current.size !== after.size || current.mtimeMs !== after.mtimeMs || current.ctimeMs !== after.ctimeMs || length !== before.size || after.size !== before.size || after.mtimeMs !== opened.mtimeMs || after.ctimeMs !== opened.ctimeMs)
       throw new Error("Native skill file changed while reading");
     return bytes.subarray(0, length);
   } finally {
-    closeSync17(descriptor);
+    closeSync18(descriptor);
   }
 }
 function treeHash(root2) {
-  const hash2 = createHash23("sha256");
+  const hash2 = createHash24("sha256");
   let bytes = 0, files = 0;
   function visit2(path) {
-    const stat2 = lstatSync22(path);
+    const stat2 = lstatSync23(path);
     if (stat2.isSymbolicLink())
       throw new Error(`Refusing symlink in skill: ${path}`);
     const rel = relative5(root2, path);
@@ -44415,13 +44575,13 @@ function selectNativeMigrationTargets(inventory, manifest) {
   const identities = new Set;
   const selected = [];
   for (const target of manifest.targets) {
-    if (!isAbsolute19(target.projectRoot) || resolve18(target.projectRoot) !== target.projectRoot)
+    if (!isAbsolute20(target.projectRoot) || resolve18(target.projectRoot) !== target.projectRoot)
       throw new Error(`Native migration target project root must be an existing absolute directory: ${target.projectRoot}`);
     const projectRoot = canonicalSystemPath(target.projectRoot), normalized = relative5(projectRoot, resolve18(projectRoot, target.path));
-    if (!existsSync7(projectRoot) || !lstatSync22(projectRoot).isDirectory())
+    if (!existsSync7(projectRoot) || !lstatSync23(projectRoot).isDirectory())
       throw new Error(`Native migration target project root must be an existing absolute directory: ${target.projectRoot}`);
     assertSafePath(projectRoot);
-    if (isAbsolute19(target.path) || target.path.includes("\\") || target.path.includes("\x00") || !normalized || normalized === ".." || normalized.startsWith(`..${sep7}`) || normalized !== target.path || !/^[0-9a-f]{64}$/.test(target.treeSha256))
+    if (isAbsolute20(target.path) || target.path.includes("\\") || target.path.includes("\x00") || !normalized || normalized === ".." || normalized.startsWith(`..${sep7}`) || normalized !== target.path || !/^[0-9a-f]{64}$/.test(target.treeSha256))
       throw new Error(`Invalid native migration target: ${target.path}`);
     const identity5 = `${target.agent}\x00${canonicalSystemPath(projectRoot)}\x00${normalized}`;
     if (identities.has(identity5))
@@ -44464,9 +44624,9 @@ function isCodexSkillDiscoveryInput(path) {
 }
 function inventoryNativeSkills(home = homedir3(), options = {}) {
   home = canonicalSystemPath(home);
-  if (options.reviewedCacheAlias !== undefined && (!options.includeVendor || !isAbsolute19(options.reviewedCacheAlias) || resolve18(options.reviewedCacheAlias) !== options.reviewedCacheAlias))
+  if (options.reviewedCacheAlias !== undefined && (!options.includeVendor || !isAbsolute20(options.reviewedCacheAlias) || resolve18(options.reviewedCacheAlias) !== options.reviewedCacheAlias))
     throw new Error("A reviewed cache alias requires vendor inventory and an exact absolute path");
-  if (options.disabledVendorPaths?.some((path) => !isAbsolute19(path) || resolve18(path) !== path))
+  if (options.disabledVendorPaths?.some((path) => !isAbsolute20(path) || resolve18(path) !== path))
     throw new Error("Disabled vendor paths must be exact absolute paths");
   const reviewedCacheAlias = options.reviewedCacheAlias === undefined ? undefined : canonicalSystemPath(options.reviewedCacheAlias);
   const disabledVendorPaths = new Set((options.disabledVendorPaths ?? []).map(canonicalSystemPath));
@@ -44485,7 +44645,7 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
           roots.push(["sumi", canonicalAgentPath(join27(project, directory, name), aliases)]);
   }
   const installationInputs = options.codexInstallationInputRoots ?? [];
-  if (installationInputs.some((input) => resolve18(input) !== input || realpathSync10(input) !== input || roots.some(([agent, path]) => agent === "codex" && (path === input || path.startsWith(input + sep7) || input.startsWith(path + sep7)))))
+  if (installationInputs.some((input) => resolve18(input) !== input || realpathSync11(input) !== input || roots.some(([agent, path]) => agent === "codex" && (path === input || path.startsWith(input + sep7) || input.startsWith(path + sep7)))))
     throw new Error("Native installation input overlaps an unconditional skill-loading root");
   const entries = [], seen = new Set;
   const cacheScans = new Map, maxAliasProofEntries = 1e4;
@@ -44499,13 +44659,13 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
   }
   let reviewedCacheAliasFound = false;
   function verifiedSiblingCacheAlias(agent, path, parent) {
-    const link = readlinkSync5(path), lexicalTarget = resolve18(parent, link);
-    if (isAbsolute19(link) ? link !== lexicalTarget : dirname17(link) !== ".")
+    const link = readlinkSync6(path), lexicalTarget = resolve18(parent, link);
+    if (isAbsolute20(link) ? link !== lexicalTarget : dirname17(link) !== ".")
       return false;
     const target = canonicalSystemPath(lexicalTarget);
     if (dirname17(target) !== parent)
       return false;
-    if (!lstatSync22(target, { throwIfNoEntry: false })?.isDirectory())
+    if (!lstatSync23(target, { throwIfNoEntry: false })?.isDirectory())
       return false;
     const scan = cacheScans.get(target);
     if (!scan?.complete || scan.entries > maxAliasProofEntries)
@@ -44530,7 +44690,7 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
       return scan;
     if (!existsSync7(path))
       return scan;
-    const stat2 = lstatSync22(path);
+    const stat2 = lstatSync23(path);
     if (stat2.isFile()) {
       if (agent === "sumi" && depth === 1 && path.endsWith(".md"))
         throw new Error("NATIVE_SKILL_DRIFT: flat Sumi skill documents require a dedicated migration adapter");
@@ -44547,7 +44707,7 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
       const marker = join27(path, ".hasna-skills.json");
       if (existsSync7(marker)) {
         try {
-          managed = JSON.parse(readFileSync16(marker, "utf8")).managedBy === "@hasna/skills";
+          managed = JSON.parse(readFileSync17(marker, "utf8")).managedBy === "@hasna/skills";
         } catch {}
       }
       const bridge = (!vendor || agent === "sumi") && isOwnedCliBridge(path, bridgePaths);
@@ -44579,7 +44739,7 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
       if (isVendor && !options.includeVendor)
         continue;
       const child = join27(path, name);
-      if (isVendor && lstatSync22(child, { throwIfNoEntry: false })?.isSymbolicLink()) {
+      if (isVendor && lstatSync23(child, { throwIfNoEntry: false })?.isSymbolicLink()) {
         const target = statSync7(child, { throwIfNoEntry: false });
         if (target?.isFile() || pluginCache && target?.isDirectory() && verifiedSiblingCacheAlias(agent, child, path)) {
           scan.entries++;
@@ -44622,7 +44782,7 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
 }
 function readOptional(path) {
   assertSafePath(path);
-  return existsSync7(path) ? readFileSync16(path, "utf8") : null;
+  return existsSync7(path) ? readFileSync17(path, "utf8") : null;
 }
 function jsonObject(text2, path) {
   if (text2 === null)
@@ -44954,23 +45114,23 @@ function projectedHookAcl(path, observed) {
   if (process.platform !== "darwin")
     return;
   const identity5 = (stat2) => `${stat2.dev}:${stat2.ino}:${stat2.ctimeNs}:${stat2.uid}:${stat2.mode}:${stat2.nlink}:${stat2.size}:${stat2.mtimeNs}`;
-  const fd = openSync17(path, constants14.O_RDONLY | constants14.O_NOFOLLOW | constants14.O_NONBLOCK | (observed.isDirectory() ? constants14.O_DIRECTORY : 0));
+  const fd = openSync18(path, constants15.O_RDONLY | constants15.O_NOFOLLOW | constants15.O_NONBLOCK | (observed.isDirectory() ? constants15.O_DIRECTORY : 0));
   try {
-    if (identity5(fstatSync17(fd, { bigint: true })) !== identity5(observed) || !hasTrustedDarwinAcl(fd, true) || identity5(fstatSync17(fd, { bigint: true })) !== identity5(observed) || identity5(lstatSync22(path, { bigint: true })) !== identity5(observed))
+    if (identity5(fstatSync18(fd, { bigint: true })) !== identity5(observed) || !hasTrustedDarwinAcl(fd, true) || identity5(fstatSync18(fd, { bigint: true })) !== identity5(observed) || identity5(lstatSync23(path, { bigint: true })) !== identity5(observed))
       hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
   } finally {
-    closeSync17(fd);
+    closeSync18(fd);
   }
 }
 function projectedHookExecutable(command, expectedResolved) {
   try {
-    if (!isAbsolute19(command) || /[\0\r\n]/.test(command) || resolve18(command) !== command)
+    if (!isAbsolute20(command) || /[\0\r\n]/.test(command) || resolve18(command) !== command)
       hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
     command = canonicalSystemPath(command);
     const parents3 = (file = command) => {
       const result = [];
       for (let path = dirname17(file);; path = dirname17(path)) {
-        const stat2 = lstatSync22(path, { bigint: true });
+        const stat2 = lstatSync23(path, { bigint: true });
         if (!stat2.isDirectory() || (stat2.mode & 0o022n) !== 0n && !(stat2.uid === 0n && (stat2.mode & 0o1000n) !== 0n))
           hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
         projectedHookAcl(path, stat2);
@@ -44980,13 +45140,22 @@ function projectedHookExecutable(command, expectedResolved) {
       }
       return result;
     };
-    const parentIdentity = parents3(), link = lstatSync22(command, { bigint: true });
+    const parentIdentity = parents3(), link = lstatSync23(command, { bigint: true });
     if (link.uid !== BigInt(process.getuid()) || !link.isFile() && !link.isSymbolicLink())
       hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
     const linkIdentity = (stat2) => `${stat2.dev}:${stat2.ino}:${stat2.mode}:${stat2.uid}:${stat2.ctimeNs}`;
-    const resolved = realpathSync10(command);
+    const target = resolveLauncherCommand(command), resolved = target.entry;
     if (expectedResolved !== undefined && resolved !== expectedResolved)
       hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
+    let launcher, launcherParentIdentity;
+    if (target.pinned) {
+      launcherParentIdentity = parents3(target.physical);
+      launcher = snapshot(target.physical, false);
+      projectedHookAcl(launcher.file, launcher.stat);
+      if (launcher.sha256 !== target.pinned.sha256 || (launcher.stat.mode & 0o100n) === 0n)
+        hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
+      assertPinnedLauncherRuntimeSafe(target.pinned.runtime);
+    }
     const resolvedParentIdentity = parents3(resolved);
     const manifest = snapshot(join27(dirname17(dirname17(resolved)), "package.json"), false, { readOnlyPackage: true });
     projectedHookAcl(manifest.file, manifest.stat);
@@ -44999,8 +45168,15 @@ function projectedHookExecutable(command, expectedResolved) {
       hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
     const recheck = () => {
       try {
-        if (realpathSync10(command) !== resolved || linkIdentity(lstatSync22(command, { bigint: true })) !== linkIdentity(link) || !isDeepStrictEqual8(parents3(), parentIdentity) || !isDeepStrictEqual8(parents3(resolved), resolvedParentIdentity))
+        const again = resolveLauncherCommand(command);
+        if (again.entry !== resolved || again.physical !== target.physical || linkIdentity(lstatSync23(command, { bigint: true })) !== linkIdentity(link) || !isDeepStrictEqual8(parents3(), parentIdentity) || !isDeepStrictEqual8(parents3(resolved), resolvedParentIdentity))
           hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
+        if (launcher) {
+          if (!isDeepStrictEqual8(parents3(target.physical), launcherParentIdentity))
+            hookProjectionRefusal("EXECUTABLE_UNVERIFIED");
+          projectedHookAcl(launcher.file, launcher.stat);
+          unchanged2(launcher);
+        }
         projectedHookAcl(cli.file, cli.stat);
         projectedHookAcl(manifest.file, manifest.stat);
         unchanged2(cli);
@@ -45122,7 +45298,7 @@ function claudeSettingsConsumers(home, path, discoveries, aliases) {
   const canonical7 = (value) => canonicalAgentPath(value, aliases);
   const containsSettings = (root2) => {
     const distance = relative5(canonical7(root2), path);
-    return distance === "" || distance !== ".." && !distance.startsWith(`..${sep7}`) && !isAbsolute19(distance);
+    return distance === "" || distance !== ".." && !distance.startsWith(`..${sep7}`) && !isAbsolute20(distance);
   };
   return discoveries.filter((binding) => binding.agent === "claude" || binding.agent === "opencode" || canonical7(join27(home, AGENT_ADAPTERS[binding.agent].config)) === path || binding.sources.some((source) => canonical7(source.path) === path) || binding.roots.some(containsSettings) || binding.directories?.some((directory) => containsSettings(directory.path))).map((binding) => binding.agent);
 }
@@ -45155,7 +45331,7 @@ function planClaudeHookEventsUpdate(options) {
   recheckRootAliases(aliases);
   const path = canonicalAgentPath(join27(home, ".claude", "settings.json"), aliases);
   assertSafePath(path);
-  const before = lstatSync22(path, { throwIfNoEntry: false }) ? new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(readNativeBytes(path, 1024 * 1024)) : null;
+  const before = lstatSync23(path, { throwIfNoEntry: false }) ? new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(readNativeBytes(path, 1024 * 1024)) : null;
   if ((before === null ? "absent" : sha4(before)) !== options.expectedSettingsSha256)
     throw new Error("Claude settings preimage changed");
   assertClaudeHookEventsReplacement(before, options.replacement, options.events);
@@ -45222,6 +45398,8 @@ function atomicWrite2(path, content) {
 function planAgentSettingsWitnessUpgrade(options) {
   if (options.targetCodexVersion !== undefined && (options.agent !== "codex" || ![2, 3, 4].includes(options.targetCodexVersion)))
     throw new Error("Invalid Codex witness target version");
+  if (options.targetClaudeVersion !== undefined && (options.agent !== "claude" || ![3, 4].includes(options.targetClaudeVersion)))
+    throw new Error("Invalid Claude witness target version");
   const home = resolve18(options.home ?? homedir3()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
   const snapshot2 = readManagedSkillPolicySnapshot(dataDir2);
   if (!snapshot2 || sha4(snapshot2.text) !== options.expectedPolicySha256)
@@ -45269,7 +45447,7 @@ function planAgentSettingsWitnessUpgrade(options) {
       replaced.push(source);
     }
   }
-  const next = options.agent === "sumi" ? upgradeSumiSettingsWitness(previous, options.reviewedPreimage) : options.agent === "claude" ? upgradeClaudeSettingsWitness(previous, options.reviewedPreimage) : options.targetCodexVersion === 4 ? upgradeCodexSettingsWitnessV4(previous, options.reviewedPreimage) : options.targetCodexVersion === 3 ? upgradeCodexSettingsWitnessV3(previous, options.reviewedPreimage) : upgradeCodexSettingsWitness(previous, options.reviewedPreimage);
+  const next = options.agent === "sumi" ? upgradeSumiSettingsWitness(previous, options.reviewedPreimage) : options.agent === "claude" ? options.targetClaudeVersion === 4 ? upgradeClaudeSettingsWitnessV4(previous, options.reviewedPreimage) : upgradeClaudeSettingsWitness(previous, options.reviewedPreimage) : options.targetCodexVersion === 4 ? upgradeCodexSettingsWitnessV4(previous, options.reviewedPreimage) : options.targetCodexVersion === 3 ? upgradeCodexSettingsWitnessV3(previous, options.reviewedPreimage) : upgradeCodexSettingsWitness(previous, options.reviewedPreimage);
   const rebound = [];
   for (const source of binding.sources) {
     if (!replaced.includes(source)) {
@@ -45315,7 +45493,7 @@ function applyAgentIntegrationUnlocked(plan, options = {}, assertCurrent) {
     const upgrade = plan.settingsWitnessUpgrade;
     if (!plan.managedAgentChecks || !plan.observedPolicy?.before)
       throw new Error("Invalid settings witness upgrade plan");
-    const verified = planAgentSettingsWitnessUpgrade({ agent: upgrade.agent, ...upgrade.agent === "codex" ? { targetCodexVersion: upgrade.toHashMode === "codex-settings-v4" ? 4 : upgrade.toHashMode === "codex-settings-v3" ? 3 : 2 } : {}, reviewedPreimage: upgrade.reviewedPreimage, home: plan.managedAgentChecks.home, dataDir: plan.dataDir, expectedPolicySha256: sha4(plan.observedPolicy.before), expectedSettingsSha256: upgrade.currentSettingsSha256 });
+    const verified = planAgentSettingsWitnessUpgrade({ agent: upgrade.agent, ...upgrade.agent === "codex" ? { targetCodexVersion: upgrade.toHashMode === "codex-settings-v4" ? 4 : upgrade.toHashMode === "codex-settings-v3" ? 3 : 2 } : {}, ...upgrade.agent === "claude" && upgrade.toHashMode === "claude-settings-v4" ? { targetClaudeVersion: 4 } : {}, reviewedPreimage: upgrade.reviewedPreimage, home: plan.managedAgentChecks.home, dataDir: plan.dataDir, expectedPolicySha256: sha4(plan.observedPolicy.before), expectedSettingsSha256: upgrade.currentSettingsSha256 });
     if (JSON.stringify(verified.changes) !== JSON.stringify(plan.changes) || JSON.stringify(verified.settingsWitnessUpgrade) !== JSON.stringify(upgrade))
       throw new Error("Settings witness upgrade plan changed");
     provenDiscovery = verified.discoveryBefore[0];
@@ -45346,7 +45524,7 @@ function applyAgentIntegrationUnlocked(plan, options = {}, assertCurrent) {
     if (change.before !== null) {
       const backup = join27(backupRoot, `${index}-${sha4(change.path).slice(0, 12)}.backup`);
       writeFileSync5(backup, change.before, { mode: 384, flag: "wx" });
-      if (readFileSync16(backup, "utf8") !== change.before)
+      if (readFileSync17(backup, "utf8") !== change.before)
         throw new Error("Native configuration preservation readback failed");
       backups.push(backup);
     }
@@ -45409,11 +45587,11 @@ function applyAgentIntegrationUnlocked(plan, options = {}, assertCurrent) {
 }
 function syncArchiveDirectory(path) {
   assertSafePath(path);
-  const descriptor = openSync17(path, constants14.O_RDONLY | constants14.O_DIRECTORY | constants14.O_NOFOLLOW | constants14.O_NONBLOCK);
+  const descriptor = openSync18(path, constants15.O_RDONLY | constants15.O_DIRECTORY | constants15.O_NOFOLLOW | constants15.O_NONBLOCK);
   try {
-    fsyncSync5(descriptor);
+    fsyncSync6(descriptor);
   } finally {
-    closeSync17(descriptor);
+    closeSync18(descriptor);
   }
 }
 function writeArchiveJournal(path, value) {
@@ -45421,18 +45599,18 @@ function writeArchiveJournal(path, value) {
   const temporary = `${path}.skills-${randomUUID4()}`;
   let descriptor;
   try {
-    descriptor = openSync17(temporary, constants14.O_WRONLY | constants14.O_CREAT | constants14.O_EXCL | constants14.O_NOFOLLOW, 384);
+    descriptor = openSync18(temporary, constants15.O_WRONLY | constants15.O_CREAT | constants15.O_EXCL | constants15.O_NOFOLLOW, 384);
     writeFileSync5(descriptor, `${JSON.stringify(value)}
 `);
-    fsyncSync5(descriptor);
-    closeSync17(descriptor);
+    fsyncSync6(descriptor);
+    closeSync18(descriptor);
     descriptor = undefined;
     renameSync4(temporary, path);
     syncArchiveDirectory(dirname17(path));
   } finally {
     if (descriptor !== undefined)
-      closeSync17(descriptor);
-    if (lstatSync22(temporary, { throwIfNoEntry: false }))
+      closeSync18(descriptor);
+    if (lstatSync23(temporary, { throwIfNoEntry: false }))
       unlinkSync5(temporary);
   }
 }
@@ -45478,7 +45656,7 @@ function archiveNativeSkillsUnlocked(inventory, options, assertCurrent) {
   const moved = [];
   const verifyArchive = (entry) => {
     assertSafePath(entry.archive);
-    const stat2 = lstatSync22(entry.archive);
+    const stat2 = lstatSync23(entry.archive);
     if (entry.discoveryOnly ? !stat2.isFile() : !stat2.isDirectory())
       throw new Error("Archive type changed");
     if ((entry.discoveryOnly ? sha4(readNativeBytes(entry.archive)) : treeHash(entry.archive)) !== entry.hash)
@@ -45529,7 +45707,7 @@ function archiveNativeSkillsUnlocked(inventory, options, assertCurrent) {
         recheckRootAliases(aliases);
         assertSafePath(entry.source);
         assertSafePath(entry.archive);
-        if (lstatSync22(entry.source, { throwIfNoEntry: false })) {
+        if (lstatSync23(entry.source, { throwIfNoEntry: false })) {
           entry.status = "recovery-required";
           entry.conflict = "source-occupied";
           continue;
@@ -45546,7 +45724,7 @@ function archiveNativeSkillsUnlocked(inventory, options, assertCurrent) {
           syncArchiveDirectory(dirname17(entry.source));
           unlinkSync5(entry.archive);
         } else {
-          if (lstatSync22(entry.source, { throwIfNoEntry: false })) {
+          if (lstatSync23(entry.source, { throwIfNoEntry: false })) {
             entry.status = "recovery-required";
             entry.conflict = "source-occupied";
             continue;
@@ -45579,12 +45757,12 @@ function isInertCodexPluginCacheCopy(entry, cache, allowedHostPaths, read3) {
       return false;
     const document2 = join27(entry.path, "SKILL.md");
     const inside = relative5(cache, entry.path);
-    if (!inside || isAbsolute19(inside) || inside.split(sep7).some((segment) => segment === ".."))
+    if (!inside || isAbsolute20(inside) || inside.split(sep7).some((segment) => segment === ".."))
       return false;
     assertSafePath(entry.path);
-    if (!lstatSync22(cache).isDirectory() || !lstatSync22(entry.path).isDirectory() || !lstatSync22(document2).isFile())
+    if (!lstatSync23(cache).isDirectory() || !lstatSync23(entry.path).isDirectory() || !lstatSync23(document2).isFile())
       return false;
-    if (realpathSync10.native(cache) !== cache || realpathSync10.native(entry.path) !== entry.path || realpathSync10.native(document2) !== document2)
+    if (realpathSync11.native(cache) !== cache || realpathSync11.native(entry.path) !== entry.path || realpathSync11.native(document2) !== document2)
       return false;
     if (!classifyCodexPluginCacheDocument(document2, cache, read3))
       return false;
@@ -45752,20 +45930,20 @@ import {
   mkdirSync as mkdirSync8,
   mkdtempSync,
   readdirSync as readdirSync10,
-  realpathSync as realpathSync13,
+  realpathSync as realpathSync14,
   renameSync as renameSync5,
   rmSync as rmSync2,
   statSync as statSync10,
   writeFileSync as writeFileSync7
 } from "fs";
-import { basename as basename11, dirname as dirname20, isAbsolute as isAbsolute20, join as join31, normalize as normalize4, relative as relative7, resolve as resolve20, sep as sep10 } from "path";
+import { basename as basename11, dirname as dirname20, isAbsolute as isAbsolute21, join as join31, normalize as normalize4, relative as relative7, resolve as resolve20, sep as sep10 } from "path";
 
 // src/lib/registry-data/index.ts
 var SKILLS = [];
 
 // src/lib/skill-hash.ts
-import { createHash as createHash24 } from "crypto";
-import { existsSync as existsSync8, readdirSync as readdirSync9, readFileSync as readFileSync17, statSync as statSync8 } from "fs";
+import { createHash as createHash25 } from "crypto";
+import { existsSync as existsSync8, readdirSync as readdirSync9, readFileSync as readFileSync18, statSync as statSync8 } from "fs";
 import { join as join28, sep as sep8 } from "path";
 var CONTENT_HASH_ALGORITHM = "sha256";
 var HASH_EXCLUDE_DIRS = new Set([".git", "node_modules", "dist", "build", ".turbo"]);
@@ -45862,7 +46040,7 @@ function collectDirectory(files, dir, rel) {
   }
 }
 function collectFile(files, absolute, rel) {
-  const buffer = readFileSync17(absolute);
+  const buffer = readFileSync18(absolute);
   files.push(normalizeBundleFile(rel.split(sep8).join("/"), buffer));
 }
 function normalizeBundleFile(rel, buffer) {
@@ -45888,13 +46066,13 @@ function* bundleHashParts(files) {
   yield new TextEncoder().encode("\x00");
 }
 function hashBundleFiles(files) {
-  const hash2 = createHash24(CONTENT_HASH_ALGORITHM);
+  const hash2 = createHash25(CONTENT_HASH_ALGORITHM);
   for (const part of bundleHashParts(files))
     hash2.update(part);
   return hash2.digest("hex");
 }
 async function hashBundleFilesCooperatively(files, check) {
-  const hash2 = createHash24(CONTENT_HASH_ALGORITHM);
+  const hash2 = createHash25(CONTENT_HASH_ALGORITHM);
   let bytesSinceYield = 0;
   for (const part of bundleHashParts(files)) {
     for (let offset = 0;offset < part.byteLength; offset += 64 * 1024) {
@@ -46277,10 +46455,10 @@ function validateRuntimeContract(manifest, issues, strict) {
 import {
   cpSync,
   existsSync as existsSync9,
-  lstatSync as lstatSync23,
+  lstatSync as lstatSync24,
   mkdirSync as mkdirSync7,
-  readFileSync as readFileSync18,
-  realpathSync as realpathSync11,
+  readFileSync as readFileSync19,
+  realpathSync as realpathSync12,
   writeFileSync as writeFileSync6
 } from "fs";
 import { basename as basename9, dirname as dirname18, join as join29, relative as relative6 } from "path";
@@ -46344,7 +46522,7 @@ function readManifest(skillPath, fallbackName, normalizeName) {
   const skillMdPath = join29(skillPath, "SKILL.md");
   const pkgPath = join29(skillPath, "package.json");
   const jsonManifest = existsSync9(skillJsonPath) ? readJsonObject(skillJsonPath) : undefined;
-  const frontmatter = existsSync9(skillMdPath) ? parseSkillFrontmatter(readFileSync18(skillMdPath, "utf-8")) ?? undefined : undefined;
+  const frontmatter = existsSync9(skillMdPath) ? parseSkillFrontmatter(readFileSync19(skillMdPath, "utf-8")) ?? undefined : undefined;
   const pkg = existsSync9(pkgPath) ? readJsonObject(pkgPath) : undefined;
   const name = normalizeName(stringField(jsonManifest, "name") ?? frontmatter?.name ?? stringValue(pkg?.name) ?? fallbackName);
   const description = stringField(jsonManifest, "description") ?? frontmatter?.description ?? stringValue(pkg?.description) ?? `${name} skill`;
@@ -46378,7 +46556,7 @@ function readDeclaredSkillVersion(skillPath) {
   const skillMdPath = join29(skillPath, "SKILL.md");
   const pkgPath = join29(skillPath, "package.json");
   const jsonManifest = existsSync9(skillJsonPath) ? readJsonObject(skillJsonPath) : undefined;
-  const frontmatter = existsSync9(skillMdPath) ? parseSkillFrontmatter(readFileSync18(skillMdPath, "utf-8")) ?? undefined : undefined;
+  const frontmatter = existsSync9(skillMdPath) ? parseSkillFrontmatter(readFileSync19(skillMdPath, "utf-8")) ?? undefined : undefined;
   const pkg = existsSync9(pkgPath) ? readJsonObject(pkgPath) : undefined;
   return stringField(jsonManifest, "version") ?? frontmatter?.version ?? stringValue(pkg?.version);
 }
@@ -46499,7 +46677,7 @@ function readExistingSkillJson(skillPath) {
   if (!existsSync9(path))
     return {};
   try {
-    const parsed = JSON.parse(readFileSync18(path, "utf-8"));
+    const parsed = JSON.parse(readFileSync19(path, "utf-8"));
     return isRecord3(parsed) ? parsed : {};
   } catch {
     return {};
@@ -46536,7 +46714,7 @@ function ensurePortableSkillFiles(skillPath, manifest) {
   if (!existsSync9(join29(skillPath, "SKILL.md")))
     writeFileSync6(join29(skillPath, "SKILL.md"), renderSkillMd(next));
   else
-    writeFileSync6(join29(skillPath, "SKILL.md"), ensureSkillMdFrontmatter(readFileSync18(join29(skillPath, "SKILL.md"), "utf-8"), next));
+    writeFileSync6(join29(skillPath, "SKILL.md"), ensureSkillMdFrontmatter(readFileSync19(join29(skillPath, "SKILL.md"), "utf-8"), next));
   if (!existsSync9(join29(skillPath, "AGENTS.md")))
     writeFileSync6(join29(skillPath, "AGENTS.md"), renderAgentsMd(next));
   ensurePackageJson(skillPath, next);
@@ -46597,7 +46775,7 @@ function ensureInstructionSkillFiles(skillPath, manifest) {
     writeFileSync6(join29(skillPath, "SKILL.md"), renderSkillMd(next));
   } else {
     const path = join29(skillPath, "SKILL.md");
-    const content = readFileSync18(path, "utf8");
+    const content = readFileSync19(path, "utf8");
     const declaredName = parseSkillFrontmatter(content)?.name;
     if (declaredName && declaredName !== next.name) {
       writeFileSync6(path, renameInstructionFrontmatter(content, next.name));
@@ -46635,7 +46813,7 @@ function renameInstructionFrontmatter(content, name) {
   return renamed + content.slice(frontmatter[0].length);
 }
 function copySkillDirectory(source, destination) {
-  const resolvedSource = lstatSync23(source).isSymbolicLink() ? realpathSync11(source) : source;
+  const resolvedSource = lstatSync24(source).isSymbolicLink() ? realpathSync12(source) : source;
   mkdirSync7(destination, { recursive: true });
   cpSync(resolvedSource, destination, {
     recursive: true,
@@ -46648,7 +46826,7 @@ function copySkillDirectory(source, destination) {
         if (isExcludedCopyEntry(segments[i], i === 0))
           return false;
       }
-      if (lstatSync23(src).isSymbolicLink())
+      if (lstatSync24(src).isSymbolicLink())
         return false;
       return true;
     }
@@ -46889,7 +47067,7 @@ function inferRuntimeFromCommands(commands) {
   return { ...defaultRuntimeContract(entrypoint), runtime: "python3" };
 }
 function readJsonObject(path) {
-  const parsed = JSON.parse(readFileSync18(path, "utf-8"));
+  const parsed = JSON.parse(readFileSync19(path, "utf-8"));
   if (!isRecord3(parsed))
     throw new Error(`${basename9(path)} must contain a JSON object`);
   return parsed;
@@ -46927,7 +47105,7 @@ function escapeJsString(value) {
 }
 
 // src/lib/authoring-path.ts
-import { lstatSync as lstatSync24, realpathSync as realpathSync12 } from "fs";
+import { lstatSync as lstatSync25, realpathSync as realpathSync13 } from "fs";
 import { homedir as homedir4 } from "os";
 import { basename as basename10, dirname as dirname19, join as join30, resolve as resolve19, sep as sep9 } from "path";
 var NATIVE_DISCOVERY_ROOTS = NATIVE_SKILL_ROOTS.map(([, path]) => path.split("/"));
@@ -46948,14 +47126,14 @@ function nativeRootMatch(path) {
 function physicalPath(path) {
   let cursor = resolve19(path);
   const suffix = [];
-  while (!lstatSync24(cursor, { throwIfNoEntry: false })) {
+  while (!lstatSync25(cursor, { throwIfNoEntry: false })) {
     suffix.unshift(basename10(cursor));
     const parent = dirname19(cursor);
     if (parent === cursor)
       return resolve19(path);
     cursor = parent;
   }
-  return resolve19(realpathSync12(cursor), ...suffix);
+  return resolve19(realpathSync13(cursor), ...suffix);
 }
 function contains(root2, path) {
   return path === root2 || path.startsWith(root2 + sep9);
@@ -46993,7 +47171,7 @@ function configuredRoots(home, explicitHome) {
       continue;
     }
     const nativeHome = join30(home, agent === "opencode" ? ".config/opencode" : `.${agent}`);
-    if (!lstatSync24(nativeHome, { throwIfNoEntry: false }))
+    if (!lstatSync25(nativeHome, { throwIfNoEntry: false }))
       continue;
     roots.push(...resolveAgentDiscovery({ home, agent, canonical: physicalPath }).roots);
   }
@@ -47171,14 +47349,14 @@ function physicalImportPath(path) {
     suffix.unshift(basename11(ancestor));
     ancestor = dirname20(ancestor);
   }
-  return join31(realpathSync13(ancestor), ...suffix);
+  return join31(realpathSync14(ancestor), ...suffix);
 }
 function assertDisjointImportPaths(source, destination) {
-  const sourcePath = realpathSync13(source);
+  const sourcePath = realpathSync14(source);
   const destinationPath = physicalImportPath(destination);
   const contains2 = (parent, child) => {
     const path = relative7(parent, child);
-    return path === "" || !isAbsolute20(path) && path !== ".." && !path.startsWith(`..${sep10}`);
+    return path === "" || !isAbsolute21(path) && path !== ".." && !path.startsWith(`..${sep10}`);
   };
   if (contains2(sourcePath, destinationPath) || contains2(destinationPath, sourcePath)) {
     throw new Error("Source and destination skill directories must not overlap");
@@ -47459,7 +47637,7 @@ function safeIsDirectory(path) {
   }
 }
 function isSafeRelativePath2(value) {
-  if (!value.trim() || isAbsolute20(value))
+  if (!value.trim() || isAbsolute21(value))
     return false;
   const normalized = normalize4(value).replace(/\\/g, "/");
   return normalized !== ".." && !normalized.startsWith("../") && !normalized.includes("/../");
@@ -47486,9 +47664,9 @@ function isSkillsOwnershipMarker(marker) {
 function hasSkillsOwnershipMarker(dir) {
   const path = join32(dir, SYNC_MARKER_FILE);
   try {
-    if (!lstatSync25(path).isFile())
+    if (!lstatSync26(path).isFile())
       return false;
-    const marker = JSON.parse(readFileSync19(path, "utf8"));
+    const marker = JSON.parse(readFileSync20(path, "utf8"));
     return isSkillsOwnershipMarker(marker);
   } catch {
     return false;
@@ -47705,7 +47883,7 @@ function writeManagedSkillDirUnlocked(dir, skillMd, options, assertCurrent) {
   if (dirExists && managed && hasSkillMd && !options.force && isPointerSkillMd(skillMd)) {
     let existingIsStub = false;
     try {
-      existingIsStub = isPointerSkillMd(readFileSync19(skillMdPath, "utf-8"));
+      existingIsStub = isPointerSkillMd(readFileSync20(skillMdPath, "utf-8"));
     } catch {
       existingIsStub = false;
     }
@@ -47755,7 +47933,7 @@ function writeManagedSkillDirUnlocked(dir, skillMd, options, assertCurrent) {
     assertCurrent();
     renameDirectory(candidateDir, dir);
     assertCurrent();
-    if (readFileSync19(skillMdPath, "utf8") !== (skillMd.endsWith(`
+    if (readFileSync20(skillMdPath, "utf8") !== (skillMd.endsWith(`
 `) ? skillMd : `${skillMd}
 `))
       throw new Error("Managed skill readback failed");
@@ -47799,7 +47977,7 @@ function sourceSkillMd(skillPath, name, description, kind, preferBundledDocs = f
   if (kind === undefined || kind === "instruction" || preferBundledDocs) {
     const skillMdPath = join32(skillPath, "SKILL.md");
     if (existsSync11(skillMdPath))
-      return readFileSync19(skillMdPath, "utf-8");
+      return readFileSync20(skillMdPath, "utf-8");
   }
   return pointerSkillMd(name, description);
 }
@@ -47829,7 +48007,7 @@ function normalizeSkillName(name) {
 }
 
 // src/lib/registry.ts
-import { existsSync as existsSync12, readFileSync as readFileSync20, readdirSync as readdirSync12 } from "fs";
+import { existsSync as existsSync12, readFileSync as readFileSync21, readdirSync as readdirSync12 } from "fs";
 import { join as join33 } from "path";
 
 // src/lib/registry-merge.ts
@@ -48045,7 +48223,7 @@ function discoverSkillsInDir(dir, source = "custom") {
         continue;
       let content;
       try {
-        content = readFileSync20(skillMdPath, "utf-8");
+        content = readFileSync21(skillMdPath, "utf-8");
       } catch {
         continue;
       }
@@ -48082,7 +48260,7 @@ function findExtensionSkillPath(name) {
         continue;
       let content;
       try {
-        content = readFileSync20(skillMdPath, "utf-8");
+        content = readFileSync21(skillMdPath, "utf-8");
       } catch {
         continue;
       }
@@ -48147,7 +48325,7 @@ function getAllTags(catalog) {
 }
 
 // src/lib/project-state.ts
-import { existsSync as existsSync13, mkdirSync as mkdirSync10, readFileSync as readFileSync21, writeFileSync as writeFileSync9 } from "fs";
+import { existsSync as existsSync13, mkdirSync as mkdirSync10, readFileSync as readFileSync22, writeFileSync as writeFileSync9 } from "fs";
 import { join as join34 } from "path";
 var VALID_PIN_SOURCES = [
   "official",
@@ -48173,7 +48351,7 @@ function loadProjectConfig(targetDir = process.cwd()) {
   if (!existsSync13(path))
     return null;
   try {
-    return normalizeProjectConfig(JSON.parse(readFileSync21(path, "utf-8")));
+    return normalizeProjectConfig(JSON.parse(readFileSync22(path, "utf-8")));
   } catch {
     return null;
   }
@@ -48360,7 +48538,7 @@ function createLocalSkillManifest(name, generateSkillMd) {
   let skillMd = "";
   const skillMdPath = join35(sourcePath, "SKILL.md");
   if (existsSync14(skillMdPath)) {
-    skillMd = readFileSync22(skillMdPath, "utf-8");
+    skillMd = readFileSync23(skillMdPath, "utf-8");
   } else if (generateSkillMd) {
     skillMd = generateSkillMd(name) ?? "";
   } else {
@@ -48486,7 +48664,7 @@ function resolveAgentSkillMd(name, generateSkillMd) {
   const sourcePath = getSkillPath(name);
   const skillMdPath = join35(sourcePath, "SKILL.md");
   if (existsSync14(skillMdPath))
-    return readFileSync22(skillMdPath, "utf-8");
+    return readFileSync23(skillMdPath, "utf-8");
   if (generateSkillMd)
     return generateSkillMd(name);
   return generateMinimalSkillMd(name);
@@ -48542,14 +48720,14 @@ function readBundledSkillVersion(name) {
   if (!existsSync14(pkgPath))
     return "unknown";
   try {
-    const pkg = JSON.parse(readFileSync22(pkgPath, "utf-8"));
+    const pkg = JSON.parse(readFileSync23(pkgPath, "utf-8"));
     return pkg.version || "unknown";
   } catch {
     return "unknown";
   }
 }
 function readFileIfExists(path) {
-  return existsSync14(path) ? readFileSync22(path, "utf-8") : null;
+  return existsSync14(path) ? readFileSync23(path, "utf-8") : null;
 }
 function loadProjectConfigCompat(targetDir) {
   return loadProjectConfig(targetDir);
@@ -48597,7 +48775,7 @@ function isInstructionSkillDir(skillPath, meta) {
   if (!existsSync15(skillMdPath))
     return false;
   try {
-    return parseSkillFrontmatter(readFileSync23(skillMdPath, "utf-8"))?.kind === "instruction";
+    return parseSkillFrontmatter(readFileSync24(skillMdPath, "utf-8"))?.kind === "instruction";
   } catch {
     return false;
   }
@@ -48648,7 +48826,7 @@ function getSkillRequirements(name) {
   const meta = getSkill(name);
   let dependencies = {};
   try {
-    dependencies = JSON.parse(readFileSync23(join36(skillPath, "package.json"), "utf8")).dependencies || {};
+    dependencies = JSON.parse(readFileSync24(join36(skillPath, "package.json"), "utf8")).dependencies || {};
   } catch {}
   return getSkillRequirementsFromContent(name, texts, dependencies, meta);
 }
@@ -48716,7 +48894,7 @@ async function runSkill(name, args, options = {}) {
   }
   let entryPoint2;
   try {
-    const pkg = JSON.parse(readFileSync23(pkgPath, "utf-8"));
+    const pkg = JSON.parse(readFileSync24(pkgPath, "utf-8"));
     if (pkg.bin) {
       const binValues = Object.values(pkg.bin);
       entryPoint2 = binValues[0];
@@ -48819,7 +48997,7 @@ function generateSkillMd(name) {
   const pkgPath = join36(skillPath, "package.json");
   if (existsSync15(pkgPath)) {
     try {
-      const pkg = JSON.parse(readFileSync23(pkgPath, "utf-8"));
+      const pkg = JSON.parse(readFileSync24(pkgPath, "utf-8"));
       if (pkg.bin) {
         const binKeys = Object.keys(pkg.bin);
         if (binKeys.length > 0)
@@ -48895,7 +49073,7 @@ function extractEnvVars(text2) {
 function readIfExists(path) {
   try {
     if (existsSync15(path)) {
-      return readFileSync23(path, "utf-8");
+      return readFileSync24(path, "utf-8");
     }
   } catch {}
   return null;
@@ -49126,7 +49304,7 @@ async function executeSelectedLocal(selected, options = {}) {
     const { authority: authority2, workspaceId, profileRevision, slug, version, bundleDigest } = selection2;
     const request2 = {
       selection: { authority: authority2, workspaceId, profileId, profileRevision, slug, version, bundleDigest },
-      consumer: { stationId: process.env.HASNA_STATION || stationHostname2(), workspaceDirectory: realpathSync14(options.cwd ?? process.cwd()) }
+      consumer: { stationId: process.env.HASNA_STATION || stationHostname2(), workspaceDirectory: realpathSync15(options.cwd ?? process.cwd()) }
     };
     const grant = await (options.resolveExecutionGrant ?? resolveExecutionGrant)(request2);
     if (!grant || !grantIdentifier(grant.policyRevision) || !grantIdentifier(grant.grantId))
@@ -49143,7 +49321,7 @@ async function executeSelectedLocal(selected, options = {}) {
     selection: selection2,
     target: "local",
     runtime: runtimeName,
-    inputDigest: `sha256:${createHash25("sha256").update(input).digest("hex")}`,
+    inputDigest: `sha256:${createHash26("sha256").update(input).digest("hex")}`,
     runDirectory,
     ...executionGrant ? { executionGrant } : {},
     ...bindings ? { secretBinding: { schema: bindings.schema, selection: bindings.selection, consumer: bindings.consumer, secretsAuthority: bindings.secretsAuthority, bindings: bindings.bindings } } : {},
@@ -58433,7 +58611,7 @@ var import_node_http_handler2 = __toESM(require_dist_cjs6(), 1);
 
 // node_modules/@aws-sdk/checksums/dist-cjs/submodules/sha/index.js
 var { toUint8Array: toUint8Array2, concatBytes } = require_serde();
-var { createHmac: createHmac2, createHash: createHash27 } = __require("crypto");
+var { createHmac: createHmac2, createHash: createHash28 } = __require("crypto");
 var { Sha256: Sha2562, Sha256Js, Sha256Node } = require_checksum();
 var BLOCK2 = 64;
 var DIGEST_LENGTH = 20;
@@ -58602,7 +58780,7 @@ class Sha1Js {
 }
 var hasNativeCrypto = (() => {
   try {
-    createHash27("sha1");
+    createHash28("sha1");
     return true;
   } catch {
     return false;
@@ -58642,7 +58820,7 @@ function buildNativeClass() {
       this.finished = false;
     }
     createHash() {
-      return this.secret ? createHmac2("sha1", toBuffer(this.secret)) : createHash27("sha1");
+      return this.secret ? createHmac2("sha1", toBuffer(this.secret)) : createHash28("sha1");
     }
   };
 }
@@ -58917,11 +59095,11 @@ class ArtifactStorage {
     }));
     return await bodyToText(response.Body);
   }
-  async putBundle(orgId, sha2562, bytes, contentType = "application/gzip") {
-    assertSha256(sha2562);
+  async putBundle(orgId, sha2563, bytes, contentType = "application/gzip") {
+    assertSha256(sha2563);
     if (!this.bucket)
       return { storageKind: "db", bytes };
-    const key = this.bundleKeyFor(orgId, sha2562);
+    const key = this.bundleKeyFor(orgId, sha2563);
     await this.s3.send(new PutObjectCommand({
       Bucket: this.bucket,
       Key: key,
@@ -58941,11 +59119,11 @@ class ArtifactStorage {
     }));
     return await bodyToBytes(response.Body);
   }
-  async deleteBundle(orgId, sha2562) {
+  async deleteBundle(orgId, sha2563) {
     if (!this.bucket || !this.s3)
       return;
-    assertSha256(sha2562);
-    await this.s3.send(new DeleteObjectCommand({ Bucket: this.bucket, Key: this.bundleKeyFor(orgId, sha2562) }));
+    assertSha256(sha2563);
+    await this.s3.send(new DeleteObjectCommand({ Bucket: this.bucket, Key: this.bundleKeyFor(orgId, sha2563) }));
   }
   async deleteObject(artifact) {
     if (!this.bucket || !this.s3)
@@ -58992,8 +59170,8 @@ class ArtifactStorage {
   versionKeyFor(orgId, slug, version2, file) {
     return `${this.prefix}/skills/${encodeURIComponent(orgId)}/${encodeURIComponent(slug)}/${encodeURIComponent(version2)}/${file}`;
   }
-  bundleKeyFor(orgId, sha2562) {
-    return `${this.prefix}/bundles/${encodeURIComponent(orgId)}/${sha2562}.tar.gz`;
+  bundleKeyFor(orgId, sha2563) {
+    return `${this.prefix}/bundles/${encodeURIComponent(orgId)}/${sha2563}.tar.gz`;
   }
 }
 function assertSha256(value) {
@@ -59214,7 +59392,7 @@ import { mkdirSync as mkdirSync13 } from "fs";
 import { dirname as dirname26 } from "path";
 
 // src/server/database-url.ts
-import { isAbsolute as isAbsolute21, join as join39 } from "path";
+import { isAbsolute as isAbsolute22, join as join39 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 var DEFAULT_SQLITE_FILENAME2 = "server.db";
 var SQLITE_MEMORY_PATH = ":memory:";
@@ -59250,7 +59428,7 @@ function resolveDatabaseTarget(raw) {
     throw new Error(`unsupported database scheme "${scheme}:". Supported: postgres://, postgresql://, sqlite:, file:, ` + `an absolute or relative path to a .db/.sqlite file, ":memory:", or "memory:" (non-durable, tests only). ` + `Leave the setting empty to use the default SQLite database at ${defaultSqlitePath()}.`);
   }
   if (looksLikeSqlitePath(value)) {
-    const path = isAbsolute21(value) ? value : join39(process.cwd(), value);
+    const path = isAbsolute22(value) ? value : join39(process.cwd(), value);
     return { kind: "sqlite", path, durable: true, label: `sqlite (${path})` };
   }
   throw new Error(`could not resolve a database backend from "${value}". Use postgres://\u2026, sqlite:\u2026, an absolute or ` + `relative path ending in ${SQLITE_EXTENSIONS.join("/")}, ":memory:", or leave it empty for the ` + `default SQLite database at ${defaultSqlitePath()}.`);
@@ -59274,7 +59452,7 @@ function sqlitePathFromUrl(value, scheme) {
     }
     return rest.slice(2).replace(/^\/\/+/, "/");
   }
-  return isAbsolute21(rest) ? rest : join39(process.cwd(), rest);
+  return isAbsolute22(rest) ? rest : join39(process.cwd(), rest);
 }
 function looksLikeSqlitePath(value) {
   if (value.includes("/"))
@@ -59506,13 +59684,13 @@ class PostgresSkillSelectionStore {
 
 // src/server/sqlite-store.ts
 import { randomUUID as randomUUID8 } from "crypto";
-import { mkdirSync as mkdirSync12, readFileSync as readFileSync25, readdirSync as readdirSync13 } from "fs";
+import { mkdirSync as mkdirSync12, readFileSync as readFileSync26, readdirSync as readdirSync13 } from "fs";
 import { dirname as dirname25, join as join41 } from "path";
 
 // src/server/auth.ts
-import { createHash as createHash28 } from "crypto";
+import { createHash as createHash29 } from "crypto";
 function hashApiKey(token) {
-  return createHash28("sha256").update(token).digest("hex");
+  return createHash29("sha256").update(token).digest("hex");
 }
 function bearerToken(request2) {
   const header = request2.headers.get("authorization") || "";
@@ -59836,7 +60014,7 @@ function validOperatorScopeEnrollmentInput(input) {
 }
 
 // src/lib/revision.ts
-import { createHash as createHash29 } from "crypto";
+import { createHash as createHash30 } from "crypto";
 var REVISION_ID_PATTERN = /^[0-9a-f]{64}$/;
 function revisionIdOf(content) {
   const canonicalContent = {
@@ -59858,7 +60036,7 @@ function revisionIdOf(content) {
     canonicalContent.replacementSlug = content.replacementSlug ?? null;
   }
   const canonical7 = JSON.stringify(canonicalContent);
-  return createHash29("sha256").update(canonical7).digest("hex");
+  return createHash30("sha256").update(canonical7).digest("hex");
 }
 function revisionIdOfRecord(record4) {
   return revisionIdOf(record4);
@@ -60467,8 +60645,8 @@ class SqliteSkillsStore {
       return purged;
     })();
   }
-  async getSkillBundle(principal, sha2562) {
-    const row = this.get("SELECT * FROM skills_bundles WHERE org_id = ? AND sha256 = ? LIMIT 1", [principal.orgId, sha2562]);
+  async getSkillBundle(principal, sha2563) {
+    const row = this.get("SELECT * FROM skills_bundles WHERE org_id = ? AND sha256 = ? LIMIT 1", [principal.orgId, sha2563]);
     return row ? rowToSkillBundle(row) : null;
   }
   async listSkillVersions(principal, slug) {
@@ -60532,11 +60710,11 @@ class SqliteSkillsStore {
   async listPublishedSlugs(principal) {
     return this.all("SELECT slug FROM skills_registry WHERE org_id = ? AND tombstoned_at IS NULL ORDER BY slug ASC", [principal.orgId]).map((row) => String(row.slug));
   }
-  collectOrphanBundle(orgId, sha2562) {
-    const referenced = this.get("SELECT 1 AS present FROM skills_registry WHERE org_id = ? AND bundle_sha256 = ? LIMIT 1", [orgId, sha2562]) ?? this.get("SELECT 1 AS present FROM skills_versions WHERE org_id = ? AND bundle_sha256 = ? LIMIT 1", [orgId, sha2562]);
+  collectOrphanBundle(orgId, sha2563) {
+    const referenced = this.get("SELECT 1 AS present FROM skills_registry WHERE org_id = ? AND bundle_sha256 = ? LIMIT 1", [orgId, sha2563]) ?? this.get("SELECT 1 AS present FROM skills_versions WHERE org_id = ? AND bundle_sha256 = ? LIMIT 1", [orgId, sha2563]);
     if (referenced)
       return;
-    this.db.run("DELETE FROM skills_bundles WHERE org_id = ? AND sha256 = ?", [orgId, sha2562]);
+    this.db.run("DELETE FROM skills_bundles WHERE org_id = ? AND sha256 = ?", [orgId, sha2563]);
   }
   get(sql, params) {
     return this.db.query(sql).get(...params) ?? null;
@@ -60562,7 +60740,7 @@ function applySqliteMigrations(db, migrationsDir = resolveMigrationsDir("sqlite"
   const appliedNow = [];
   for (const file of files) {
     const version2 = file.replace(/\.sql$/, "");
-    const text2 = readFileSync25(join41(migrationsDir, file), "utf8");
+    const text2 = readFileSync26(join41(migrationsDir, file), "utf8");
     const apply = db.transaction(() => {
       const already = db.query("SELECT 1 AS present FROM schema_migrations WHERE version = ? LIMIT 1").get(version2);
       if (already)
@@ -60942,7 +61120,7 @@ function nextMonthPrefix(monthPrefix) {
 }
 
 // src/server/skills-api.ts
-import { createHash as createHash30 } from "crypto";
+import { createHash as createHash31 } from "crypto";
 var SLUG_PATTERN = /^[a-z0-9][a-z0-9._-]*$/;
 var SHA256_HEX2 = /^[0-9a-f]{64}$/;
 var MAX_SLUG_LENGTH = 128;
@@ -61132,19 +61310,19 @@ async function parsePublishRequest(request2, config) {
     if (bundleBytes.byteLength === 0) {
       throw new SkillRequestError(400, "BUNDLE_EMPTY", "the uploaded bundle is empty");
     }
-    const sha2562 = createHash30("sha256").update(bundleBytes).digest("hex");
+    const sha2563 = createHash31("sha256").update(bundleBytes).digest("hex");
     const claimed = optionalString(manifest.bundleSha256);
     if (claimed)
       assertSha2562(claimed);
-    if (claimed && claimed !== sha2562) {
-      throw new SkillRequestError(400, "BUNDLE_DIGEST_MISMATCH", `bundle digest ${sha2562} does not match the declared ${claimed}`);
+    if (claimed && claimed !== sha2563) {
+      throw new SkillRequestError(400, "BUNDLE_DIGEST_MISMATCH", `bundle digest ${sha2563} does not match the declared ${claimed}`);
     }
     const input = buildPublishInput(manifest);
     return {
       input: {
         ...input,
         bundle: {
-          sha256: sha2562,
+          sha256: sha2563,
           byteSize: bundleBytes.byteLength,
           contentType: optionalString(manifest.bundleContentType) ?? "application/gzip",
           storageKind: "db"
@@ -61229,10 +61407,10 @@ async function storePublishedSkill(store, artifactStorage, principal, parsed, ex
 async function deletePublishedSkill(store, artifactStorage, principal, slug, tombstoneWindowMs) {
   return store.deleteSkill(principal, slug, tombstoneWindowMs);
 }
-async function discardCollectedObject(store, artifactStorage, principal, sha2562) {
-  if (await store.getSkillBundle(principal, sha2562))
+async function discardCollectedObject(store, artifactStorage, principal, sha2563) {
+  if (await store.getSkillBundle(principal, sha2563))
     return;
-  await artifactStorage.deleteBundle(principal.orgId, sha2562);
+  await artifactStorage.deleteBundle(principal.orgId, sha2563);
 }
 async function readPublishedBundle(store, artifactStorage, principal, slug) {
   const record4 = await store.getSkill(principal, slug);
@@ -61247,7 +61425,7 @@ async function readPublishedBundle(store, artifactStorage, principal, slug) {
   if (!bytes) {
     throw new SkillRequestError(503, "BUNDLE_BACKEND_UNAVAILABLE", "bundle storage backend unavailable");
   }
-  const actual = createHash30("sha256").update(bytes).digest("hex");
+  const actual = createHash31("sha256").update(bytes).digest("hex");
   if (actual !== record4.bundleSha256) {
     throw new SkillRequestError(500, "BUNDLE_DIGEST_DRIFT", `stored bundle for '${slug}' hashes to ${actual} but was published as ${record4.bundleSha256}`);
   }
@@ -61395,7 +61573,7 @@ async function readSkillVersionBundle(store, artifactStorage, principal, slug, v
   const bytes = await artifactStorage.readBundle(bundle2);
   if (!bytes)
     throw new SkillRequestError(503, "BUNDLE_BACKEND_UNAVAILABLE", "bundle storage backend unavailable");
-  const actual = createHash30("sha256").update(bytes).digest("hex");
+  const actual = createHash31("sha256").update(bytes).digest("hex");
   if (actual !== found.bundleSha256) {
     throw new SkillRequestError(500, "BUNDLE_DIGEST_DRIFT", `stored bundle for '${slug}@${version2}' hashes to ${actual} but was published as ${found.bundleSha256}`);
   }
@@ -62111,7 +62289,7 @@ class RuntimeExecutionStore {
 }
 
 // src/sdk/execution/admission.ts
-import { createHash as createHash32 } from "crypto";
+import { createHash as createHash33 } from "crypto";
 
 // src/sdk/execution/image-profile.ts
 class ImageProfileResolutionError extends Error {
@@ -62723,11 +62901,11 @@ function ownedAdmission(admission) {
   };
 }
 function digestInput(input) {
-  return createHash32("sha256").update(canonicalJson2(input)).digest("hex");
+  return createHash33("sha256").update(canonicalJson2(input)).digest("hex");
 }
 
 // src/sdk/execution/dispatchers/ecs.ts
-import { createHash as createHash33 } from "crypto";
+import { createHash as createHash34 } from "crypto";
 
 // src/sdk/execution/state-machine.ts
 var LEGAL_TRANSITIONS = {
@@ -66127,13 +66305,13 @@ function observedTask(states, taskArn) {
   return state2.lastStatus === "STOPPED" || LIVE_TASK_STATUSES.has(state2.lastStatus) ? state2 : undefined;
 }
 function clientTokenFor(runId3, attemptId) {
-  return createHash33("sha256").update(`${runId3}\x00${attemptId}`).digest("hex").slice(0, CLIENT_TOKEN_BYTES * 2);
+  return createHash34("sha256").update(`${runId3}\x00${attemptId}`).digest("hex").slice(0, CLIENT_TOKEN_BYTES * 2);
 }
 function startedByFor(runId3, attemptNumber) {
   return `skills-exec/${runId3}/a${attemptNumber}`;
 }
 function requestDigestFor(admission, attemptId) {
-  return createHash33("sha256").update(canonicalJson2({ admission, attemptId })).digest("hex");
+  return createHash34("sha256").update(canonicalJson2({ admission, attemptId })).digest("hex");
 }
 
 class EcsDispatcher {
@@ -66429,10 +66607,10 @@ function validText(value) {
 }
 
 // src/server/runtime-policy.ts
-import { createHash as createHash35, createHmac as createHmac3, timingSafeEqual as timingSafeEqual2 } from "crypto";
+import { createHash as createHash36, createHmac as createHmac3, timingSafeEqual as timingSafeEqual2 } from "crypto";
 
 // src/server/runtime-pure-contract.ts
-import { createHash as createHash34 } from "crypto";
+import { createHash as createHash35 } from "crypto";
 var PURE_DESCRIPTOR = Object.freeze({
   id: "regex-test.v1",
   runtime: "bun",
@@ -66456,7 +66634,7 @@ var PURE_LIMITS = Object.freeze({
   maxArtifactsBytes: 0,
   maxConcurrency: 1
 });
-var hash2 = (bytes) => createHash34("sha256").update(bytes).digest("hex");
+var hash2 = (bytes) => createHash35("sha256").update(bytes).digest("hex");
 var object7 = (v2) => {
   if (!v2 || typeof v2 !== "object" || Array.isArray(v2))
     throw Error("Pure contract requires an object");
@@ -66685,7 +66863,7 @@ function verifyRuntimeToken(token, key, admission, attempt, now = Date.now()) {
   const actual = Buffer.from(token);
   return actual.length === expected.length && timingSafeEqual2(actual, expected);
 }
-var hashBytes = (bytes) => createHash35("sha256").update(bytes).digest("hex");
+var hashBytes = (bytes) => createHash36("sha256").update(bytes).digest("hex");
 
 // src/server/runtime-api.ts
 async function createRuntimeService(options) {
@@ -66786,8 +66964,8 @@ function publicJob(job) {
     artifacts: (job.result?.artifacts ?? []).map(({ base64, ...meta }) => meta)
   };
 }
-function findReview(service, tenant, slug, version2, sha2562) {
-  return service.config.reviewedBundles.find((b4) => b4.slug === slug && b4.version === version2 && b4.sha256 === sha2562 && (!b4.executionContract || b4.tenantId === tenant && b4.imageDigest === service.config.imageDigest));
+function findReview(service, tenant, slug, version2, sha2563) {
+  return service.config.reviewedBundles.find((b4) => b4.slug === slug && b4.version === version2 && b4.sha256 === sha2563 && (!b4.executionContract || b4.tenantId === tenant && b4.imageDigest === service.config.imageDigest));
 }
 function sameContract(admission, contract, image) {
   return digestInput(admission.executionContract ?? null) === digestInput(contract ?? null) && (!contract || admission.runtimeImageDigest === image);
@@ -67641,8 +67819,8 @@ class MemorySkillsStore {
     }
     return purged;
   }
-  async getSkillBundle(principal, sha2562) {
-    const bundle2 = this.bundles.get(skillKey(principal.orgId, sha2562));
+  async getSkillBundle(principal, sha2563) {
+    const bundle2 = this.bundles.get(skillKey(principal.orgId, sha2563));
     return bundle2 && bundle2.orgId === principal.orgId ? bundle2 : null;
   }
   async pinSkill(principal, slug, metadata = {}) {
@@ -67685,10 +67863,10 @@ class MemorySkillsStore {
   async listPublishedSlugs(principal) {
     return Array.from(this.skills.values()).filter((skill) => skill.orgId === principal.orgId && !skill.tombstonedAt).map((skill) => skill.slug).sort();
   }
-  collectOrphanBundle(orgId, sha2562) {
-    const referenced = Array.from(this.skills.values()).some((skill) => skill.orgId === orgId && skill.bundleSha256 === sha2562) || Array.from(this.versions.values()).some((v2) => v2.orgId === orgId && v2.bundleSha256 === sha2562);
+  collectOrphanBundle(orgId, sha2563) {
+    const referenced = Array.from(this.skills.values()).some((skill) => skill.orgId === orgId && skill.bundleSha256 === sha2563) || Array.from(this.versions.values()).some((v2) => v2.orgId === orgId && v2.bundleSha256 === sha2563);
     if (!referenced)
-      this.bundles.delete(skillKey(orgId, sha2562));
+      this.bundles.delete(skillKey(orgId, sha2563));
   }
   patchRun(runId3, patch) {
     const run = this.runs.get(runId3);
@@ -68349,8 +68527,8 @@ class PostgresSkillsStore {
       return purged;
     });
   }
-  async getSkillBundle(principal, sha2562) {
-    const rows = await this.sql`SELECT * FROM skills_bundles WHERE org_id = ${principal.orgId} AND sha256 = ${sha2562} LIMIT 1`;
+  async getSkillBundle(principal, sha2563) {
+    const rows = await this.sql`SELECT * FROM skills_bundles WHERE org_id = ${principal.orgId} AND sha256 = ${sha2563} LIMIT 1`;
     return rows[0] ? rowToSkillBundle(rows[0]) : null;
   }
   async listSkillVersions(principal, slug) {
@@ -68444,12 +68622,12 @@ class PostgresSkillsStore {
     `;
     return rows.map((row) => String(row.slug));
   }
-  async collectOrphanBundle(orgId, sha2562) {
+  async collectOrphanBundle(orgId, sha2563) {
     await this.sql`
       DELETE FROM skills_bundles
-      WHERE org_id = ${orgId} AND sha256 = ${sha2562}
-        AND NOT EXISTS (SELECT 1 FROM skills_registry WHERE org_id = ${orgId} AND bundle_sha256 = ${sha2562})
-        AND NOT EXISTS (SELECT 1 FROM skills_versions WHERE org_id = ${orgId} AND bundle_sha256 = ${sha2562})
+      WHERE org_id = ${orgId} AND sha256 = ${sha2563}
+        AND NOT EXISTS (SELECT 1 FROM skills_registry WHERE org_id = ${orgId} AND bundle_sha256 = ${sha2563})
+        AND NOT EXISTS (SELECT 1 FROM skills_versions WHERE org_id = ${orgId} AND bundle_sha256 = ${sha2563})
     `;
   }
 }
@@ -73061,7 +73239,7 @@ var localRunExecutor = {
 // src/sdk/storage.ts
 var artifactStorageSeam = ArtifactStorage;
 // src/sdk/outputs.ts
-import { createHash as createHash36 } from "crypto";
+import { createHash as createHash37 } from "crypto";
 class DatabaseOnlyObjectStore {
   usesS3 = false;
   async materialize(run, artifact, body4) {
@@ -73108,7 +73286,7 @@ function createGovernedArtifactWriter(options) {
       const stamped = {
         ...meta,
         byteSize: outputBytes,
-        sha256: createHash36("sha256").update(persistedBytes).digest("hex"),
+        sha256: createHash37("sha256").update(persistedBytes).digest("hex"),
         visibility: options.visibility ?? config.defaultVisibility,
         ...config.artifactTtlSeconds !== undefined ? { expiresAt: expiresAtFor(createdAt, config.artifactTtlSeconds) } : {}
       };
@@ -91875,7 +92053,7 @@ function date4(params) {
   return _coercedDate(ZodDate2, params);
 }
 // src/lib/canonical-json.ts
-import { createHash as createHash37 } from "crypto";
+import { createHash as createHash38 } from "crypto";
 function canonicalJson3(value, maximumBytes = 2 * 1024 * 1024) {
   return canonicalJsonAtDepth(value, maximumBytes, 64);
 }
@@ -91919,7 +92097,7 @@ function canonicalJsonAtDepth(value, maximumBytes, maximumDepth) {
   return visit3(value, 0);
 }
 function canonicalJsonSha256(value, maximumBytes) {
-  return createHash37("sha256").update(canonicalJson3(value, maximumBytes)).digest("hex");
+  return createHash38("sha256").update(canonicalJson3(value, maximumBytes)).digest("hex");
 }
 
 // src/lib/remote-recurring-contract.ts
@@ -94033,7 +94211,7 @@ async function requestInvitationEmail(origin, action, input2) {
 }
 
 // src/lib/remote-private-publications.ts
-import { createHash as createHash38 } from "crypto";
+import { createHash as createHash39 } from "crypto";
 var PRIVATE_PUBLICATION_MAX_BYTES = 16 * 1024 * 1024;
 var failures2 = {
   INVALID_REQUEST: [400, "The publication request is invalid."],
@@ -94080,7 +94258,7 @@ var hash4 = (v2) => typeof v2 === "string" && /^[a-f0-9]{64}$/.test(v2);
 var record10 = (v2) => !!v2 && typeof v2 === "object" && !Array.isArray(v2);
 var exact = (v2, keys3) => record10(v2) && Object.keys(v2).sort().join(",") === keys3.sort().join(",");
 var date5 = (v2) => typeof v2 === "string" && /^\d{4}-\d\d-\d\dT[0-9:.]+(?:Z|[+-](?:[01]\d|2[0-3]):[0-5]\d)$/.test(v2) && Number.isFinite(Date.parse(v2));
-var publicationSha256 = (bytes) => createHash38("sha256").update(bytes).digest("hex");
+var publicationSha256 = (bytes) => createHash39("sha256").update(bytes).digest("hex");
 function checkedPublicationDeclaration(value) {
   if (!exact(value, ["idempotencyKey", "version", "expectedCurrentVersionId", "manifestText", "archiveSha256", "archiveByteSize"]) || !publicationUuid(value.idempotencyKey) || !(value.expectedCurrentVersionId === null || publicationUuid(value.expectedCurrentVersionId)) || typeof value.version !== "string" || !value.version || value.version.length > 128 || /[\p{Cc}\p{Cs}]/u.test(value.version) || typeof value.manifestText !== "string" || Buffer.byteLength(value.manifestText) > 16384 || !hash4(value.archiveSha256) || !Number.isSafeInteger(value.archiveByteSize) || Number(value.archiveByteSize) < 1 || Number(value.archiveByteSize) > PRIVATE_PUBLICATION_MAX_BYTES)
     return bad();
@@ -94562,23 +94740,23 @@ class RemoteSkillsAuthClient {
   }
 }
 // src/lib/private-publication-recovery.ts
-import { constants as constants15, closeSync as closeSync18, fsyncSync as fsyncSync6, fstatSync as fstatSync18, lstatSync as lstatSync26, mkdirSync as mkdirSync15, openSync as openSync18, readSync as readSync13, realpathSync as realpathSync15, renameSync as renameSync7, unlinkSync as unlinkSync6, writeFileSync as writeFileSync11 } from "fs";
-import { dirname as dirname28, isAbsolute as isAbsolute22, join as join43, resolve as resolve23 } from "path";
+import { constants as constants16, closeSync as closeSync19, fsyncSync as fsyncSync7, fstatSync as fstatSync19, lstatSync as lstatSync27, mkdirSync as mkdirSync15, openSync as openSync19, readSync as readSync13, realpathSync as realpathSync16, renameSync as renameSync7, unlinkSync as unlinkSync6, writeFileSync as writeFileSync11 } from "fs";
+import { dirname as dirname28, isAbsolute as isAbsolute23, join as join43, resolve as resolve23 } from "path";
 import { randomUUID as randomUUID12 } from "crypto";
 var fail2 = () => {
   throw new PrivatePublicationError("PUBLICATION_RECOVERY_INVALID", "The recovery directory is invalid or changed. Preserve it and inspect the existing intent; do not start a replacement automatically.");
 };
 function safeDirectory(directory) {
-  if (!isAbsolute22(directory) || directory !== resolve23(directory) || realpathSync15(directory) !== directory)
+  if (!isAbsolute23(directory) || directory !== resolve23(directory) || realpathSync16(directory) !== directory)
     return fail2();
   for (let path2 = directory;; path2 = dirname28(path2)) {
-    const stat2 = lstatSync26(path2);
+    const stat2 = lstatSync27(path2);
     if (!stat2.isDirectory() || stat2.isSymbolicLink())
       return fail2();
     if (path2 === dirname28(path2))
       break;
   }
-  const own2 = lstatSync26(directory);
+  const own2 = lstatSync27(directory);
   if ((own2.mode & 63) !== 0 || process.getuid && own2.uid !== process.getuid())
     return fail2();
   return { dev: own2.dev, ino: own2.ino };
@@ -94590,9 +94768,9 @@ function unchangedDirectory(directory, identity5) {
 }
 function readOwned(directory, name, max) {
   const identity5 = safeDirectory(directory), file2 = join43(directory, name);
-  const fd = openSync18(file2, constants15.O_RDONLY | constants15.O_NOFOLLOW);
+  const fd = openSync19(file2, constants16.O_RDONLY | constants16.O_NOFOLLOW);
   try {
-    const stat2 = fstatSync18(fd);
+    const stat2 = fstatSync19(fd);
     if (!stat2.isFile() || stat2.nlink !== 1 || stat2.size > max || stat2.size < 1 || (stat2.mode & 63) !== 0 || process.getuid && stat2.uid !== process.getuid())
       return fail2();
     const buffer = Buffer.alloc(Math.min(max, stat2.size) + 1);
@@ -94603,22 +94781,22 @@ function readOwned(directory, name, max) {
         break;
       length += count;
     }
-    const bytes = buffer.subarray(0, length), after = fstatSync18(fd);
+    const bytes = buffer.subarray(0, length), after = fstatSync19(fd);
     unchangedDirectory(directory, identity5);
     if (bytes.length !== stat2.size || stat2.size !== after.size || stat2.mtimeMs !== after.mtimeMs || stat2.ctimeMs !== after.ctimeMs)
       return fail2();
     return bytes;
   } finally {
-    closeSync18(fd);
+    closeSync19(fd);
   }
 }
 function writeOwned(directory, name, bytes) {
-  const fd = openSync18(join43(directory, name), constants15.O_WRONLY | constants15.O_CREAT | constants15.O_EXCL | constants15.O_NOFOLLOW, 384);
+  const fd = openSync19(join43(directory, name), constants16.O_WRONLY | constants16.O_CREAT | constants16.O_EXCL | constants16.O_NOFOLLOW, 384);
   try {
     writeFileSync11(fd, bytes);
-    fsyncSync6(fd);
+    fsyncSync7(fd);
   } finally {
-    closeSync18(fd);
+    closeSync19(fd);
   }
 }
 function save(directory, value) {
@@ -94627,11 +94805,11 @@ function save(directory, value) {
 `);
   unchangedDirectory(directory, identity5);
   renameSync7(join43(directory, temporary), join43(directory, "receipt.json"));
-  const fd = openSync18(directory, constants15.O_RDONLY | constants15.O_NOFOLLOW);
+  const fd = openSync19(directory, constants16.O_RDONLY | constants16.O_NOFOLLOW);
   try {
-    fsyncSync6(fd);
+    fsyncSync7(fd);
   } finally {
-    closeSync18(fd);
+    closeSync19(fd);
   }
 }
 function bind(client2, receipt) {
@@ -94642,20 +94820,20 @@ async function locked(directory, action) {
   const identity5 = safeDirectory(directory), file2 = join43(directory, "operation.lock");
   let fd;
   try {
-    fd = openSync18(file2, constants15.O_WRONLY | constants15.O_CREAT | constants15.O_EXCL | constants15.O_NOFOLLOW, 384);
+    fd = openSync19(file2, constants16.O_WRONLY | constants16.O_CREAT | constants16.O_EXCL | constants16.O_NOFOLLOW, 384);
   } catch {
     throw new PrivatePublicationError("PUBLICATION_RECOVERY_BUSY", "Another operation holds this recovery directory. If it crashed, confirm that process has stopped before explicitly removing operation.lock and resuming.");
   }
-  const lock = fstatSync18(fd);
+  const lock = fstatSync19(fd);
   try {
     writeFileSync11(fd, JSON.stringify({ pid: process.pid }) + `
 `);
-    fsyncSync6(fd);
+    fsyncSync7(fd);
     return await action();
   } finally {
-    closeSync18(fd);
+    closeSync19(fd);
     unchangedDirectory(directory, identity5);
-    const now2 = lstatSync26(file2);
+    const now2 = lstatSync27(file2);
     if (now2.dev !== lock.dev || now2.ino !== lock.ino || !now2.isFile() || now2.isSymbolicLink())
       fail2();
     unlinkSync6(file2);
@@ -94707,15 +94885,15 @@ async function preparePrivatePublication(client2, sourceDirectory, recoveryDirec
     phase: "prepared",
     intent: null
   };
-  if (!isAbsolute22(recoveryDirectory) || resolve23(recoveryDirectory) !== recoveryDirectory || realpathSync15(dirname28(recoveryDirectory)) !== dirname28(recoveryDirectory))
+  if (!isAbsolute23(recoveryDirectory) || resolve23(recoveryDirectory) !== recoveryDirectory || realpathSync16(dirname28(recoveryDirectory)) !== dirname28(recoveryDirectory))
     return fail2();
   mkdirSync15(recoveryDirectory, { mode: 448 });
   safeDirectory(recoveryDirectory);
-  const parent = openSync18(dirname28(recoveryDirectory), constants15.O_RDONLY | constants15.O_NOFOLLOW);
+  const parent = openSync19(dirname28(recoveryDirectory), constants16.O_RDONLY | constants16.O_NOFOLLOW);
   try {
-    fsyncSync6(parent);
+    fsyncSync7(parent);
   } finally {
-    closeSync18(parent);
+    closeSync19(parent);
   }
   writeOwned(recoveryDirectory, "bundle.tgz", packed.bytes);
   save(recoveryDirectory, receipt);