@hasna/skills 0.10.89 → 0.10.91

package/bin/index.js

@@ -36888,7 +36888,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.89",
+    version: "0.10.91",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -36932,6 +36932,7 @@ var init_package = __esm(() => {
       "docs/runtime-activation.md",
       "schemas/",
       "LICENSE",
+      "THIRD_PARTY_NOTICES",
       "README.md",
       "!dist/**/*test-utils.d.ts",
       "!dist/**/*fixtures.d.ts"
@@ -36939,9 +36940,9 @@ var init_package = __esm(() => {
     main: "./dist/index.js",
     types: "./dist/index.d.ts",
     scripts: {
-      clean: "rm -rf bin/ dist/",
-      build: "bun run clean && bun build --external @hasna/contracts/kernel-lock ./src/cli/index.tsx --outdir ./bin --target bun && bun build --external @modelcontextprotocol/sdk ./src/mcp/index.ts --outfile ./bin/mcp.js --target bun && bun build --external @hasna/contracts/kernel-lock ./src/server/index.ts --outfile ./bin/server.js --target bun && bun build --external @hasna/contracts/kernel-lock ./src/server/worker.ts --outfile ./bin/worker.js --target bun && bun build --external @hasna/contracts/kernel-lock ./src/server/migrate.ts --outfile ./bin/migrate.js --target bun && bun build --external @hasna/contracts/kernel-lock ./src/server/maintenance.ts --outfile ./bin/maintenance.js --target bun && bun build ./src/index.ts ./src/storage.ts ./src/sdk/index.ts ./src/admin-contract.ts ./src/runtime-prerequisites.ts --outdir ./dist --target bun && tsc --emitDeclarationOnly --declaration --outDir dist && bun scripts/stage-kernel-lock-assets.ts",
-      "build:js": "rm -rf dist && bun build ./src/index.ts ./src/storage.ts ./src/sdk/index.ts ./src/admin-contract.ts ./src/runtime-prerequisites.ts --outdir ./dist --target bun && tsc --emitDeclarationOnly --declaration --outDir dist && bun scripts/stage-kernel-lock-assets.ts",
+      clean: "rm -rf bin/ dist/ THIRD_PARTY_NOTICES",
+      build: "bun run clean && bun build --external @hasna/secrets --external @hasna/contracts/kernel-lock ./src/cli/index.tsx --outdir ./bin --target bun && bun build --external @hasna/secrets --external @modelcontextprotocol/sdk ./src/mcp/index.ts --outfile ./bin/mcp.js --target bun && bun build --external @hasna/secrets --external @hasna/contracts/kernel-lock ./src/server/index.ts --outfile ./bin/server.js --target bun && bun build --external @hasna/secrets --external @hasna/contracts/kernel-lock ./src/server/worker.ts --outfile ./bin/worker.js --target bun && bun build --external @hasna/secrets --external @hasna/contracts/kernel-lock ./src/server/migrate.ts --outfile ./bin/migrate.js --target bun && bun build --external @hasna/secrets --external @hasna/contracts/kernel-lock ./src/server/maintenance.ts --outfile ./bin/maintenance.js --target bun && bun build --external @hasna/secrets ./src/index.ts ./src/storage.ts ./src/sdk/index.ts ./src/admin-contract.ts ./src/runtime-prerequisites.ts --outdir ./dist --target bun && tsc --emitDeclarationOnly --declaration --outDir dist && bun scripts/stage-kernel-lock-assets.ts && bun scripts/third-party-notices.ts",
+      "build:js": "rm -rf dist && bun build --external @hasna/secrets ./src/index.ts ./src/storage.ts ./src/sdk/index.ts ./src/admin-contract.ts ./src/runtime-prerequisites.ts --outdir ./dist --target bun && tsc --emitDeclarationOnly --declaration --outDir dist && bun scripts/stage-kernel-lock-assets.ts",
       test: "bun test --timeout 30000",
       dev: "bun run ./src/cli/index.tsx",
       "dev:watch": "bun --watch run ./src/cli/index.tsx",
@@ -36992,7 +36993,6 @@ var init_package = __esm(() => {
       "@aws-sdk/client-ecs": "^3.1079.0",
       "@aws-sdk/client-s3": "^3.1079.0",
       "@hasna/events": "0.1.18",
-      "@hasna/secrets": "0.4.2",
       "@modelcontextprotocol/sdk": "^1.26.0",
       chalk: "^5.3.0",
       commander: "^12.1.0",
@@ -37004,6 +37004,9 @@ var init_package = __esm(() => {
       zod: "^4.3.6",
       "@hasna/contracts": "1.3.5"
     },
+    optionalDependencies: {
+      "@hasna/secrets": "0.4.2"
+    },
     engines: {
       bun: ">=1.0.0"
     },
@@ -55539,6 +55542,9 @@ async function resolveSkillsConnection(env3 = process.env, options = {}) {
     completed = await completePointerCredential(SKILLS_APP, pointer, explicitVault ? snapshotEnv : env3);
   } catch (error) {
     const translated = asSkillsFleetCredentialError(error, pointer.pointerVaultKey);
+    if (translated?.message.includes("(@hasna/secrets) is not installed")) {
+      throw new SkillsFleetCredentialError(`${translated.message} @hasna/secrets is optional and private: install it with access to it.`, "MISSING_API_CREDENTIAL");
+    }
     if (translated)
       throw translated;
     throw error;
@@ -96948,1312 +96954,19 @@ var init_cloud_executions = __esm(() => {
   init_fleet_credentials();
 });
 
-// node_modules/@hasna/secrets/dist/sdk.js
-import { isIP as isIP3 } from "net";
-import { spawnSync as spawnSync5 } from "child_process";
-import { closeSync as closeSync26, fstatSync as fstatSync26, openSync as openSync26, readFileSync as readFileSync38 } from "fs";
-import { O_NOFOLLOW as O_NOFOLLOW3, O_NONBLOCK as O_NONBLOCK3, O_RDONLY as O_RDONLY3 } from "constants";
-import { createRequire as createRequire2 } from "module";
-import { hostname as osHostname2 } from "os";
-import { isAbsolute as isAbsolute34, join as join60 } from "path";
-import { createRequire as createRequire22 } from "module";
-function envToken2(name) {
-  return name.toUpperCase().replace(/-/g, "_");
-}
-function clientTransportEnvKeys2(name) {
-  const envSegment = envToken2(name);
-  return {
-    apiUrlKeys: [`HASNA_${envSegment}_API_URL`, `${envSegment}_API_URL`],
-    apiKeyKeys: [`HASNA_${envSegment}_API_KEY`, `${envSegment}_API_KEY`]
-  };
-}
-function credentialOverrideEnvKey2(name) {
-  return `HASNA_${envToken2(name)}_API_KEY_OVERRIDE`;
-}
-function credentialPointerEnvKey2(name) {
-  return `HASNA_${envToken2(name)}_API_KEY_REF`;
-}
-function homeDir2(env3) {
-  const home = env3.HOME?.trim();
-  return home ? home : null;
-}
-function absoluteOverride2(env3, key2) {
-  const value = env3[key2]?.trim();
-  return value && isAbsolute34(value) ? value : null;
-}
-function hasnaHomeDir2(env3) {
-  const override = absoluteOverride2(env3, HASNA_HOME_ENV_KEY2);
-  if (override)
-    return override;
-  const home = homeDir2(env3);
-  return home ? join60(home, HASNA_HOME_DIR2) : null;
-}
-function appConfigDir2(name, env3) {
-  const configRoot = absoluteOverride2(env3, HASNA_CONFIG_HOME_ENV_KEY2);
-  if (configRoot)
-    return join60(configRoot, name);
-  const root2 = hasnaHomeDir2(env3);
-  return root2 ? join60(root2, name, CONFIG_SUBDIR2) : null;
-}
-function credentialDiskSourceList2(name, env3, profile = null) {
-  if (!SAFE_APP_SLUG2.test(name))
-    return [];
-  const directory2 = appConfigDir2(name, env3);
-  if (!directory2)
-    return [];
-  const file2 = profile ? `${CREDENTIALS_FILE2}-${profile}` : CREDENTIALS_FILE2;
-  return [{ path: join60(directory2, file2), tier: "disk" }];
-}
-function credentialDiskSources2(name, env3) {
-  return credentialDiskSourceList2(name, env3, null).map((s) => s.path);
-}
-function profileDiskSources2(name, env3, profile) {
-  return credentialDiskSourceList2(name, env3, profile).map((s) => s.path);
-}
-function parseEnvFile2(text5) {
-  const values2 = new Map;
-  const unusable = new Set;
-  for (const rawLine of text5.split(/\r?\n/)) {
-    const line = rawLine.trim();
-    if (line.length === 0 || line.startsWith("#"))
-      continue;
-    const withoutExport = line.startsWith("export ") ? line.slice("export ".length).trim() : line;
-    const equals = withoutExport.indexOf("=");
-    if (equals <= 0)
-      continue;
-    const key2 = withoutExport.slice(0, equals).trim();
-    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key2))
-      continue;
-    let value = withoutExport.slice(equals + 1).trim();
-    const quote3 = value[0];
-    if (quote3 === '"' || quote3 === "'") {
-      if (value.length < 2 || !value.endsWith(quote3)) {
-        unusable.add(key2);
-        continue;
-      }
-      value = value.slice(1, -1);
-    }
-    if (value.trim().length === 0) {
-      unusable.add(key2);
-      continue;
-    }
-    if (values2.has(key2) && values2.get(key2) !== value)
-      unusable.add(key2);
-    values2.set(key2, value);
-  }
-  return { values: values2, unusable };
-}
-function configFileModeAllowed2(mode) {
-  const permissions = mode & 4095;
-  return permissions === 256 || permissions === 384;
-}
-function configFileReadsCoherent2(before2, after2) {
-  return before2.dev === after2.dev && before2.ino === after2.ino && before2.size === after2.size && before2.mtimeMs === after2.mtimeMs && before2.ctimeMs === after2.ctimeMs;
-}
-function readAppConfigFile2(path) {
-  const unsafe = (reason2) => {
-    throw new CredentialFileUnsafeError2(path, reason2);
-  };
-  let fd = -1;
-  try {
-    fd = openSync26(path, O_RDONLY3 | O_NOFOLLOW3 | O_NONBLOCK3);
-  } catch (error61) {
-    const code = error61.code;
-    if (code === "ENOENT" || code === "ENOTDIR")
-      return null;
-    if (code === "ELOOP")
-      unsafe("the path is a symlink");
-    unsafe(`the path could not be opened (${code ?? "unknown error"})`);
-  }
-  try {
-    const before2 = fstatSync26(fd);
-    if (!before2.isFile())
-      unsafe("the path is not a regular file");
-    if (!configFileModeAllowed2(before2.mode)) {
-      unsafe(`permission mode ${(before2.mode & 4095).toString(8).padStart(4, "0")} is not owner-only 0400 or 0600`);
-    }
-    const uid2 = process.getuid?.() ?? process.geteuid?.();
-    if (uid2 !== undefined && before2.uid !== uid2)
-      unsafe("the file is not owned by the current user");
-    if (before2.size > MAX_CREDENTIAL_FILE_BYTES2)
-      unsafe("the file exceeds the size limit");
-    const bytes = readFileSync38(fd);
-    const after2 = fstatSync26(fd);
-    if (!configFileReadsCoherent2(before2, after2)) {
-      unsafe("the file changed while being read");
-    }
-    return parseEnvFile2(bytes.toString("utf8"));
-  } finally {
-    if (fd !== -1)
-      closeSync26(fd);
-  }
-}
-function readCredentialFile2(path, apiKeyKeys) {
-  const parsed = readAppConfigFile2(path);
-  if (!parsed)
-    return null;
-  for (const key2 of apiKeyKeys) {
-    if (parsed.unusable.has(key2)) {
-      throw new CredentialFileUnsafeError2(path, `${key2} is declared but blank or malformed`);
-    }
-  }
-  const values2 = apiKeyKeys.map((key2) => parsed.values.get(key2)?.trim()).filter((value) => Boolean(value));
-  if (new Set(values2).size > 1) {
-    throw new CredentialFileUnsafeError2(path, "credential aliases disagree");
-  }
-  return values2[0] ?? null;
-}
-function appConfigDiskValue2(name, env3, keys3) {
-  const wanted = keys3.filter((key2) => !CREDENTIAL_SHAPED_KEY2.test(key2));
-  if (wanted.length === 0)
-    return null;
-  for (const path of credentialDiskSources2(name, env3)) {
-    const parsed = readAppConfigFile2(path);
-    if (!parsed)
-      continue;
-    if (wanted.some((key2) => parsed.unusable.has(key2))) {
-      return { key: wanted.find((key2) => parsed.unusable.has(key2)), value: "", path, unusable: true };
-    }
-    const values2 = wanted.map((key2) => parsed.values.get(key2)?.trim()).filter((value) => Boolean(value));
-    if (new Set(values2).size > 1)
-      throw new CredentialFileUnsafeError2(path, "configuration aliases disagree");
-    for (const key2 of wanted) {
-      if (parsed.unusable.has(key2))
-        return { key: key2, value: "", path, unusable: true };
-      const value = parsed.values.get(key2)?.trim();
-      if (value)
-        return { key: key2, value, path };
-    }
-  }
-  return null;
-}
-function assertUsableCredential2(appName, source, value) {
-  if (VAULT_POINTER_SHAPE2.test(value)) {
-    throw new CredentialResolutionError2(appName, `The credential from ${source} looks like a secrets-vault pointer (a path-shaped reference like ` + `'namespace/app/live/api_key'). A vault path is NEVER accepted as a literal API key. ` + `Use ${credentialPointerEnvKey2(appName)} to resolve the key through the vault, or provide the actual key value.`, [source]);
-  }
-  if (!ILLEGAL_IN_HEADER_VALUE2.test(value))
-    return;
-  throw new CredentialResolutionError2(appName, `The credential from ${source} contains characters that cannot be sent in an HTTP header ` + `(a control character or non-ASCII byte). A file written with CR-only line endings is the usual ` + `cause. Rewrite that credential file with one LF-terminated KEY=value line. ` + `The value is not shown here, and is deliberately never logged.`, [source]);
-}
-function sealCredential2(fields2) {
-  const { apiKey } = fields2;
-  const visible = {
-    tier: fields2.tier,
-    source: fields2.source,
-    deliberate: fields2.deliberate,
-    diskCandidates: Object.freeze([...fields2.diskCandidates]),
-    warning: fields2.warning
-  };
-  const sealed = { ...visible };
-  Object.defineProperty(sealed, "apiKey", {
-    value: apiKey,
-    enumerable: false,
-    writable: false,
-    configurable: false
-  });
-  if (fields2.pointerVaultKey !== undefined) {
-    Object.defineProperty(sealed, "pointerVaultKey", {
-      value: fields2.pointerVaultKey,
-      enumerable: false,
-      writable: false,
-      configurable: false
-    });
-  }
-  Object.defineProperty(sealed, INSPECT_CUSTOM2, {
-    value: () => ({ ...visible, apiKey: "[redacted]" }),
-    enumerable: false,
-    writable: false,
-    configurable: false
-  });
-  Object.defineProperty(sealed, CREDENTIAL_SEAL2, {
-    value: true,
-    enumerable: false,
-    writable: false,
-    configurable: false
-  });
-  return Object.freeze(sealed);
-}
-function isSealedCredential(credential) {
-  return credential[CREDENTIAL_SEAL2] === true;
-}
-function explicitCredential(appName, apiKey) {
-  const source = "explicit apiKey option";
-  assertUsableCredential2(appName, source, apiKey);
-  return sealCredential2({
-    apiKey,
-    tier: "argument",
-    source,
-    deliberate: true,
-    diskCandidates: [],
-    warning: null
-  });
-}
-function validateAndSealResolvedCredential(appName, credential) {
-  const apiKey = credential.apiKey;
-  assertUsableCredential2(appName, CALLER_SUPPLIED_CREDENTIAL_PROVIDER_SOURCE, apiKey);
-  if (!isSealedCredential(credential)) {
-    return sealCredential2({
-      apiKey,
-      tier: "argument",
-      source: CALLER_SUPPLIED_CREDENTIAL_PROVIDER_SOURCE,
-      deliberate: true,
-      diskCandidates: [],
-      warning: null
-    });
-  }
-  return sealCredential2({
-    apiKey,
-    tier: credential.tier,
-    source: credential.source,
-    deliberate: credential.deliberate,
-    diskCandidates: credential.diskCandidates,
-    warning: credential.warning,
-    ...credential.pointerVaultKey !== undefined ? { pointerVaultKey: credential.pointerVaultKey } : {}
-  });
-}
-function firstEnvValue2(env3, keys3) {
-  for (const key2 of keys3) {
-    if (!Object.prototype.hasOwnProperty.call(env3, key2))
-      continue;
-    const value = env3[key2]?.trim();
-    if (value)
-      return { key: key2, value };
-  }
-  return null;
-}
-function isAmbientEnvironment2(env3) {
-  return env3 === process.env || env3[AMBIENT_ENVIRONMENT2] === true;
-}
-function defaultKeychainRunner2(argv) {
-  const result2 = spawnSync5(KEYCHAIN_SECURITY_BIN2, [...argv], {
-    encoding: "utf8",
-    stdio: ["ignore", "pipe", "pipe"],
-    timeout: KEYCHAIN_SPAWN_TIMEOUT_MS2
-  });
-  return {
-    status: result2.status,
-    stdout: result2.stdout ?? "",
-    stderr: result2.error ? result2.error.message : result2.stderr ?? ""
-  };
-}
-function keychainTierEnabled2(env3, options) {
-  if ((options.platform ?? process.platform) !== "darwin")
-    return false;
-  if (options.enabled !== undefined)
-    return options.enabled;
-  return options.run !== undefined || isAmbientEnvironment2(env3);
-}
-function keychainAccount2(env3, options) {
-  const station = env3[KEYCHAIN_STATION_ENV_KEY2]?.trim();
-  if (station)
-    return station;
-  const host = (options.hostname ?? osHostname2)().split(".")[0]?.trim() ?? "";
-  if (host)
-    return host;
-  const user = env3.USER?.trim();
-  return user || null;
-}
-function keychainFailureHint2(text5) {
-  const line = text5.split(/\r?\n/).find((entry) => entry.trim().length > 0)?.trim() ?? "";
-  const clean = line.replace(/[\u0000-\u001f\u007f]/g, "").slice(0, 200);
-  return clean ? `: ${clean}` : "";
-}
-function readKeychainItem2(name, env3, kind, options) {
-  if (!SAFE_APP_SLUG2.test(name) || !keychainTierEnabled2(env3, options))
-    return null;
-  const account = keychainAccount2(env3, options);
-  if (!account)
-    return null;
-  const service = `${KEYCHAIN_SERVICE_PREFIX2}.${name}.${kind}`;
-  const source = `keychain:${service}@${account}`;
-  const run = options.run ?? defaultKeychainRunner2;
-  let result2;
-  try {
-    result2 = run(["find-generic-password", "-a", account, "-s", service, "-w"]);
-  } catch (error61) {
-    const reason2 = keychainFailureHint2(error61 instanceof Error ? error61.message : String(error61));
-    throw new CredentialResolutionError2(name, `The Keychain lookup for ${source} could not run${reason2}. A Keychain failure is never resolved ` + `around: fix the keychain, or delete the item to fall through to the credential on disk.`, [source]);
-  }
-  if (result2.status === KEYCHAIN_ITEM_NOT_FOUND_STATUS2)
-    return null;
-  if (result2.status !== 0) {
-    throw new CredentialResolutionError2(name, `The Keychain lookup for ${source} failed (security exited ` + `${result2.status ?? "without a status"}${keychainFailureHint2(result2.stderr)}). A Keychain item that ` + `exists but cannot be read is never resolved around: unlock the keychain, run from a session that ` + `may use it, or delete the item to fall through to the credential on disk.`, [source]);
-  }
-  const value = result2.stdout.trim();
-  if (!value) {
-    throw new CredentialResolutionError2(name, `${source} exists but holds an empty value; a declared item never falls through to another ` + `identity. Store a value in it or delete the item.`, [source]);
-  }
-  return { value, source };
-}
-function keychainConfigValue2(name, env3, options = {}) {
-  return readKeychainItem2(name, env3, "api-url", options);
-}
-function snapshotClientEnvironment2(name, env3) {
-  const keys3 = clientTransportEnvKeys2(name);
-  const ambient = isAmbientEnvironment2(env3);
-  const snapshot2 = Object.create(null);
-  for (const key2 of [
-    ...keys3.apiUrlKeys,
-    ...keys3.apiKeyKeys,
-    credentialOverrideEnvKey2(name),
-    credentialPointerEnvKey2(name),
-    CREDENTIAL_PROFILE_ENV_KEY2,
-    "HOME",
-    HASNA_HOME_ENV_KEY2,
-    HASNA_CONFIG_HOME_ENV_KEY2,
-    KEYCHAIN_STATION_ENV_KEY2,
-    "USER"
-  ]) {
-    const descriptor = Object.getOwnPropertyDescriptor(env3, key2);
-    if (!descriptor)
-      continue;
-    if (!("value" in descriptor)) {
-      throw new CredentialResolutionError2(name, `${key2} is accessor-backed; client configuration requires own data properties.`, [key2]);
-    }
-    if (descriptor.value !== undefined && typeof descriptor.value !== "string") {
-      throw new CredentialResolutionError2(name, `${key2} must be a string data property.`, [key2]);
-    }
-    snapshot2[key2] = descriptor.value;
-  }
-  if (ambient) {
-    Object.defineProperty(snapshot2, AMBIENT_ENVIRONMENT2, {
-      value: true,
-      enumerable: false,
-      writable: false,
-      configurable: false
-    });
-  }
-  return Object.freeze(snapshot2);
-}
-function resolveCredential2(name, env3, options = {}) {
-  env3 = snapshotClientEnvironment2(name, env3);
-  const { apiKeyKeys } = clientTransportEnvKeys2(name);
-  const diskPaths = credentialDiskSources2(name, env3);
-  if (options.apiKey !== undefined) {
-    const explicitKey = options.apiKey.trim();
-    if (!explicitKey) {
-      throw new CredentialResolutionError2(name, "The explicit apiKey argument is blank; an explicit credential never falls through to another identity.", ["explicit apiKey argument"]);
-    }
-    assertUsableCredential2(name, "the explicit apiKey argument", explicitKey);
-    return sealCredential2({
-      apiKey: explicitKey,
-      tier: "argument",
-      source: "explicit apiKey argument",
-      deliberate: true,
-      diskCandidates: diskPaths,
-      warning: null
-    });
-  }
-  const overrideKeyName = credentialOverrideEnvKey2(name);
-  const overrideRaw = Object.prototype.hasOwnProperty.call(env3, overrideKeyName) ? env3[overrideKeyName] : undefined;
-  if (overrideRaw !== undefined) {
-    const override = overrideRaw.trim();
-    if (!override) {
-      throw new CredentialResolutionError2(name, `${overrideKeyName} is set but empty. It is a deliberate override, so it is not resolved around: ` + `either give it a real key or unset it to fall back to the credential on disk.`, [overrideKeyName]);
-    }
-    assertUsableCredential2(name, overrideKeyName, override);
-    return sealCredential2({
-      apiKey: override,
-      tier: "override",
-      source: overrideKeyName,
-      deliberate: true,
-      diskCandidates: diskPaths,
-      warning: null
-    });
-  }
-  const pointerKeyName = credentialPointerEnvKey2(name);
-  const pointerRaw = Object.prototype.hasOwnProperty.call(env3, pointerKeyName) ? env3[pointerKeyName] : undefined;
-  if (pointerRaw !== undefined) {
-    const pointer = pointerRaw.trim();
-    if (!pointer) {
-      throw new CredentialResolutionError2(name, `${pointerKeyName} is set but empty. It is a deliberate vault pointer, so it is not resolved around: ` + `either give it a vault item key or unset it to fall back to the credential on disk.`, [pointerKeyName]);
-    }
-    if (!VAULT_POINTER_SHAPE2.test(pointer)) {
-      throw new CredentialResolutionError2(name, `${pointerKeyName} must name a vault ITEM KEY (a path-shaped reference like ` + `'namespace/app/live/api_key'), not a credential value. A pointer that carries a literal is refused.`, [pointerKeyName]);
-    }
-    return sealCredential2({
-      apiKey: "",
-      pointerVaultKey: pointer,
-      tier: "pointer",
-      source: pointerKeyName,
-      deliberate: true,
-      diskCandidates: diskPaths,
-      warning: null
-    });
-  }
-  if (options.profile !== undefined && !options.profile.trim()) {
-    throw new CredentialResolutionError2(name, "The explicit profile argument is blank; an explicit identity selection never falls through.", ["explicit profile argument"]);
-  }
-  const profileRaw = Object.prototype.hasOwnProperty.call(env3, CREDENTIAL_PROFILE_ENV_KEY2) ? env3[CREDENTIAL_PROFILE_ENV_KEY2] : undefined;
-  if (profileRaw !== undefined && !profileRaw.trim()) {
-    throw new CredentialResolutionError2(name, `${CREDENTIAL_PROFILE_ENV_KEY2} is set but blank.`, [CREDENTIAL_PROFILE_ENV_KEY2]);
-  }
-  const profile = options.profile?.trim() || profileRaw?.trim();
-  if (profile) {
-    const profileSource = options.profile?.trim() ? "explicit profile argument" : CREDENTIAL_PROFILE_ENV_KEY2;
-    if (!SAFE_PROFILE2.test(profile)) {
-      throw new CredentialResolutionError2(name, `Profile name from ${profileSource} is not usable in a path. ` + `Use letters, digits, dot, dash, or underscore.`, [profileSource]);
-    }
-    const paths = profileDiskSources2(name, env3, profile);
-    for (const path of paths) {
-      const value = readCredentialFile2(path, apiKeyKeys);
-      if (value) {
-        assertUsableCredential2(name, path, value);
-        return sealCredential2({
-          apiKey: value,
-          tier: "profile",
-          source: path,
-          deliberate: true,
-          diskCandidates: paths,
-          warning: null
-        });
-      }
-    }
-    throw new CredentialResolutionError2(name, `Profile '${profile}' (from ${profileSource}) has no ${apiKeyKeys[0]} for '${name}'. ` + `Looked in: ${paths.join(", ") || "<no HOME in this environment>"}. ` + `A profile names WHICH identity to use, so it is never resolved around \u2014 ` + `create the profile's credential file or unset ${CREDENTIAL_PROFILE_ENV_KEY2}.`, paths);
-  }
-  const definedEnvEntries = apiKeyKeys.filter((key2) => Object.prototype.hasOwnProperty.call(env3, key2) && env3[key2] !== undefined).map((key2) => ({ key: key2, value: String(env3[key2]).trim() }));
-  const blankEnv = definedEnvEntries.find((entry) => entry.value.length === 0);
-  if (blankEnv) {
-    throw new CredentialResolutionError2(name, `${blankEnv.key} is set but blank; a declared credential never falls through to another alias or identity.`, [blankEnv.key]);
-  }
-  if (definedEnvEntries.length > 1 && new Set(definedEnvEntries.map((entry) => entry.value)).size > 1) {
-    throw new CredentialResolutionError2(name, `${definedEnvEntries.map((entry) => entry.key).join(" and ")} disagree; credential aliases must be identical or only one may be set.`, definedEnvEntries.map((entry) => entry.key));
-  }
-  const envHit = firstEnvValue2(env3, apiKeyKeys);
-  const keychainHit = readKeychainItem2(name, env3, "api-key", options.keychain ?? {});
-  if (keychainHit) {
-    assertUsableCredential2(name, keychainHit.source, keychainHit.value);
-    const warning = envHit && envHit.value !== keychainHit.value ? `Credential sources disagree for '${name}': ${keychainHit.source} and ${envHit.key} hold ` + `different keys. ${keychainHit.source} wins, because the Keychain is re-read on every call while ` + `an environment variable is a snapshot. Reconcile them \u2014 a rotation that updated only one leaves ` + `the other to fail 401 wherever it is loaded first.` : null;
-    return sealCredential2({
-      apiKey: keychainHit.value,
-      tier: "keychain",
-      source: keychainHit.source,
-      deliberate: false,
-      diskCandidates: diskPaths,
-      warning
-    });
-  }
-  const diskSourceList = credentialDiskSourceList2(name, env3, null);
-  const diskHits = diskSourceList.map((src) => ({ src, value: readCredentialFile2(src.path, apiKeyKeys) })).filter((hit) => hit.value !== null);
-  if (diskHits.length > 0) {
-    const winner = diskHits[0];
-    assertUsableCredential2(name, winner.src.path, winner.value);
-    const divergentSources = [
-      ...diskHits.slice(1).filter((hit) => hit.value !== winner.value).map((hit) => hit.src.path),
-      ...envHit && envHit.value !== winner.value ? [envHit.key] : []
-    ];
-    const warning = divergentSources.length > 0 ? `Credential sources disagree for '${name}': ${winner.src.path} and ` + `${divergentSources.join(", ")} hold different keys. ${winner.src.path} wins, because a file on ` + `disk is re-read on every call while an environment variable is a snapshot. Reconcile them \u2014 ` + `a rotation that updated only one leaves the other to fail 401 wherever it is loaded first.` : null;
-    return sealCredential2({
-      apiKey: winner.value,
-      tier: winner.src.tier,
-      source: winner.src.path,
-      deliberate: false,
-      diskCandidates: diskPaths,
-      warning
-    });
-  }
-  if (envHit) {
-    assertUsableCredential2(name, envHit.key, envHit.value);
-    return sealCredential2({
-      apiKey: envHit.value,
-      tier: "env",
-      source: envHit.key,
-      deliberate: false,
-      diskCandidates: diskPaths,
-      warning: null
-    });
-  }
-  return null;
-}
-async function completePointerCredential2(name, pointerResolution, env3 = process.env) {
-  const vaultKey = pointerResolution.pointerVaultKey;
-  const pointerEnvKey = pointerResolution.source;
-  if (!vaultKey) {
-    throw new CredentialResolutionError2(name, `Pointer resolution from ${pointerEnvKey} carries no vault item key; this is a defect in the resolver.`, [pointerEnvKey]);
-  }
-  let secretsSdk;
-  try {
-    secretsSdk = requireSecretsSdk2(SECRETS_PACKAGE_SPECIFIER);
-  } catch {
-    throw new CredentialResolutionError2(name, `${pointerEnvKey} names vault item '${vaultKey}', but the secrets SDK (@hasna/secrets) is not installed ` + `in this process. A vault pointer is TERMINAL: install @hasna/secrets to resolve it, or unset ${pointerEnvKey}.`, [pointerEnvKey]);
-  }
-  let client2;
-  try {
-    client2 = secretsSdk.createSecretsClientFromEnv(env3);
-  } catch {
-    throw new CredentialResolutionError2(name, `${pointerEnvKey} names vault item '${vaultKey}', but the secrets client could not be configured from this ` + `environment (the secrets service URL and key env are missing or invalid). A vault pointer is TERMINAL and ` + `never falls through to a literal or disk credential.`, [pointerEnvKey]);
-  }
-  let secret;
+// src/lib/execution-secrets.ts
+import { constants as constants26, closeSync as closeSync26, fstatSync as fstatSync26, openSync as openSync26, readSync as readSync20, realpathSync as realpathSync16 } from "fs";
+import { hostname as stationHostname } from "os";
+async function defaultSecretsClientFactory(load = () => import("@hasna/secrets/sdk")) {
+  let sdk;
   try {
-    secret = await client2.getSecret({ key: vaultKey });
+    sdk = await load();
   } catch {
-    throw new CredentialResolutionError2(name, `${pointerEnvKey} names vault item '${vaultKey}', but the vault could not be reached or the item is ` + `unavailable. A vault pointer is TERMINAL and never falls through to a literal or disk credential.`, [pointerEnvKey]);
-  }
-  const value = secret.value;
-  if (!value) {
-    throw new CredentialResolutionError2(name, `${pointerEnvKey} resolved vault item '${vaultKey}', but it holds no value. A vault pointer is TERMINAL.`, [pointerEnvKey]);
-  }
-  assertUsableCredential2(name, `${pointerEnvKey} -> vault:${vaultKey}`, value);
-  return sealCredential2({
-    apiKey: value,
-    tier: "pointer",
-    source: `${pointerEnvKey} -> vault:${vaultKey}`,
-    deliberate: true,
-    diskCandidates: pointerResolution.diskCandidates,
-    warning: null
-  });
-}
-function defaultFleetGatewayBaseUrl2(name) {
-  return `${DEFAULT_FLEET_GATEWAY_ORIGIN2}/${validateAppSlug2(name)}`;
-}
-function isValidDnsDomain2(value) {
-  if (value.length === 0 || value.length > 253 || ASCII_CONTROL_PATTERN2.test(value) || /[^\x00-\x7f]/.test(value)) {
-    return false;
-  }
-  return value.split(".").every((label) => label.length <= 63 && !label.startsWith("xn--") && DNS_LABEL_PATTERN2.test(label));
-}
-function validateAppSlug2(name) {
-  if (name.length > 63 || !DNS_LABEL_PATTERN2.test(name)) {
-    throw new Error("App name must be one lowercase DNS label.");
-  }
-  return name;
-}
-function rawAuthority2(value) {
-  const match = /^[a-z][a-z0-9+.-]*:\/\//i.exec(value);
-  if (!match)
-    throw new Error("API URL must be absolute.");
-  const afterScheme = value.slice(match[0].length);
-  const boundary = afterScheme.search(/[/?#]/);
-  const authority = boundary === -1 ? afterScheme : afterScheme.slice(0, boundary);
-  if (!authority)
-    throw new Error("API URL must include a hostname.");
-  return authority;
-}
-function assertCanonicalPort2(port) {
-  if (!/^[0-9]+$/.test(port) || port.length > 1 && port.startsWith("0")) {
-    throw new Error("API URL authority must contain a canonical port between 1 and 65535.");
-  }
-  const numericPort = Number(port);
-  if (!Number.isSafeInteger(numericPort) || numericPort < 1 || numericPort > 65535) {
-    throw new Error("API URL authority must contain a canonical port between 1 and 65535.");
-  }
-}
-function canonicalAuthorityHostname2(authority) {
-  let rawHostname;
-  if (authority.startsWith("[")) {
-    const closingBracket = authority.indexOf("]");
-    if (closingBracket === -1) {
-      throw new Error("API URL authority must contain a canonical hostname.");
-    }
-    rawHostname = authority.slice(0, closingBracket + 1);
-    const portSuffix = authority.slice(closingBracket + 1);
-    if (portSuffix) {
-      if (!portSuffix.startsWith(":")) {
-        throw new Error("API URL authority must contain a canonical hostname and port.");
-      }
-      assertCanonicalPort2(portSuffix.slice(1));
-    }
-    if (isIP3(rawHostname.slice(1, -1)) !== 6) {
-      throw new Error("API URL authority must contain a canonical IPv6 literal.");
-    }
-  } else {
-    const firstColon = authority.indexOf(":");
-    const lastColon = authority.lastIndexOf(":");
-    if (firstColon !== lastColon) {
-      throw new Error("IPv6 API URL authorities must use brackets.");
-    }
-    if (lastColon !== -1) {
-      const port = authority.slice(lastColon + 1);
-      assertCanonicalPort2(port);
-      rawHostname = authority.slice(0, lastColon);
-    } else {
-      rawHostname = authority;
-    }
-    const ipVersion = isIP3(rawHostname);
-    const numericAddressParts = rawHostname.split(".");
-    const looksLikeNonCanonicalIpv4 = numericAddressParts.every((part) => /^(?:0x[0-9a-f]+|[0-9]+)$/i.test(part));
-    if (ipVersion !== 4 && looksLikeNonCanonicalIpv4 || ipVersion !== 4 && !isValidDnsDomain2(rawHostname.toLowerCase())) {
-      throw new Error("API URL authority must contain a canonical ASCII hostname.");
-    }
-  }
-  return rawHostname.toLowerCase();
-}
-function isDeliberateLoopbackHttpAuthority2(authority) {
-  return /^(?:localhost|127\.0\.0\.1|\[::1\])(?::[0-9]+)?$/i.test(authority);
-}
-function toV1BaseUrl2(apiUrl) {
-  if (ASCII_CONTROL_PATTERN2.test(apiUrl)) {
-    throw new Error("API URL must not contain ASCII control characters.");
-  }
-  const input2 = apiUrl.trim();
-  const authority = rawAuthority2(input2);
-  if (authority.includes("@") || authority.includes("\\") || authority.includes("%") || /[^\x00-\x7f]/.test(authority)) {
-    throw new Error("API URL authority must be canonical ASCII without credentials.");
-  }
-  const canonicalHostname = canonicalAuthorityHostname2(authority);
-  const url2 = new URL(input2);
-  if (url2.protocol !== "http:" && url2.protocol !== "https:") {
-    throw new Error("API URL must use http or https.");
-  }
-  if (url2.username || url2.password) {
-    throw new Error("API URL must not include credentials.");
-  }
-  if (!url2.hostname || url2.hostname.endsWith(".")) {
-    throw new Error("API URL must include a canonical hostname.");
-  }
-  if (url2.hostname.toLowerCase() !== canonicalHostname) {
-    throw new Error("API URL authority must not rely on parser hostname normalization.");
-  }
-  if (url2.hostname.split(".").some((label) => label.toLowerCase().startsWith("xn--"))) {
-    throw new Error("API URL must not use IDN or punycode hostnames.");
-  }
-  if (url2.protocol === "http:" && !isDeliberateLoopbackHttpAuthority2(authority)) {
-    throw new Error("API URL may use http only for an exact loopback authority.");
-  }
-  if (url2.search || url2.hash) {
-    throw new Error("API URL must not include a query string or fragment.");
-  }
-  let path = url2.pathname.replace(/\/+$/, "");
-  if (path.endsWith("/v1"))
-    path = path.slice(0, -"/v1".length);
-  url2.pathname = `${path}/v1`;
-  return url2.toString().replace(/\/+$/, "");
-}
-function resolveClientTransportSnapshot(name, env3 = process.env, options = {}) {
-  env3 = snapshotClientEnvironment2(name, env3);
-  const keys3 = clientTransportEnvKeys2(name);
-  const definedUrlEntries = keys3.apiUrlKeys.filter((key2) => Object.prototype.hasOwnProperty.call(env3, key2) && env3[key2] !== undefined).map((key2) => ({ key: key2, raw: String(env3[key2]) }));
-  const blankUrl = definedUrlEntries.find((entry) => entry.raw.trim().length === 0);
-  if (blankUrl) {
-    throw new ClientTransportConfigurationError2(name, `${blankUrl.key} is set but blank; public clients require an explicit HTTPS API URL and never select local storage.`, [blankUrl.key]);
-  }
-  const controlledUrl = definedUrlEntries.find((entry) => ASCII_CONTROL_PATTERN2.test(entry.raw));
-  if (controlledUrl) {
-    throw new ClientTransportConfigurationError2(name, `${controlledUrl.key} contains ASCII control characters.`, [controlledUrl.key]);
-  }
-  const usableUrlEntries = definedUrlEntries.map((entry) => ({ key: entry.key, value: entry.raw.trim() }));
-  if (usableUrlEntries.length > 1 && new Set(usableUrlEntries.map((entry) => entry.value)).size > 1) {
-    throw new ClientTransportConfigurationError2(name, `${usableUrlEntries.map((entry) => entry.key).join(" and ")} disagree; client authority aliases must be identical or only one may be set.`, usableUrlEntries.map((entry) => entry.key));
-  }
-  const envUrlHit = usableUrlEntries[0] ?? null;
-  const keychainUrlHit = keychainConfigValue2(name, env3, options.credentials?.keychain);
-  const diskConfigUrlHit = appConfigDiskValue2(name, env3, keys3.apiUrlKeys);
-  if (diskConfigUrlHit?.unusable) {
-    throw new ClientTransportConfigurationError2(name, `${diskConfigUrlHit.key} in ${diskConfigUrlHit.path} is declared but blank or malformed; public clients require a valid HTTPS service authority.`, [diskConfigUrlHit.path]);
-  }
-  const urlCandidates = [
-    ...envUrlHit ? [envUrlHit] : [],
-    ...keychainUrlHit ? [{ key: keychainUrlHit.source, value: keychainUrlHit.value }] : [],
-    ...diskConfigUrlHit ? [{ key: diskConfigUrlHit.path, value: diskConfigUrlHit.value.trim() }] : []
-  ];
-  const configuredUrl = urlCandidates[0] ?? null;
-  const divergentUrls = urlCandidates.filter((candidate2) => candidate2.value !== configuredUrl?.value);
-  if (configuredUrl && divergentUrls.length > 0) {
-    throw new ClientTransportConfigurationError2(name, `${configuredUrl.key} and ${divergentUrls.map((candidate2) => candidate2.key).join(" and ")} select different service authorities; refusing to send a credential written for one authority to the other.`, urlCandidates.map((candidate2) => candidate2.key));
-  }
-  const warnings = [];
-  if (configuredUrl && !envUrlHit) {
-    warnings.push(`No ${keys3.apiUrlKeys[0]} in the environment; the server URL in ${configuredUrl.key} was used, so this client connects to the server. ` + `Keep that entry aligned with the intended service authority.`);
-  }
-  const credential = resolveCredential2(name, env3, options.credentials);
-  if (!credential) {
-    const diskHint = credentialDiskSourcesForMessage(name, env3);
-    const lead = configuredUrl ? `${configuredUrl.key} selects the HTTP server for '${name}', but no API key could be resolved` : `${keys3.apiUrlKeys[0]} is not set and no API key could be resolved for '${name}'; a credential is required before the default fleet gateway authority applies`;
-    warnings.push(`${lead}; refusing to create an unauthenticated client \u2014 public clients never fall back to SQLite or another local store. ` + `Looked in the Keychain (macOS only), then for a credential file at ${diskHint}, then for ${keys3.apiKeyKeys[0]} in the environment.`);
-    throw new ClientTransportConfigurationError2(name, warnings.join(" "), [configuredUrl?.key ?? keys3.apiUrlKeys[0]]);
-  }
-  if (credential.warning)
-    warnings.push(credential.warning);
-  let urlHit;
-  if (configuredUrl) {
-    urlHit = configuredUrl;
-  } else {
-    try {
-      urlHit = { key: DEFAULT_AUTHORITY_SOURCE, value: defaultFleetGatewayBaseUrl2(name) };
-    } catch (error61) {
-      const message = error61 instanceof Error ? error61.message : String(error61);
-      throw new ClientTransportConfigurationError2(name, `No ${keys3.apiUrlKeys[0]} is configured and the default fleet gateway authority cannot be composed for '${name}': ${message}`, [keys3.apiUrlKeys[0]]);
-    }
-  }
-  const apiUrlSource = urlHit.key;
-  let baseUrl;
-  try {
-    baseUrl = toV1BaseUrl2(urlHit.value);
-  } catch (error61) {
-    const message = error61 instanceof Error ? error61.message : String(error61);
-    throw new ClientTransportConfigurationError2(name, `Invalid API URL from ${apiUrlSource}: ${message}`, [apiUrlSource]);
+    return refuse6("LOCAL_SECRET_UNAVAILABLE", "Vault secret bindings need the optional @hasna/secrets package, which this install could not load. Install @hasna/secrets with access to it, then run again.");
   }
-  return {
-    resolution: {
-      transport: "http",
-      transportSource: urlHit.key,
-      baseUrl,
-      apiUrlSource,
-      apiKeyPresent: true,
-      apiKeySource: credential.source,
-      apiKeyTier: credential.tier,
-      misconfigured: false,
-      warning: warnings.length > 0 ? warnings.join(" ") : null
-    },
-    credential
-  };
-}
-function resolveClientTransport(name, env3 = process.env, options = {}) {
-  return resolveClientTransportSnapshot(name, env3, options).resolution;
-}
-function credentialDiskSourcesForMessage(name, env3) {
-  const paths = credentialDiskSources2(name, env3);
-  return paths.length > 0 ? paths.join(" or ") : "<no HOME or HASNA_HOME set in this environment, so no credential file was consulted>";
+  return () => sdk.createSecretsClientFromEnv();
 }
-function currentCredential(name, apiKey) {
-  if (typeof apiKey === "function") {
-    return validateAndSealResolvedCredential(name, apiKey());
-  }
-  return explicitCredential(name, apiKey);
-}
-async function resolveRequestCredential(name, apiKey, env3 = process.env) {
-  const resolved = currentCredential(name, apiKey);
-  if (resolved.tier === "pointer") {
-    return completePointerCredential2(name, resolved, env3);
-  }
-  return resolved;
-}
-function authFailureGuidance(credential) {
-  const origin = `The API key for this request came from ${credential.source}`;
-  if (credential.deliberate) {
-    const remedy = credential.source === CALLER_SUPPLIED_CREDENTIAL_PROVIDER_SOURCE ? `Fix that provider so it returns the current key, or replace it with resolveCredential() ` + `so diagnostics can name the original source.` : `Rotate that key, or unset the override to use the credential on disk.`;
-    return `${origin} \u2014 a credential you selected deliberately. It was NOT substituted with any other key: ` + `falling back here would authenticate as a different principal than the one you named, which is ` + `exactly the failure an override exists to prevent. ${remedy}`;
-  }
-  if (credential.tier === "env") {
-    const target = credential.diskCandidates[0];
-    const remedy = target ? `Store the CURRENT key in the Keychain or write it to ${target} \u2014 both are re-read on every call, so ` + `rotations take effect immediately and in every shell. Do not simply unset ${credential.source}: ` + `nothing was found in the Keychain or on disk, so that would leave this client with no credential at all.` : `This environment has no HOME or HASNA_HOME, so no credential file could be consulted; the disk tier is ` + `unavailable here and there is nothing to fall back to. Set HOME, or supply the key explicitly.`;
-    return `${origin}, a variable in this process's environment. If a wrapper injected it for this one process, the ` + `wrapper re-reads its store on every invocation and the stored key itself is being rejected \u2014 rotate it. ` + `If this SHELL exported it, the export is a snapshot taken when the shell started: a STALE SHELL that ` + `exported the key before it was rotated keeps sending the old one until it exits. ${remedy}`;
-  }
-  if (credential.tier === "keychain") {
-    return `${origin}, which was re-read from the Keychain on this very call \u2014 so a stale shell is NOT the cause ` + `here. The stored item is genuinely being rejected: update it with the current key, or re-run the fleet ` + `key distribution so this machine gets the current key.`;
-  }
-  return `${origin}, which was re-read from disk on this very call \u2014 so a stale shell is NOT the cause here. ` + `The stored credential is genuinely being rejected: rotate it, or re-run the fleet key distribution ` + `so this machine gets the current key.`;
-}
-function assertNoAuthorityOverrideHeaders(headers, source) {
-  if (!headers)
-    return;
-  const forbidden = Object.keys(headers).find((name) => AUTHORITY_OVERRIDE_HEADERS2.has(name.trim().toLowerCase()));
-  if (forbidden) {
-    throw new Error(`Authenticated ${source} headers must not set authority header '${forbidden}'.`);
-  }
-}
-function appendQuery(path, query) {
-  if (!query)
-    return path;
-  const params = query instanceof URLSearchParams ? query : new URLSearchParams;
-  if (!(query instanceof URLSearchParams)) {
-    for (const [key2, value] of Object.entries(query)) {
-      if (value === null || value === undefined)
-        continue;
-      if (Array.isArray(value)) {
-        for (const v of value)
-          params.append(key2, String(v));
-      } else {
-        params.append(key2, String(value));
-      }
-    }
-  }
-  const qs = params.toString();
-  if (!qs)
-    return path;
-  return `${path}${path.includes("?") ? "&" : "?"}${qs}`;
-}
-function createHasnaHttpTransportInternal(options, requestBindingProvider) {
-  const fetchImpl = options.fetchImpl ?? ((input2, init) => fetch(input2, init));
-  const base2 = toV1BaseUrl2(options.baseUrl);
-  const timeoutMs = options.timeoutMs ?? 30000;
-  const sleep = options.sleepImpl ?? defaultSleep;
-  const defaultRetry = options.retry;
-  function resolveRetry(callRetry) {
-    const chosen = callRetry !== undefined ? callRetry : defaultRetry;
-    if (chosen === false)
-      return null;
-    const r2 = chosen ?? {};
-    return {
-      retries: r2.retries ?? 2,
-      baseDelayMs: r2.baseDelayMs ?? 200,
-      maxDelayMs: r2.maxDelayMs ?? 2000,
-      retryStatuses: r2.retryStatuses ?? [...DEFAULT_RETRY_STATUSES]
-    };
-  }
-  async function once2(method2, rel, url2, body, opts, credential) {
-    assertNoAuthorityOverrideHeaders(options.headers, "transport");
-    assertNoAuthorityOverrideHeaders(opts.headers, "request");
-    const headers = {
-      "x-api-key": credential.apiKey,
-      Authorization: `Bearer ${credential.apiKey}`,
-      Accept: "application/json",
-      ...options.headers ?? {},
-      ...opts.headers ?? {}
-    };
-    if (opts.idempotencyKey)
-      headers["Idempotency-Key"] = opts.idempotencyKey;
-    const init = {
-      method: method2,
-      headers,
-      redirect: "manual"
-    };
-    if (body !== undefined) {
-      headers["Content-Type"] = "application/json";
-      init.body = JSON.stringify(body);
-    }
-    const controller = new AbortController;
-    const onAbort = () => controller.abort();
-    if (opts.signal) {
-      if (opts.signal.aborted)
-        controller.abort();
-      else
-        opts.signal.addEventListener("abort", onAbort, { once: true });
-    }
-    const timer = setTimeout(() => controller.abort(), opts.timeoutMs ?? timeoutMs);
-    init.signal = controller.signal;
-    let response;
-    try {
-      response = await fetchImpl(url2, init);
-    } catch (error61) {
-      const err = error61 instanceof Error ? error61 : new Error(String(error61));
-      if (opts.signal?.aborted)
-        return { ok: false, retryable: false, error: err };
-      return { ok: false, retryable: true, error: err };
-    } finally {
-      clearTimeout(timer);
-      if (opts.signal)
-        opts.signal.removeEventListener("abort", onAbort);
-    }
-    const authenticationFailure = response.status === 401 || response.status === 403;
-    let parsed = undefined;
-    if (authenticationFailure) {
-      try {
-        await response.body?.cancel();
-      } catch {}
-    } else {
-      const text5 = await response.text();
-      if (text5.length > 0) {
-        try {
-          parsed = JSON.parse(text5);
-        } catch {
-          parsed = text5;
-        }
-      }
-    }
-    if (!response.ok) {
-      if (response.status >= 300 && response.status < 400) {
-        return {
-          ok: false,
-          retryable: false,
-          error: new HasnaHttpError(method2, rel, response.status, parsed)
-        };
-      }
-      if (authenticationFailure) {
-        return {
-          ok: false,
-          retryable: false,
-          error: new HasnaHttpError(method2, rel, response.status, undefined, {
-            source: credential.source,
-            tier: credential.tier,
-            guidance: authFailureGuidance(credential)
-          })
-        };
-      }
-      const retry = resolveRetry(opts.retry);
-      const retryable = retry ? retry.retryStatuses.includes(response.status) : false;
-      return { ok: false, retryable, error: new HasnaHttpError(method2, rel, response.status, parsed) };
-    }
-    return { ok: true, value: parsed };
-  }
-  async function request(method2, path, body, opts = {}) {
-    const upper = method2.toUpperCase();
-    const rel = appendQuery(path.startsWith("/") ? path : `/${path}`, opts.query);
-    const retry = resolveRetry(opts.retry);
-    const methodRetryable = IDEMPOTENT_METHODS2.has(upper) || Boolean(opts.idempotencyKey);
-    const maxAttempts = retry && methodRetryable ? retry.retries + 1 : 1;
-    const binding = requestBindingProvider ? await requestBindingProvider() : {
-      baseUrl: base2,
-      credential: await resolveRequestCredential(options.name, options.apiKey)
-    };
-    const url2 = `${binding.baseUrl}${rel}`;
-    const credential = binding.credential;
-    let last2 = null;
-    for (let attempt2 = 1;attempt2 <= maxAttempts; attempt2++) {
-      const result2 = await once2(upper, rel, url2, body, opts, credential);
-      if (result2.ok)
-        return result2.value;
-      last2 = result2;
-      const canRetry = retry !== null && methodRetryable && result2.retryable && attempt2 < maxAttempts;
-      if (!canRetry)
-        break;
-      const backoff = Math.min(retry.maxDelayMs, retry.baseDelayMs * 2 ** (attempt2 - 1));
-      const jitter = Math.floor(Math.random() * (backoff / 2 + 1));
-      await sleep(backoff + jitter);
-    }
-    throw last2.error;
-  }
-  return {
-    baseUrl: base2,
-    request,
-    get: (path, opts) => request("GET", path, undefined, opts),
-    post: (path, body, opts) => request("POST", path, body, opts),
-    put: (path, body, opts) => request("PUT", path, body, opts),
-    patch: (path, body, opts) => request("PATCH", path, body, opts),
-    del: (path, body, opts) => request("DELETE", path, body, opts)
-  };
-}
-function createHasnaHttpTransport(options) {
-  return createHasnaHttpTransportInternal(options);
-}
-
-class SecretsClient {
-  transport;
-  probeRoot;
-  fetchImpl;
-  baseHeaders;
-  constructor(options) {
-    if (!options.baseUrl)
-      throw new Error("SecretsClient requires a baseUrl.");
-    this.transport = createHasnaHttpTransport({
-      name: "secrets",
-      baseUrl: options.baseUrl.replace(/\/+$/, ""),
-      apiKey: options.apiKey ?? "",
-      ...options.fetch ? { fetchImpl: (input2, init) => options.fetch(input2, init) } : {},
-      ...options.headers ? { headers: options.headers } : {}
-    });
-    this.probeRoot = this.transport.baseUrl.replace(/\/v1$/, "");
-    this.fetchImpl = options.fetch ? (input2, init) => options.fetch(input2, init) : (input2, init) => fetch(input2, init);
-    this.baseHeaders = options.headers ?? {};
-  }
-  get baseUrl() {
-    return this.transport.baseUrl;
-  }
-  async probe(path, init) {
-    const headers = { Accept: "application/json", ...this.baseHeaders };
-    new Headers(init?.headers ?? {}).forEach((value, key2) => {
-      headers[key2] = value;
-    });
-    const response = await this.fetchImpl(`${this.probeRoot}${path}`, {
-      ...init,
-      method: "GET",
-      headers,
-      redirect: "manual"
-    });
-    const text5 = await response.text();
-    let body = undefined;
-    if (text5) {
-      try {
-        body = JSON.parse(text5);
-      } catch {
-        body = text5;
-      }
-    }
-    if (!response.ok) {
-      throw new ApiError(response.status, `GET ${path} failed: ${response.status}`, body);
-    }
-    return body;
-  }
-  async request(method2, path, opts) {
-    const requestOpts = {};
-    if (opts.query)
-      requestOpts.query = opts.query;
-    const initHeaders = opts.init?.headers;
-    if (initHeaders)
-      requestOpts.headers = initHeaders;
-    if (opts.init?.signal)
-      requestOpts.signal = opts.init.signal;
-    try {
-      return await this.transport.request(method2, path, opts.body, requestOpts);
-    } catch (error61) {
-      if (error61 instanceof HasnaHttpError) {
-        throw new ApiError(error61.status, `${method2} ${path} failed: ${error61.status}`, error61.body);
-      }
-      throw error61;
-    }
-  }
-  async health(init) {
-    return this.probe(`/health`, init);
-  }
-  async ready(init) {
-    return this.probe(`/ready`, init);
-  }
-  async listAudit(query, init) {
-    return this.request("GET", `/audit`, {
-      body: undefined,
-      query,
-      init
-    });
-  }
-  async listItems(query, init) {
-    return this.request("GET", `/items`, {
-      body: undefined,
-      query,
-      init
-    });
-  }
-  async putItem(body, init) {
-    return this.request("POST", `/items`, {
-      body,
-      query: undefined,
-      init
-    });
-  }
-  async searchItems(query, init) {
-    return this.request("GET", `/items/search`, {
-      body: undefined,
-      query,
-      init
-    });
-  }
-  async getItem(id, init) {
-    return this.request("GET", `/items/${encodeURIComponent(String(id))}`, {
-      body: undefined,
-      query: undefined,
-      init
-    });
-  }
-  async deleteItem(id, init) {
-    return this.request("DELETE", `/items/${encodeURIComponent(String(id))}`, {
-      body: undefined,
-      query: undefined,
-      init
-    });
-  }
-  async listSecrets(query, init) {
-    return this.request("GET", `/secrets`, {
-      body: undefined,
-      query,
-      init
-    });
-  }
-  async putSecret(body, init) {
-    return this.request("POST", `/secrets`, {
-      body,
-      query: undefined,
-      init
-    });
-  }
-  async deleteSecret(query, init) {
-    return this.request("DELETE", `/secrets`, {
-      body: undefined,
-      query,
-      init
-    });
-  }
-  async getSecret(query, init) {
-    return this.request("GET", `/secrets/get`, {
-      body: undefined,
-      query,
-      init
-    });
-  }
-  async searchSecrets(query, init) {
-    return this.request("GET", `/secrets/search`, {
-      body: undefined,
-      query,
-      init
-    });
-  }
-  async listSecretVersions(query, init) {
-    return this.request("GET", `/secrets/versions`, {
-      body: undefined,
-      query,
-      init
-    });
-  }
-  async checkSecretVersion(query, init) {
-    return this.request("GET", `/secrets/versions/check`, {
-      body: undefined,
-      query,
-      init
-    });
-  }
-  async restoreSecretVersion(body, init) {
-    return this.request("POST", `/secrets/restore`, {
-      body,
-      query: undefined,
-      init
-    });
-  }
-  async listUsers(query, init) {
-    return this.request("GET", `/users`, {
-      body: undefined,
-      query,
-      init
-    });
-  }
-  async registerUser(body, init) {
-    return this.request("POST", `/users`, {
-      body,
-      query: undefined,
-      init
-    });
-  }
-  async version(init) {
-    return this.probe(`/version`, init);
-  }
-}
-function createSecretsClientFromEnv(env3 = process.env, overrides = {}) {
-  const { credentials, ...clientOverrides } = overrides;
-  if (clientOverrides.baseUrl !== undefined) {
-    const pinnedKey = clientOverrides.apiKey ?? credentials?.apiKey;
-    if (pinnedKey === undefined || pinnedKey === "") {
-      throw new Error("createSecretsClientFromEnv: an explicit baseUrl requires an explicit apiKey; the ambient " + "credential (Keychain hasna.credentials.secrets.api-key, ~/.hasna/secrets/config/credentials, " + "HASNA_SECRETS_API_KEY) is never sent to a caller-supplied authority (hasna/apps#1794).");
-    }
-    return new SecretsClient({ ...clientOverrides, baseUrl: clientOverrides.baseUrl, apiKey: pinnedKey });
-  }
-  const clientEnv = env3;
-  const resolverOptions = credentials ? { credentials } : {};
-  const resolution = resolveClientTransport("secrets", clientEnv, resolverOptions);
-  const baseUrl = resolution.baseUrl;
-  const apiKey = clientOverrides.apiKey ?? (() => {
-    const resolved = resolveCredential2("secrets", clientEnv, credentials);
-    if (!resolved) {
-      throw new Error("createSecretsClientFromEnv: no @hasna/secrets credential resolved (Keychain, " + "~/.hasna/secrets/config/credentials, HASNA_SECRETS_API_KEY).");
-    }
-    return resolved;
-  });
-  return new SecretsClient({ ...clientOverrides, baseUrl, apiKey });
-}
-var __esm2 = (fn, res) => () => (fn && (res = fn(fn = 0)), res), CREDENTIAL_PROFILE_ENV_KEY2 = "HASNA_PROFILE", CredentialResolutionError2, CredentialFileUnsafeError2, HASNA_HOME_ENV_KEY2 = "HASNA_HOME", HASNA_CONFIG_HOME_ENV_KEY2 = "HASNA_CONFIG_HOME", KEYCHAIN_STATION_ENV_KEY2 = "HASNA_STATION", HASNA_HOME_DIR2 = ".hasna", CONFIG_SUBDIR2 = "config", CREDENTIALS_FILE2 = "credentials", KEYCHAIN_SECURITY_BIN2 = "/usr/bin/security", KEYCHAIN_SERVICE_PREFIX2 = "hasna.credentials", KEYCHAIN_ITEM_NOT_FOUND_STATUS2 = 44, KEYCHAIN_SPAWN_TIMEOUT_MS2 = 1e4, MAX_CREDENTIAL_FILE_BYTES2, SAFE_APP_SLUG2, SAFE_PROFILE2, ILLEGAL_IN_HEADER_VALUE2, VAULT_POINTER_SHAPE2, CREDENTIAL_SHAPED_KEY2, INSPECT_CUSTOM2, CREDENTIAL_SEAL2, CALLER_SUPPLIED_CREDENTIAL_PROVIDER_SOURCE = "caller-supplied CredentialProvider", AMBIENT_ENVIRONMENT2, SECRETS_PACKAGE_SPECIFIER, requireSecretsSdk2, DEFAULT_FLEET_GATEWAY_ORIGIN2 = "https://api.hasna.com", DEFAULT_AUTHORITY_SOURCE = "default", ASCII_CONTROL_PATTERN2, DNS_LABEL_PATTERN2, ClientTransportConfigurationError2, HasnaHttpError, DEFAULT_RETRY_STATUSES, IDEMPOTENT_METHODS2, AUTHORITY_OVERRIDE_HEADERS2, defaultSleep = (ms) => new Promise((resolve34) => setTimeout(resolve34, ms)), init_transport2, MAX_CREDENTIAL_FILE_BYTES22, INSPECT_CUSTOM22, CREDENTIAL_SEAL22, AMBIENT_ENVIRONMENT22, SECRETS_PACKAGE_SPECIFIER2, requireSecretsSdk22, IDEMPOTENT_METHODS22, AUTHORITY_OVERRIDE_HEADERS22, init_storage, PATHS_RESOLVER_APP_SLUG_RE3, SQLITE_SIDECAR_FILES, LEGACY_SERVICE_FILES, init_data_dir, SecretsTestIsolationError, TEST_ENTRYPOINT_RE, init_test_isolation, init_client, ApiError;
-var init_sdk = __esm(() => {
-  init_transport2 = __esm2(() => {
-    CredentialResolutionError2 = class CredentialResolutionError3 extends Error {
-      appName;
-      attempted;
-      constructor(appName, message, attempted) {
-        super(message);
-        this.name = "CredentialResolutionError";
-        this.appName = appName;
-        this.attempted = attempted;
-      }
-    };
-    CredentialFileUnsafeError2 = class CredentialFileUnsafeError3 extends Error {
-      path;
-      constructor(path, reason2) {
-        super(`Refusing unsafe credential/config file ${path}: ${reason2}.`);
-        this.name = "CredentialFileUnsafeError";
-        this.path = path;
-      }
-    };
-    MAX_CREDENTIAL_FILE_BYTES2 = 64 * 1024;
-    SAFE_APP_SLUG2 = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/;
-    SAFE_PROFILE2 = /^[A-Za-z0-9](?:[A-Za-z0-9._-]*[A-Za-z0-9])?$/;
-    ILLEGAL_IN_HEADER_VALUE2 = /[^\t\x20-\x7e]/;
-    VAULT_POINTER_SHAPE2 = /^[a-z0-9][a-z0-9-]*(?:\/[a-z0-9][a-z0-9-_.]*){2,}$/;
-    CREDENTIAL_SHAPED_KEY2 = /(?:^|_)(?:API_KEY|KEY|TOKEN|SECRET|PASSWORD|PASSWD|CREDENTIAL|AUTH)(?:_|$)/;
-    INSPECT_CUSTOM2 = Symbol.for("nodejs.util.inspect.custom");
-    CREDENTIAL_SEAL2 = Symbol.for("hasna:contracts:sealedCredential");
-    AMBIENT_ENVIRONMENT2 = Symbol.for("hasna:contracts:ambientClientEnvironment");
-    SECRETS_PACKAGE_SPECIFIER = "@hasna/" + "secrets";
-    requireSecretsSdk2 = createRequire2(import.meta.url);
-    ASCII_CONTROL_PATTERN2 = /[\u0000-\u001f\u007f]/;
-    DNS_LABEL_PATTERN2 = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/;
-    ClientTransportConfigurationError2 = class ClientTransportConfigurationError3 extends Error {
-      appName;
-      sources;
-      constructor(appName, message, sources = []) {
-        super(message);
-        this.name = "ClientTransportConfigurationError";
-        this.appName = appName;
-        this.sources = Object.freeze([...sources]);
-      }
-    };
-    HasnaHttpError = class HasnaHttpError2 extends Error {
-      status;
-      method;
-      path;
-      credentialSource;
-      credentialTier;
-      constructor(method2, path, status, body, credential) {
-        const guidance = credential ? `. ${credential.guidance}` : "";
-        super(`Hasna cloud request failed: ${method2} ${path} -> ${status}${guidance}`);
-        this.name = "HasnaHttpError";
-        this.status = status;
-        this.method = method2;
-        this.path = path;
-        Object.defineProperty(this, "body", {
-          value: body,
-          enumerable: status !== 401 && status !== 403,
-          writable: false,
-          configurable: false
-        });
-        this.credentialSource = credential?.source ?? null;
-        this.credentialTier = credential?.tier ?? null;
-      }
-    };
-    DEFAULT_RETRY_STATUSES = [408, 425, 429, 500, 502, 503, 504];
-    IDEMPOTENT_METHODS2 = new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
-    AUTHORITY_OVERRIDE_HEADERS2 = new Set([
-      "host",
-      ":authority",
-      "forwarded",
-      "x-forwarded-host",
-      "x-original-host"
-    ]);
-  });
-  init_storage = __esm2(() => {
-    MAX_CREDENTIAL_FILE_BYTES22 = 64 * 1024;
-    INSPECT_CUSTOM22 = Symbol.for("nodejs.util.inspect.custom");
-    CREDENTIAL_SEAL22 = Symbol.for("hasna:contracts:sealedCredential");
-    AMBIENT_ENVIRONMENT22 = Symbol.for("hasna:contracts:ambientClientEnvironment");
-    SECRETS_PACKAGE_SPECIFIER2 = "@hasna/" + "secrets";
-    requireSecretsSdk22 = createRequire22(import.meta.url);
-    IDEMPOTENT_METHODS22 = new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
-    AUTHORITY_OVERRIDE_HEADERS22 = new Set([
-      "host",
-      ":authority",
-      "forwarded",
-      "x-forwarded-host",
-      "x-original-host"
-    ]);
-  });
-  init_data_dir = __esm2(() => {
-    PATHS_RESOLVER_APP_SLUG_RE3 = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
-    SQLITE_SIDECAR_FILES = ["vault.db-wal", "vault.db-shm", "vault.db-journal"];
-    LEGACY_SERVICE_FILES = [
-      "vault.key",
-      "vault.key.enc",
-      "kms.json",
-      "aws.json",
-      ".serve-token"
-    ];
-  });
-  init_test_isolation = __esm2(() => {
-    init_data_dir();
-    SecretsTestIsolationError = class SecretsTestIsolationError2 extends Error {
-      constructor(message) {
-        super(message);
-        this.name = "SecretsTestIsolationError";
-      }
-    };
-    TEST_ENTRYPOINT_RE = /\.(test|spec)\.[cm]?[jt]sx?$/;
-  });
-  init_client = __esm2(() => {
-    init_transport2();
-    init_storage();
-    init_test_isolation();
-    init_transport2();
-  });
-  init_client();
-  ApiError = class ApiError extends Error {
-    status;
-    body;
-    constructor(status, message, body) {
-      super(message);
-      this.status = status;
-      this.body = body;
-      this.name = "ApiError";
-    }
-  };
-  init_client();
-});
-
-// src/lib/execution-secrets.ts
-import { constants as constants26, closeSync as closeSync27, fstatSync as fstatSync27, openSync as openSync27, readSync as readSync20, realpathSync as realpathSync16 } from "fs";
-import { hostname as stationHostname } from "os";
-function selectedSecretBindingsTemplate(scope, names, createClient2 = createSecretsClientFromEnv) {
+function selectedSecretBindingsTemplate(scope, names, createClient2) {
   let secretsAuthority;
   try {
     secretsAuthority = createClient2().baseUrl;
@@ -98295,8 +97008,8 @@ function declaredSecretNames(value) {
 function readSelectedSecretBindings(path) {
   let fd;
   try {
-    fd = openSync27(path, constants26.O_RDONLY | constants26.O_NOFOLLOW | constants26.O_NONBLOCK);
-    const stat2 = fstatSync27(fd);
+    fd = openSync26(path, constants26.O_RDONLY | constants26.O_NOFOLLOW | constants26.O_NONBLOCK);
+    const stat2 = fstatSync26(fd);
     if (!stat2.isFile() || stat2.size > 65536)
       throw new Error;
     const bytes = Buffer.alloc(65537);
@@ -98311,7 +97024,7 @@ function readSelectedSecretBindings(path) {
     return refuse6("INVALID_SECRET_BINDINGS", "Secret bindings must be a regular JSON file of at most 64 KiB, containing reference names only.");
   } finally {
     if (fd !== undefined)
-      closeSync27(fd);
+      closeSync26(fd);
   }
 }
 function validateSelectedSecretBindings(value, scope, names) {
@@ -98345,12 +97058,13 @@ function validateSelectedSecretBindings(value, scope, names) {
   }
   return structuredClone(value);
 }
-async function resolveSelectedSecrets(bindings, createClient2 = createSecretsClientFromEnv) {
+async function resolveSelectedSecrets(bindings, createClient2) {
   if (!Object.keys(bindings.bindings).length)
     return {};
+  const factory = createClient2 ?? await defaultSecretsClientFactory();
   let client2;
   try {
-    client2 = createClient2();
+    client2 = factory();
   } catch {
     return refuse6("LOCAL_SECRET_UNAVAILABLE", "The configured Secrets client could not authenticate. No ambient credential fallback was attempted.");
   }
@@ -98383,7 +97097,6 @@ function redactExecutionSecrets(text5, env3) {
   return text5;
 }
 var init_execution_secrets = __esm(() => {
-  init_sdk();
   init_selection_cache();
 });
 
@@ -98607,7 +97320,7 @@ __export(exports_selected_run, {
 import { createHash as createHash41 } from "crypto";
 import { spawn as spawn4 } from "child_process";
 import { mkdirSync as mkdirSync19, mkdtempSync as mkdtempSync5, writeFileSync as writeFileSync18, realpathSync as realpathSync17 } from "fs";
-import { dirname as dirname37, join as join61, resolve as resolve34 } from "path";
+import { dirname as dirname37, join as join60, resolve as resolve34 } from "path";
 import { tmpdir, hostname as stationHostname2 } from "os";
 async function resolveSelectedRun(spec, profileId, options = {}) {
   const context = await resolveSelectionContext(profileId, options);
@@ -98664,7 +97377,7 @@ async function prepareSelectedSecretBindings(selected, cwd2 = process.cwd()) {
   const names = declaredSecretNames(manifest.runtime?.env);
   if (!names.length)
     throw new SkillSelectionError("NO_DECLARED_SECRETS", "This selected executable does not declare any environment references.");
-  return selectedSecretBindingsTemplate({ selection: selected.selection, profileId: selected.profileId, cwd: cwd2 }, names);
+  return selectedSecretBindingsTemplate({ selection: selected.selection, profileId: selected.profileId, cwd: cwd2 }, names, await defaultSecretsClientFactory());
 }
 async function executeSelectedLocal(selected, options = {}) {
   const selection2 = structuredClone(selected.selection), profileId = selected.profileId;
@@ -98730,7 +97443,7 @@ async function executeSelectedLocal(selected, options = {}) {
         throw new SkillSelectionError("INVALID_SECRET_BINDINGS", "Explicit environment values must be bounded strings without NUL bytes.");
       secretEnv[name] = value;
     }
-  const runDirectory = mkdtempSync5(join61(tmpdir(), "skills-execution-"));
+  const runDirectory = mkdtempSync5(join60(tmpdir(), "skills-execution-"));
   const paths = new SkillEntryPaths;
   for (const entry of entries) {
     paths.add(entry.path, 100, () => {
@@ -98738,7 +97451,7 @@ async function executeSelectedLocal(selected, options = {}) {
     }, () => {
       throw new SkillSelectionError("INVALID_BUNDLE_PATH", "The execution bundle path exceeds its limit.");
     });
-    const destination = join61(runDirectory, entry.path);
+    const destination = join60(runDirectory, entry.path);
     mkdirSync19(dirname37(destination), { recursive: true, mode: 448 });
     writeFileSync18(destination, entry.bytes, { flag: "wx", mode: entry.mode & 511 });
   }
@@ -98766,7 +97479,7 @@ async function executeSelectedLocal(selected, options = {}) {
   }
   if (bindings)
     secretEnv = await resolveSelectedSecrets(bindings, options.createSecretsClient);
-  const result2 = await subprocess([executable2, ...runtimeName === "bun" ? ["--no-env-file"] : [], join61(runDirectory, declaredEntry), ...args], runDirectory, { ...env3, ...secretEnv }, input2, timeoutMs);
+  const result2 = await subprocess([executable2, ...runtimeName === "bun" ? ["--no-env-file"] : [], join60(runDirectory, declaredEntry), ...args], runDirectory, { ...env3, ...secretEnv }, input2, timeoutMs);
   result2.stdout = redactExecutionSecrets(result2.stdout, secretEnv);
   result2.stderr = redactExecutionSecrets(result2.stderr, secretEnv);
   const receipt = {
@@ -98780,7 +97493,7 @@ async function executeSelectedLocal(selected, options = {}) {
     ...bindings ? { secretBinding: { schema: bindings.schema, selection: bindings.selection, consumer: bindings.consumer, secretsAuthority: bindings.secretsAuthority, bindings: bindings.bindings } } : {},
     ...result2
   };
-  writeFileSync18(join61(runDirectory, ".execution-receipt.json"), JSON.stringify({ ...receipt, stdout: undefined, stderr: undefined }), { mode: 384 });
+  writeFileSync18(join60(runDirectory, ".execution-receipt.json"), JSON.stringify({ ...receipt, stdout: undefined, stderr: undefined }), { mode: 384 });
   return receipt;
 }
 async function subprocess(command, cwd2, env3, input2, timeoutMs) {
@@ -102992,20 +101705,20 @@ var init_runs = __esm(() => {
 
 // src/lib/run-state.ts
 import { createHash as createHash42, randomBytes } from "crypto";
-import { existsSync as existsSync28, mkdirSync as mkdirSync20, readFileSync as readFileSync39, readdirSync as readdirSync23, statSync as statSync19, writeFileSync as writeFileSync19 } from "fs";
-import { extname, join as join62, relative as relative11 } from "path";
+import { existsSync as existsSync28, mkdirSync as mkdirSync20, readFileSync as readFileSync38, readdirSync as readdirSync23, statSync as statSync19, writeFileSync as writeFileSync19 } from "fs";
+import { extname, join as join61, relative as relative11 } from "path";
 function createSkillRun(params, targetDir = process.cwd()) {
   const now3 = new Date;
   const id2 = createRunId(now3);
   const day = now3.toISOString().slice(0, 10);
   const skillName = normalizeSkillName(params.skill);
   const root2 = getProjectStateDir(targetDir);
-  const runDir = join62(root2, "runs", day, id2);
-  const logsDir = join62(runDir, "logs");
-  const exportDir = join62(root2, "exports", skillName, id2);
+  const runDir = join61(root2, "runs", day, id2);
+  const logsDir = join61(runDir, "logs");
+  const exportDir = join61(root2, "exports", skillName, id2);
   mkdirSync20(logsDir, { recursive: true });
   mkdirSync20(exportDir, { recursive: true });
-  mkdirSync20(join62(root2, "tmp"), { recursive: true });
+  mkdirSync20(join61(root2, "tmp"), { recursive: true });
   const record13 = {
     id: id2,
     skill: skillName,
@@ -103057,27 +101770,27 @@ function updateSkillRun(context, patch) {
   return context.record;
 }
 function writeRunLogs(context, stdout = "", stderr = "") {
-  writeFileSync19(join62(context.logsDir, "stdout.log"), stdout);
-  writeFileSync19(join62(context.logsDir, "stderr.log"), stderr);
+  writeFileSync19(join61(context.logsDir, "stdout.log"), stdout);
+  writeFileSync19(join61(context.logsDir, "stderr.log"), stderr);
 }
 function appendRunEvent(context, event, data = {}) {
   const line = JSON.stringify({ ts: new Date().toISOString(), event, ...data }) + `
 `;
-  const path = join62(context.runDir, "events.ndjson");
-  const previous = existsSync28(path) ? readFileSync39(path, "utf-8") : "";
+  const path = join61(context.runDir, "events.ndjson");
+  const previous = existsSync28(path) ? readFileSync38(path, "utf-8") : "";
   writeFileSync19(path, previous + line);
 }
 function listSkillRuns(targetDir = process.cwd(), limit = 50) {
-  const runsRoot = join62(getProjectStateDir(targetDir), "runs");
+  const runsRoot = join61(getProjectStateDir(targetDir), "runs");
   if (!existsSync28(runsRoot))
     return [];
   const records = [];
   for (const day of readdirSync23(runsRoot).sort().reverse()) {
-    const dayDir = join62(runsRoot, day);
+    const dayDir = join61(runsRoot, day);
     if (!statSync19(dayDir).isDirectory())
       continue;
     for (const runId2 of readdirSync23(dayDir).sort().reverse()) {
-      const record13 = readRunRecord(join62(dayDir, runId2));
+      const record13 = readRunRecord(join61(dayDir, runId2));
       if (record13)
         records.push(record13);
       if (records.length >= limit)
@@ -103087,11 +101800,11 @@ function listSkillRuns(targetDir = process.cwd(), limit = 50) {
   return records;
 }
 function findSkillRun(runId2, targetDir = process.cwd()) {
-  const runsRoot = join62(getProjectStateDir(targetDir), "runs");
+  const runsRoot = join61(getProjectStateDir(targetDir), "runs");
   if (!existsSync28(runsRoot))
     return null;
   for (const day of readdirSync23(runsRoot)) {
-    const record13 = readRunRecord(join62(runsRoot, day, runId2));
+    const record13 = readRunRecord(join61(runsRoot, day, runId2));
     if (record13)
       return record13;
   }
@@ -103108,14 +101821,14 @@ function skillRunEnv(context) {
   };
 }
 function getRunExportDir(runId2, skill, targetDir = process.cwd()) {
-  return join62(getProjectStateDir(targetDir), "exports", normalizeSkillName(skill), runId2);
+  return join61(getProjectStateDir(targetDir), "exports", normalizeSkillName(skill), runId2);
 }
 function writeRunRecord(context) {
-  writeFileSync19(join62(context.runDir, "run.json"), JSON.stringify(context.record, null, 2) + `
+  writeFileSync19(join61(context.runDir, "run.json"), JSON.stringify(context.record, null, 2) + `
 `);
 }
 function writeArtifactsManifest(context, artifacts) {
-  writeFileSync19(join62(context.runDir, "artifacts.json"), JSON.stringify({ runId: context.record.id, artifacts }, null, 2) + `
+  writeFileSync19(join61(context.runDir, "artifacts.json"), JSON.stringify({ runId: context.record.id, artifacts }, null, 2) + `
 `);
 }
 function collectRunArtifacts(context) {
@@ -103124,7 +101837,7 @@ function collectRunArtifacts(context) {
   const artifacts = [];
   for (const path of walkFiles(context.exportDir)) {
     const stat2 = statSync19(path);
-    const bytes = readFileSync39(path);
+    const bytes = readFileSync38(path);
     artifacts.push({
       path: toProjectRelative(context.targetDir, path),
       mime: mimeForPath(path),
@@ -103135,11 +101848,11 @@ function collectRunArtifacts(context) {
   return artifacts.sort((a, b) => a.path.localeCompare(b.path));
 }
 function readRunRecord(runDir) {
-  const path = join62(runDir, "run.json");
+  const path = join61(runDir, "run.json");
   if (!existsSync28(path))
     return null;
   try {
-    return JSON.parse(readFileSync39(path, "utf-8"));
+    return JSON.parse(readFileSync38(path, "utf-8"));
   } catch {
     return null;
   }
@@ -103147,7 +101860,7 @@ function readRunRecord(runDir) {
 function walkFiles(dir) {
   const files = [];
   for (const entry of readdirSync23(dir)) {
-    const full = join62(dir, entry);
+    const full = join61(dir, entry);
     if (statSync19(full).isDirectory())
       files.push(...walkFiles(full));
     else
@@ -103197,7 +101910,7 @@ var init_run_state = __esm(() => {
 });
 
 // src/lib/mcp-registration-environment.ts
-import { isAbsolute as isAbsolute35 } from "path";
+import { isAbsolute as isAbsolute34 } from "path";
 function skillsMcpRegistrationEnvironment(env3 = process.env, origin) {
   const result2 = {};
   const profile = selectedSkillsProfile(env3);
@@ -103207,7 +101920,7 @@ function skillsMcpRegistrationEnvironment(env3 = process.env, origin) {
     const value = env3[key2];
     if (value === undefined)
       continue;
-    if (!isAbsolute35(value) || /[\x00-\x1f\x7f]/.test(value))
+    if (!isAbsolute34(value) || /[\x00-\x1f\x7f]/.test(value))
       throw new Error(`Invalid ${key2}; expected an absolute configuration path`);
     result2[key2] = value;
   }
@@ -103237,7 +101950,7 @@ var init_mcp_registration_environment = __esm(() => {
 import { randomUUID as randomUUID9 } from "crypto";
 import fs2 from "fs";
 import { homedir as homedir10 } from "os";
-import { dirname as dirname38, isAbsolute as isAbsolute36, join as join63, relative as relative12, resolve as resolve35, sep as sep18 } from "path";
+import { dirname as dirname38, isAbsolute as isAbsolute35, join as join62, relative as relative12, resolve as resolve35, sep as sep18 } from "path";
 function guardedAgentConfigRefusal(error61) {
   return error61 instanceof ConfigWriteRefusal ? error61.message : "configuration update was refused";
 }
@@ -103276,7 +101989,7 @@ function unchanged3(before2, current) {
 function parentWitnesses(path) {
   const home = canonicalSystemPath(homedir10()), local = relative12(home, path);
   const creationParent = dirname38(path);
-  if (!isAbsolute36(path) || resolve35(path) !== path || !local || local === ".." || local.startsWith(".." + sep18))
+  if (!isAbsolute35(path) || resolve35(path) !== path || !local || local === ".." || local.startsWith(".." + sep18))
     throw new Error;
   const parents3 = [];
   for (let ancestor = home;; ancestor = dirname38(ancestor)) {
@@ -103285,7 +101998,7 @@ function parentWitnesses(path) {
       break;
   }
   for (const part of relative12(home, dirname38(path)).split(sep18).filter(Boolean))
-    parents3.push(join63(parents3[parents3.length - 1], part));
+    parents3.push(join62(parents3[parents3.length - 1], part));
   return parents3.map((path2) => {
     if (!statOrMissing(path2)) {
       if (!path2.startsWith(home + sep18))
@@ -103345,7 +102058,7 @@ function guardedAgentConfigWrite(path, transform3) {
     if (typeof process.getuid !== "function")
       throw new Error;
     refusal3 = "UNSAFE_PATH";
-    if (!isAbsolute36(path) || resolve35(path) !== path)
+    if (!isAbsolute35(path) || resolve35(path) !== path)
       throw new Error;
     path = canonicalSystemPath(path);
     const parents3 = parentWitnesses(path);
@@ -110186,8 +108899,8 @@ var require_utils = __commonJS((exports, module) => {
   var HOST_DELIMS = { "@": "%40", "/": "%2F", "?": "%3F", "#": "%23", ":": "%3A" };
   var HOST_DELIM_RE = /[@/?#:]/g;
   var HOST_DELIM_NO_COLON_RE = /[@/?#]/g;
-  function reescapeHostDelimiters(host, isIP4) {
-    const re = isIP4 ? HOST_DELIM_NO_COLON_RE : HOST_DELIM_RE;
+  function reescapeHostDelimiters(host, isIP3) {
+    const re = isIP3 ? HOST_DELIM_NO_COLON_RE : HOST_DELIM_RE;
     re.lastIndex = 0;
     return host.replace(re, (ch) => HOST_DELIMS[ch]);
   }
@@ -110837,8 +109550,8 @@ var require_fast_uri = __commonJS((exports, module) => {
     const host = matches2[4];
     return hasMalformedPercentEncoding(matches2[3]) || host !== undefined && !isIPLiteral(host) && hasMalformedPercentEncoding(host) || hasMalformedPercentEncoding(matches2[6]) || hasMalformedPercentEncoding(matches2[7]) || hasMalformedPercentEncoding(matches2[8]);
   }
-  function canonicalizeHost(parsed, options, schemeHandler, isIP4) {
-    if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport) && parsed.host && !isIPLiteral(parsed.host) && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP4 === false && nonSimpleDomain(parsed.host)) {
+  function canonicalizeHost(parsed, options, schemeHandler, isIP3) {
+    if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport) && parsed.host && !isIPLiteral(parsed.host) && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP3 === false && nonSimpleDomain(parsed.host)) {
       try {
         parsed.host = new URL("http://" + parsed.host).hostname;
       } catch (e2) {
@@ -110865,7 +109578,7 @@ var require_fast_uri = __commonJS((exports, module) => {
     let malformedHost = false;
     let malformedIPLiteral = false;
     let malformedScheme = false;
-    let isIP4 = false;
+    let isIP3 = false;
     if (options.reference === "suffix") {
       if (options.scheme) {
         uri = options.scheme + ":" + uri;
@@ -110928,15 +109641,15 @@ var require_fast_uri = __commonJS((exports, module) => {
           const bracketedIPLiteral = isIPLiteral(parsed.host);
           const hasIPLiteralBracket = parsed.host.indexOf("[") !== -1 || parsed.host.indexOf("]") !== -1;
           const ipv6result = normalizeIPv6(parsed.host);
-          isIP4 = ipv6result.isIPV6 || ipv6result.isIPVFuture === true;
+          isIP3 = ipv6result.isIPV6 || ipv6result.isIPVFuture === true;
           malformedIPLiteral = hasIPLiteralBracket && (!bracketedIPLiteral || ipv6result.error === true);
-          parsed.host = isIP4 ? ipv6result.host : ipv6result.host.toLowerCase();
+          parsed.host = isIP3 ? ipv6result.host : ipv6result.host.toLowerCase();
           if (malformedIPLiteral) {
             parsed.error = parsed.error || "URI host is malformed.";
             malformedAuthorityOrPort = true;
           }
         } else {
-          isIP4 = true;
+          isIP3 = true;
         }
       }
       if (parsed.scheme === undefined && parsed.userinfo === undefined && parsed.host === undefined && parsed.port === undefined && parsed.query === undefined && !parsed.path) {
@@ -110953,13 +109666,13 @@ var require_fast_uri = __commonJS((exports, module) => {
       }
       const schemeHandler = getSchemeHandler(options.scheme || parsed.scheme);
       if (!malformedIPLiteral) {
-        malformedHost = canonicalizeHost(parsed, options, schemeHandler, isIP4);
+        malformedHost = canonicalizeHost(parsed, options, schemeHandler, isIP3);
       }
       if (!schemeHandler || schemeHandler && !schemeHandler.skipNormalize) {
         if (uri.indexOf("%") !== -1) {
           if (parsed.host !== undefined && !malformedIPLiteral) {
-            const host = isIP4 ? parsed.host : normalizePercentEncoding(parsed.host, true);
-            parsed.host = reescapeHostDelimiters(host, isIP4);
+            const host = isIP3 ? parsed.host : normalizePercentEncoding(parsed.host, true);
+            parsed.host = reescapeHostDelimiters(host, isIP3);
           }
         }
         if (parsed.path) {
@@ -115388,8 +114101,8 @@ var init_remote_customer_operations = __esm(() => {
 });
 
 // src/lib/workspace-profile.ts
-import { constants as constants27, closeSync as closeSync28, fstatSync as fstatSync28, lstatSync as lstatSync40, mkdirSync as mkdirSync21, mkdtempSync as mkdtempSync6, openSync as openSync28, readFileSync as readFileSync40, renameSync as renameSync13, rmSync as rmSync9, writeFileSync as writeFileSync20 } from "fs";
-import { dirname as dirname39, join as join64 } from "path";
+import { constants as constants27, closeSync as closeSync27, fstatSync as fstatSync27, lstatSync as lstatSync40, mkdirSync as mkdirSync21, mkdtempSync as mkdtempSync6, openSync as openSync27, readFileSync as readFileSync39, renameSync as renameSync13, rmSync as rmSync9, writeFileSync as writeFileSync20 } from "fs";
+import { dirname as dirname39, join as join63 } from "path";
 function stat2(path) {
   try {
     return lstatSync40(path);
@@ -115402,14 +114115,14 @@ function stat2(path) {
 function safeText(file2) {
   if (stat2(file2) === null)
     return null;
-  const fd = openSync28(file2, constants27.O_RDONLY | constants27.O_NOFOLLOW | constants27.O_NONBLOCK);
+  const fd = openSync27(file2, constants27.O_RDONLY | constants27.O_NOFOLLOW | constants27.O_NONBLOCK);
   try {
-    const s = fstatSync28(fd);
+    const s = fstatSync27(fd);
     if (!s.isFile() || s.size > 65536 || ![256, 384].includes(s.mode & 4095) || process.getuid && s.uid !== process.getuid())
       return fail4("The selected profile must use bounded owner-only regular files.");
-    return readFileSync40(fd, "utf8");
+    return readFileSync39(fd, "utf8");
   } finally {
-    closeSync28(fd);
+    closeSync27(fd);
   }
 }
 function checkIdentityMetadata(file2, identity6) {
@@ -115541,11 +114254,11 @@ async function prepareWorkspaceEnrollment(membershipId, source = process.env) {
         const identity6 = JSON.stringify({ email: verified.user.email, userId: verified.user.id, orgId: verified.organization.id, orgSlug: verified.organization.slug, apiUrl: origin, issuedBy: "sign-in" }, null, 2) + `
 `;
         mkdirSync21(dirname39(file2), { recursive: true, mode: 448 });
-        const temp = mkdtempSync6(join64(dirname39(file2), ".workspace-login-"));
+        const temp = mkdtempSync6(join63(dirname39(file2), ".workspace-login-"));
         let identityInstalled = false;
         try {
-          writeFileSync20(join64(temp, "credentials"), body, { mode: 384, flag: "wx" });
-          writeFileSync20(join64(temp, "identity"), identity6, { mode: 384, flag: "wx" });
+          writeFileSync20(join63(temp, "credentials"), body, { mode: 384, flag: "wx" });
+          writeFileSync20(join63(temp, "identity"), identity6, { mode: 384, flag: "wx" });
           unchangedFiles();
           for (const [path, before2] of parents3) {
             const now3 = stat2(path);
@@ -115554,16 +114267,16 @@ async function prepareWorkspaceEnrollment(membershipId, source = process.env) {
             if (!before2 && now3 && ((now3.mode & 63) !== 0 || process.getuid && now3.uid !== process.getuid()))
               changed();
           }
-          renameSync13(join64(temp, "identity"), identityFile);
+          renameSync13(join63(temp, "identity"), identityFile);
           identityInstalled = true;
-          renameSync13(join64(temp, "credentials"), file2);
+          renameSync13(join63(temp, "credentials"), file2);
         } catch (error61) {
           if (identityInstalled) {
             if (oldIdentity === null)
               rmSync9(identityFile, { force: true });
             else {
-              writeFileSync20(join64(temp, "restore"), oldIdentity, { mode: 384, flag: "wx" });
-              renameSync13(join64(temp, "restore"), identityFile);
+              writeFileSync20(join63(temp, "restore"), oldIdentity, { mode: 384, flag: "wx" });
+              renameSync13(join63(temp, "restore"), identityFile);
             }
           }
           throw error61;
@@ -115757,8 +114470,8 @@ var init_recurring_customer = __esm(() => {
 });
 
 // src/lib/recurring-recovery.ts
-import { constants as constants28, closeSync as closeSync29, fsyncSync as fsyncSync8, fstatSync as fstatSync29, lstatSync as lstatSync41, mkdirSync as mkdirSync22, openSync as openSync29, readSync as readSync21, realpathSync as realpathSync18, renameSync as renameSync14, unlinkSync as unlinkSync10, writeFileSync as writeFileSync21 } from "fs";
-import { dirname as dirname40, isAbsolute as isAbsolute37, join as join65, resolve as resolve36 } from "path";
+import { constants as constants28, closeSync as closeSync28, fsyncSync as fsyncSync8, fstatSync as fstatSync28, lstatSync as lstatSync41, mkdirSync as mkdirSync22, openSync as openSync28, readSync as readSync21, realpathSync as realpathSync18, renameSync as renameSync14, unlinkSync as unlinkSync10, writeFileSync as writeFileSync21 } from "fs";
+import { dirname as dirname40, isAbsolute as isAbsolute36, join as join64, resolve as resolve36 } from "path";
 import { randomUUID as randomUUID10 } from "crypto";
 
 class RecoveryOwner {
@@ -115766,7 +114479,7 @@ class RecoveryOwner {
   parents = [];
   constructor(directory2) {
     this.directory = directory2;
-    if (!isAbsolute37(directory2) || resolve36(directory2) !== directory2 || realpathSync18(directory2) !== directory2)
+    if (!isAbsolute36(directory2) || resolve36(directory2) !== directory2 || realpathSync18(directory2) !== directory2)
       invalid6();
     for (let path = directory2;; path = dirname40(path)) {
       const stat3 = lstatSync41(path);
@@ -115792,9 +114505,9 @@ class RecoveryOwner {
   }
   read(name) {
     this.assert();
-    const fd = openSync29(join65(this.directory, name), constants28.O_RDONLY | constants28.O_NOFOLLOW | constants28.O_NONBLOCK);
+    const fd = openSync28(join64(this.directory, name), constants28.O_RDONLY | constants28.O_NOFOLLOW | constants28.O_NONBLOCK);
     try {
-      const before2 = fstatSync29(fd);
+      const before2 = fstatSync28(fd);
       if (!before2.isFile() || before2.nlink !== 1 || (before2.mode & 4095) !== 384 || before2.size < 1 || before2.size > 8192 || process.getuid && before2.uid !== process.getuid())
         invalid6();
       const bytes = Buffer.alloc(before2.size + 1);
@@ -115805,36 +114518,36 @@ class RecoveryOwner {
           break;
         size2 += n2;
       }
-      const after2 = fstatSync29(fd), path = lstatSync41(join65(this.directory, name));
+      const after2 = fstatSync28(fd), path = lstatSync41(join64(this.directory, name));
       if (size2 !== before2.size || after2.size !== before2.size || before2.mtimeMs !== after2.mtimeMs || before2.ctimeMs !== after2.ctimeMs || path.dev !== before2.dev || path.ino !== before2.ino || !path.isFile() || path.isSymbolicLink())
         invalid6();
       this.assert();
       return new TextDecoder("utf-8", { fatal: true }).decode(bytes.subarray(0, size2));
     } finally {
-      closeSync29(fd);
+      closeSync28(fd);
     }
   }
   write(name, value) {
     this.assert();
     const bytes = canonicalJson2(value, 8192) + `
 `;
-    const fd = openSync29(join65(this.directory, name), constants28.O_WRONLY | constants28.O_CREAT | constants28.O_EXCL | constants28.O_NOFOLLOW, 384);
+    const fd = openSync28(join64(this.directory, name), constants28.O_WRONLY | constants28.O_CREAT | constants28.O_EXCL | constants28.O_NOFOLLOW, 384);
     try {
       writeFileSync21(fd, bytes);
       fsyncSync8(fd);
     } finally {
-      closeSync29(fd);
+      closeSync28(fd);
     }
     this.assert();
     this.sync();
   }
   sync() {
     this.assert();
-    const fd = openSync29(this.directory, constants28.O_RDONLY | constants28.O_NOFOLLOW);
+    const fd = openSync28(this.directory, constants28.O_RDONLY | constants28.O_NOFOLLOW);
     try {
       fsyncSync8(fd);
     } finally {
-      closeSync29(fd);
+      closeSync28(fd);
     }
   }
   saveState(state, expected) {
@@ -115845,30 +114558,30 @@ class RecoveryOwner {
     if (this.read("state.json") !== expected)
       invalid6();
     this.assert();
-    renameSync14(join65(this.directory, name), join65(this.directory, "state.json"));
+    renameSync14(join64(this.directory, name), join64(this.directory, "state.json"));
     this.sync();
   }
   async locked(action) {
     this.assert();
     let fd;
     try {
-      fd = openSync29(join65(this.directory, "operation.lock"), constants28.O_WRONLY | constants28.O_CREAT | constants28.O_EXCL | constants28.O_NOFOLLOW, 384);
+      fd = openSync28(join64(this.directory, "operation.lock"), constants28.O_WRONLY | constants28.O_CREAT | constants28.O_EXCL | constants28.O_NOFOLLOW, 384);
     } catch {
       throw new RecurringCustomerError("RECURRING_RECOVERY_BUSY", "Recovery is locked. Confirm the original process has stopped before explicitly reconciling the retained lock; no request was retried.");
     }
-    const owner3 = fstatSync29(fd);
+    const owner3 = fstatSync28(fd);
     try {
       writeFileSync21(fd, JSON.stringify({ pid: process.pid }));
       fsyncSync8(fd);
       this.sync();
       return await action();
     } finally {
-      closeSync29(fd);
+      closeSync28(fd);
       this.assert();
-      const now3 = lstatSync41(join65(this.directory, "operation.lock"));
+      const now3 = lstatSync41(join64(this.directory, "operation.lock"));
       if (owner3.dev !== now3.dev || owner3.ino !== now3.ino || !now3.isFile() || now3.isSymbolicLink())
         invalid6();
-      unlinkSync10(join65(this.directory, "operation.lock"));
+      unlinkSync10(join64(this.directory, "operation.lock"));
       this.sync();
     }
   }
@@ -115901,7 +114614,7 @@ function base2(customer, organizationId) {
   };
 }
 function create3(directory2, intent) {
-  if (!isAbsolute37(directory2) || resolve36(directory2) !== directory2 || realpathSync18(dirname40(directory2)) !== dirname40(directory2))
+  if (!isAbsolute36(directory2) || resolve36(directory2) !== directory2 || realpathSync18(dirname40(directory2)) !== dirname40(directory2))
     invalid6();
   mkdirSync22(directory2, { mode: 448 });
   const owner3 = new RecoveryOwner(directory2), checked = intentSchema.parse(intent), intentSha256 = canonicalJsonSha256(checked);
@@ -116064,7 +114777,7 @@ var init_recurring_recovery = __esm(() => {
 });
 
 // src/lib/recurring-surface.ts
-import { isAbsolute as isAbsolute38 } from "path";
+import { isAbsolute as isAbsolute37 } from "path";
 function recurringMcpSchema(action) {
   return action === "activate" ? recurringSurfaceSchemas.activate.extend({ code, confirm: exports_external.literal(true) }) : recurringSurfaceSchemas[action];
 }
@@ -116169,7 +114882,7 @@ var init_recurring_surface = __esm(() => {
   uuid12 = exports_external.string().regex(/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/);
   context = { userId: uuid12.optional(), membershipId: uuid12.optional() };
   page2 = { limit: exports_external.number().int().min(1).max(100).optional(), cursor: exports_external.string().min(1).max(2048).optional() };
-  directory2 = exports_external.string().max(4096).refine(isAbsolute38, "Use an absolute recovery directory");
+  directory2 = exports_external.string().max(4096).refine(isAbsolute37, "Use an absolute recovery directory");
   email4 = exports_external.string().trim().toLowerCase().email().max(254);
   code = exports_external.string().regex(/^\d{6}$/);
   recurringSurfaceSchemas = {
@@ -117542,7 +116255,7 @@ var init_run_routing = __esm(() => {
 
 // src/mcp/operation-tools.ts
 import { existsSync as existsSync29, readdirSync as readdirSync24, statSync as statSync20 } from "fs";
-import { join as join66 } from "path";
+import { join as join65 } from "path";
 function registerOperationTools(server) {
   server.registerTool("cloud_skill_eligibility", {
     title: "Cloud Skill Eligibility",
@@ -118024,7 +116737,7 @@ function registerOperationTools(server) {
       if (exists) {
         try {
           skillCount = readdirSync24(agentSkillsPath).filter((f) => {
-            const full = join66(agentSkillsPath, f);
+            const full = join65(agentSkillsPath, f);
             return !f.startsWith(".") && statSync20(full).isDirectory();
           }).length;
         } catch {}
@@ -118092,10 +116805,10 @@ var init_operation_tools = __esm(() => {
 
 // src/lib/feedback.ts
 import { appendFileSync as appendFileSync2, existsSync as existsSync30, mkdirSync as mkdirSync23 } from "fs";
-import { dirname as dirname41, join as join67 } from "path";
+import { dirname as dirname41, join as join66 } from "path";
 import { Database } from "bun:sqlite";
 function getFeedbackDbPath() {
-  return join67(getDataDir(), "skills.db");
+  return join66(getDataDir(), "skills.db");
 }
 function getFeedbackDb() {
   const dbPath = getFeedbackDbPath();
@@ -118127,7 +116840,7 @@ function saveFeedback(input2) {
     throw new Error("Feedback message is required");
   const category = input2.category ?? "general";
   if (isApiMode()) {
-    const path = join67(getDataDir(), "feedback.jsonl");
+    const path = join66(getDataDir(), "feedback.jsonl");
     const dir = dirname41(path);
     if (!existsSync30(dir))
       mkdirSync23(dir, { recursive: true });
@@ -118291,23 +117004,23 @@ var init_resource_meta_tools = __esm(() => {
 });
 
 // src/lib/scheduler.ts
-import { existsSync as existsSync31, readFileSync as readFileSync41, writeFileSync as writeFileSync22, mkdirSync as mkdirSync24 } from "fs";
-import { join as join68 } from "path";
+import { existsSync as existsSync31, readFileSync as readFileSync40, writeFileSync as writeFileSync22, mkdirSync as mkdirSync24 } from "fs";
+import { join as join67 } from "path";
 function getSchedulesPath(targetDir = process.cwd()) {
-  return join68(targetDir, ".skills", "schedules.json");
+  return join67(targetDir, ".skills", "schedules.json");
 }
 function loadSchedules(targetDir = process.cwd()) {
   const path = getSchedulesPath(targetDir);
   if (existsSync31(path)) {
     try {
-      return JSON.parse(readFileSync41(path, "utf-8"));
+      return JSON.parse(readFileSync40(path, "utf-8"));
     } catch {}
   }
   return { version: 1, schedules: [] };
 }
 function saveSchedules(data, targetDir = process.cwd()) {
   const path = getSchedulesPath(targetDir);
-  const dir = join68(targetDir, ".skills");
+  const dir = join67(targetDir, ".skills");
   if (!existsSync31(dir))
     mkdirSync24(dir, { recursive: true });
   writeFileSync22(path, JSON.stringify(data, null, 2));
@@ -118610,12 +117323,12 @@ import { createHash as createHash43, createHmac as createHmac3 } from "crypto";
 import {
   existsSync as existsSync32,
   mkdirSync as mkdirSync25,
-  readFileSync as readFileSync42,
+  readFileSync as readFileSync41,
   readdirSync as readdirSync25,
   statSync as statSync21,
   writeFileSync as writeFileSync23
 } from "fs";
-import { dirname as dirname42, join as join69, normalize as normalize5, relative as relative13, sep as sep19 } from "path";
+import { dirname as dirname42, join as join68, normalize as normalize5, relative as relative13, sep as sep19 } from "path";
 function resolveSkillsNativeStorageConfig(env3 = process.env) {
   assertNoRetiredModeEnvVars(env3, {
     app: SKILLS_ENV_NAMESPACE,
@@ -118656,7 +117369,7 @@ function getSkillsNativeStorageStatus(options = {}) {
     local: {
       dataDir: getDataDir(),
       projectStateDir: getProjectStateDir(targetDir),
-      feedbackDbPath: join69(getDataDir(), "skills.db")
+      feedbackDbPath: join68(getDataDir(), "skills.db")
     },
     remote: {
       databaseConfigured: Boolean(config2.databaseUrl),
@@ -118678,7 +117391,7 @@ function exportSkillsLocalSnapshot(targetDir = process.cwd(), options = {}) {
   const files = [];
   if (existsSync32(projectStateDir)) {
     for (const filePath of walkFiles2(projectStateDir)) {
-      const bytes = readFileSync42(filePath);
+      const bytes = readFileSync41(filePath);
       const relativePath = toPosix(relative13(targetDir, filePath));
       files.push({
         path: relativePath,
@@ -118737,7 +117450,7 @@ function parsePositiveInteger(value) {
 function walkFiles2(dir) {
   const files = [];
   for (const entry of readdirSync25(dir)) {
-    const full = join69(dir, entry);
+    const full = join68(dir, entry);
     const stats = statSync21(full);
     if (stats.isDirectory())
       files.push(...walkFiles2(full));
@@ -119009,11 +117722,11 @@ var init_private_publication_customer = __esm(() => {
 });
 
 // src/lib/private-publication-recovery.ts
-import { constants as constants29, closeSync as closeSync30, fsyncSync as fsyncSync9, fstatSync as fstatSync30, lstatSync as lstatSync42, mkdirSync as mkdirSync26, openSync as openSync30, readSync as readSync22, realpathSync as realpathSync19, renameSync as renameSync15, unlinkSync as unlinkSync11, writeFileSync as writeFileSync24 } from "fs";
-import { dirname as dirname43, isAbsolute as isAbsolute39, join as join70, resolve as resolve37 } from "path";
+import { constants as constants29, closeSync as closeSync29, fsyncSync as fsyncSync9, fstatSync as fstatSync29, lstatSync as lstatSync42, mkdirSync as mkdirSync26, openSync as openSync29, readSync as readSync22, realpathSync as realpathSync19, renameSync as renameSync15, unlinkSync as unlinkSync11, writeFileSync as writeFileSync24 } from "fs";
+import { dirname as dirname43, isAbsolute as isAbsolute38, join as join69, resolve as resolve37 } from "path";
 import { randomUUID as randomUUID11 } from "crypto";
 function safeDirectory(directory3) {
-  if (!isAbsolute39(directory3) || directory3 !== resolve37(directory3) || realpathSync19(directory3) !== directory3)
+  if (!isAbsolute38(directory3) || directory3 !== resolve37(directory3) || realpathSync19(directory3) !== directory3)
     return fail5();
   for (let path = directory3;; path = dirname43(path)) {
     const stat3 = lstatSync42(path);
@@ -119033,10 +117746,10 @@ function unchangedDirectory(directory3, identity6) {
     return fail5();
 }
 function readOwned(directory3, name, max2) {
-  const identity6 = safeDirectory(directory3), file2 = join70(directory3, name);
-  const fd = openSync30(file2, constants29.O_RDONLY | constants29.O_NOFOLLOW);
+  const identity6 = safeDirectory(directory3), file2 = join69(directory3, name);
+  const fd = openSync29(file2, constants29.O_RDONLY | constants29.O_NOFOLLOW);
   try {
-    const stat3 = fstatSync30(fd);
+    const stat3 = fstatSync29(fd);
     if (!stat3.isFile() || stat3.nlink !== 1 || stat3.size > max2 || stat3.size < 1 || (stat3.mode & 63) !== 0 || process.getuid && stat3.uid !== process.getuid())
       return fail5();
     const buffer = Buffer.alloc(Math.min(max2, stat3.size) + 1);
@@ -119047,22 +117760,22 @@ function readOwned(directory3, name, max2) {
         break;
       length += count;
     }
-    const bytes = buffer.subarray(0, length), after2 = fstatSync30(fd);
+    const bytes = buffer.subarray(0, length), after2 = fstatSync29(fd);
     unchangedDirectory(directory3, identity6);
     if (bytes.length !== stat3.size || stat3.size !== after2.size || stat3.mtimeMs !== after2.mtimeMs || stat3.ctimeMs !== after2.ctimeMs)
       return fail5();
     return bytes;
   } finally {
-    closeSync30(fd);
+    closeSync29(fd);
   }
 }
 function writeOwned(directory3, name, bytes) {
-  const fd = openSync30(join70(directory3, name), constants29.O_WRONLY | constants29.O_CREAT | constants29.O_EXCL | constants29.O_NOFOLLOW, 384);
+  const fd = openSync29(join69(directory3, name), constants29.O_WRONLY | constants29.O_CREAT | constants29.O_EXCL | constants29.O_NOFOLLOW, 384);
   try {
     writeFileSync24(fd, bytes);
     fsyncSync9(fd);
   } finally {
-    closeSync30(fd);
+    closeSync29(fd);
   }
 }
 function save2(directory3, value) {
@@ -119070,12 +117783,12 @@ function save2(directory3, value) {
   writeOwned(directory3, temporary, JSON.stringify(value) + `
 `);
   unchangedDirectory(directory3, identity6);
-  renameSync15(join70(directory3, temporary), join70(directory3, "receipt.json"));
-  const fd = openSync30(directory3, constants29.O_RDONLY | constants29.O_NOFOLLOW);
+  renameSync15(join69(directory3, temporary), join69(directory3, "receipt.json"));
+  const fd = openSync29(directory3, constants29.O_RDONLY | constants29.O_NOFOLLOW);
   try {
     fsyncSync9(fd);
   } finally {
-    closeSync30(fd);
+    closeSync29(fd);
   }
 }
 function bind2(client2, receipt) {
@@ -119083,21 +117796,21 @@ function bind2(client2, receipt) {
     throw new PrivatePublicationError("PUBLICATION_IDENTITY_CHANGED", "The fresh session does not match the recovery directory's server, account and membership.");
 }
 async function locked(directory3, action) {
-  const identity6 = safeDirectory(directory3), file2 = join70(directory3, "operation.lock");
+  const identity6 = safeDirectory(directory3), file2 = join69(directory3, "operation.lock");
   let fd;
   try {
-    fd = openSync30(file2, constants29.O_WRONLY | constants29.O_CREAT | constants29.O_EXCL | constants29.O_NOFOLLOW, 384);
+    fd = openSync29(file2, constants29.O_WRONLY | constants29.O_CREAT | constants29.O_EXCL | constants29.O_NOFOLLOW, 384);
   } catch {
     throw new PrivatePublicationError("PUBLICATION_RECOVERY_BUSY", "Another operation holds this recovery directory. If it crashed, confirm that process has stopped before explicitly removing operation.lock and resuming.");
   }
-  const lock = fstatSync30(fd);
+  const lock = fstatSync29(fd);
   try {
     writeFileSync24(fd, JSON.stringify({ pid: process.pid }) + `
 `);
     fsyncSync9(fd);
     return await action();
   } finally {
-    closeSync30(fd);
+    closeSync29(fd);
     unchangedDirectory(directory3, identity6);
     const now3 = lstatSync42(file2);
     if (now3.dev !== lock.dev || now3.ino !== lock.ino || !now3.isFile() || now3.isSymbolicLink())
@@ -119151,15 +117864,15 @@ async function preparePrivatePublication(client2, sourceDirectory, recoveryDirec
     phase: "prepared",
     intent: null
   };
-  if (!isAbsolute39(recoveryDirectory) || resolve37(recoveryDirectory) !== recoveryDirectory || realpathSync19(dirname43(recoveryDirectory)) !== dirname43(recoveryDirectory))
+  if (!isAbsolute38(recoveryDirectory) || resolve37(recoveryDirectory) !== recoveryDirectory || realpathSync19(dirname43(recoveryDirectory)) !== dirname43(recoveryDirectory))
     return fail5();
   mkdirSync26(recoveryDirectory, { mode: 448 });
   safeDirectory(recoveryDirectory);
-  const parent = openSync30(dirname43(recoveryDirectory), constants29.O_RDONLY | constants29.O_NOFOLLOW);
+  const parent = openSync29(dirname43(recoveryDirectory), constants29.O_RDONLY | constants29.O_NOFOLLOW);
   try {
     fsyncSync9(parent);
   } finally {
-    closeSync30(parent);
+    closeSync29(parent);
   }
   writeOwned(recoveryDirectory, "bundle.tgz", packed.bytes);
   save2(recoveryDirectory, receipt);
@@ -119252,10 +117965,10 @@ var init_private_publication_recovery = __esm(() => {
 });
 
 // src/mcp/private-publication-tools.ts
-import { isAbsolute as isAbsolute40 } from "path";
+import { isAbsolute as isAbsolute39 } from "path";
 function registerPrivatePublicationTools(server) {
   const uuid9 = exports_external.string().regex(/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/);
-  const directory3 = exports_external.string().max(4096).refine(isAbsolute40, "Use an absolute local directory");
+  const directory3 = exports_external.string().max(4096).refine(isAbsolute39, "Use an absolute local directory");
   const verification2 = { email: exports_external.string().email().max(254), code: exports_external.string().regex(/^\d{6}$/), userId: uuid9, membershipId: uuid9, recoveryDirectory: directory3 };
   const description = "Manage a private source publication using fresh workspace-bound verification and a host-local recovery directory. Publishing requires explicit UUID current-version comparison and upload consent. Resume reuses immutable saved bytes and intent; an uncertain PUT is finalized for server verification, never uploaded twice. Sessions and signed URLs are not returned or persisted. Private execution is unavailable. Host request history may contain the supplied verification code.";
   const handler = (action) => async (value) => {
@@ -119716,10 +118429,10 @@ var exports_runtime_mcp = {};
 __export(exports_runtime_mcp, {
   handleMcp: () => handleMcp
 });
-import { closeSync as closeSync31, constants as constants30, existsSync as existsSync33, fchmodSync as fchmodSync3, fchownSync, fstatSync as fstatSync31, fsyncSync as fsyncSync10, lstatSync as lstatSync43, mkdirSync as mkdirSync27, openSync as openSync31, readFileSync as readFileSync43, readSync as readSync23, renameSync as renameSync16, rmdirSync as rmdirSync4, statSync as statSync22, unlinkSync as unlinkSync12, writeFileSync as writeFileSync25, writeSync as writeSync6 } from "fs";
+import { closeSync as closeSync30, constants as constants30, existsSync as existsSync33, fchmodSync as fchmodSync3, fchownSync, fstatSync as fstatSync30, fsyncSync as fsyncSync10, lstatSync as lstatSync43, mkdirSync as mkdirSync27, openSync as openSync30, readFileSync as readFileSync42, readSync as readSync23, renameSync as renameSync16, rmdirSync as rmdirSync4, statSync as statSync22, unlinkSync as unlinkSync12, writeFileSync as writeFileSync25, writeSync as writeSync6 } from "fs";
 import { randomUUID as randomUUID12 } from "crypto";
 import { homedir as homedir11 } from "os";
-import { dirname as dirname44, isAbsolute as isAbsolute41, join as join71 } from "path";
+import { dirname as dirname44, isAbsolute as isAbsolute40, join as join70 } from "path";
 import { isDeepStrictEqual as isDeepStrictEqual19, stripVTControlCharacters } from "util";
 async function handleMcp(options) {
   if (options.register) {
@@ -119766,15 +118479,15 @@ async function registerMcpForAgent(agent, command, environment) {
     case "codex":
       return registerCodexMcp(command, environment);
     case "gemini":
-      return registerJsonMcpServer(agent, join71(homedir11(), ".gemini", "settings.json"), "mcpServers", server2);
+      return registerJsonMcpServer(agent, join70(homedir11(), ".gemini", "settings.json"), "mcpServers", server2);
     case "pi":
-      return registerJsonMcpServer(agent, join71(homedir11(), ".pi", "agent", "mcp.json"), "mcpServers", server2);
+      return registerJsonMcpServer(agent, join70(homedir11(), ".pi", "agent", "mcp.json"), "mcpServers", server2);
     case "opencode":
       return registerOpenCodeMcp(command, environment);
     case "cursor":
-      return registerJsonMcpServer(agent, join71(homedir11(), ".cursor", "mcp.json"), "mcpServers", server2);
+      return registerJsonMcpServer(agent, join70(homedir11(), ".cursor", "mcp.json"), "mcpServers", server2);
     case "windsurf":
-      return registerJsonMcpServer(agent, join71(homedir11(), ".windsurf", "mcp.json"), "mcpServers", server2);
+      return registerJsonMcpServer(agent, join70(homedir11(), ".windsurf", "mcp.json"), "mcpServers", server2);
     default:
       return { agent, success: false, error: `Unknown agent: ${agent}. Available: ${AGENT_TARGETS.join(", ")}, all` };
   }
@@ -119798,7 +118511,7 @@ async function registerClaudeMcp(command, server2, environment) {
         const info = lstatSync43(path);
         const backup = `${path}.skills-mcp-${randomUUID12()}.backup`;
         writeFileSync25(backup, bytes, { flag: "wx", mode: 384 });
-        if (!readFileSync43(backup).equals(bytes))
+        if (!readFileSync42(backup).equals(bytes))
           throw new Error;
         preimage = { bytes, mode: info.mode & 4095, uid: info.uid, gid: info.gid, nlink: info.nlink, backup };
       }
@@ -119862,13 +118575,13 @@ async function registerClaudeMcp(command, server2, environment) {
 `);
         const temporary = `${path}.skills-mcp-${randomUUID12()}.tmp`;
         writeFileSync25(temporary, next, { flag: "wx", mode: 384 });
-        if (!readFileSync43(temporary).equals(next))
+        if (!readFileSync42(temporary).equals(next))
           throw new Error;
         const latest = firstRun ? readClaudeFirstRunConfig(path, firstRun) : readClaudeConfig(path);
         if (claudeUserConfigPath() !== path || (before2 === null ? latest !== null : latest === null || !latest.equals(before2)))
           throw new Error;
         renameSync16(temporary, path);
-        if (!readFileSync43(path).equals(next))
+        if (!readFileSync42(path).equals(next))
           throw new Error;
       }
       return { agent: "claude", success: true, path, command: cliCommand };
@@ -119896,12 +118609,12 @@ function restoreClaudePreimage(path, preimage, observed, command) {
   }
   const rewrite = `${path}.skills-mcp-${randomUUID12()}.rewrite`;
   writeFileSync25(rewrite, observed, { flag: "wx", mode: 384 });
-  if (!readFileSync43(rewrite).equals(observed))
+  if (!readFileSync42(rewrite).equals(observed))
     throw new Error;
   const temporary = `${path}.skills-mcp-${randomUUID12()}.tmp`;
   let renamed = false;
   try {
-    const fd = openSync31(temporary, constants30.O_WRONLY | constants30.O_CREAT | constants30.O_EXCL | constants30.O_NOFOLLOW, 384);
+    const fd = openSync30(temporary, constants30.O_WRONLY | constants30.O_CREAT | constants30.O_EXCL | constants30.O_NOFOLLOW, 384);
     try {
       for (let offset = 0;offset < preimage.bytes.length; )
         offset += writeSync6(fd, preimage.bytes, offset);
@@ -119909,9 +118622,9 @@ function restoreClaudePreimage(path, preimage, observed, command) {
       fchmodSync3(fd, preimage.mode);
       fsyncSync10(fd);
     } finally {
-      closeSync31(fd);
+      closeSync30(fd);
     }
-    if (!readFileSync43(temporary).equals(preimage.bytes))
+    if (!readFileSync42(temporary).equals(preimage.bytes))
       throw new Error;
     const latest = readClaudeConfig(path);
     if (claudeUserConfigPath() !== path || latest === null || !latest.equals(observed))
@@ -119923,7 +118636,7 @@ function restoreClaudePreimage(path, preimage, observed, command) {
       unlinkSync12(temporary);
   }
   const info = lstatSync43(path);
-  if (!readFileSync43(path).equals(preimage.bytes) || (info.mode & 4095) !== preimage.mode || info.uid !== preimage.uid || info.gid !== preimage.gid)
+  if (!readFileSync42(path).equals(preimage.bytes) || (info.mode & 4095) !== preimage.mode || info.uid !== preimage.uid || info.gid !== preimage.gid)
     throw new Error;
   return {
     agent: "claude",
@@ -119964,10 +118677,10 @@ function claudeConfigLeft(path, preimage, command, rewrite) {
 }
 function claudeUserConfigPath() {
   const override = process.env.CLAUDE_CONFIG_DIR;
-  if (override !== undefined && (!override || !isAbsolute41(override) || /[\x00-\x1f\x7f]/.test(override)))
+  if (override !== undefined && (!override || !isAbsolute40(override) || /[\x00-\x1f\x7f]/.test(override)))
     throw new Error;
-  const modern = join71(override || homedir11(), process.env.CLAUDE_CODE_CUSTOM_OAUTH_URL ? ".claude-custom-oauth.json" : ".claude.json");
-  const legacy = join71(override ?? join71(homedir11(), ".claude"), ".config.json");
+  const modern = join70(override || homedir11(), process.env.CLAUDE_CODE_CUSTOM_OAUTH_URL ? ".claude-custom-oauth.json" : ".claude.json");
+  const legacy = join70(override ?? join70(homedir11(), ".claude"), ".config.json");
   if (existsSync33(legacy)) {
     const info = lstatSync43(legacy);
     if (!info.isFile())
@@ -119983,7 +118696,7 @@ function readClaudeConfig(path) {
     return null;
   if (!info.isFile() || info.size > 16777216)
     throw new Error;
-  const bytes = readFileSync43(path);
+  const bytes = readFileSync42(path);
   parseClaudeConfig(bytes);
   return bytes;
 }
@@ -120030,9 +118743,9 @@ function readClaudeFirstRunConfig(path, verifyPath) {
   const identity6 = (info) => `${info.dev}:${info.ino}:${info.uid}:${info.gid}:${info.mode}:${info.nlink}:${info.size}:${info.mtimeNs}:${info.ctimeNs}`;
   if (!before2.isFile() || before2.nlink !== 1n || before2.uid !== BigInt(process.getuid()) || (before2.mode & 0o022n) !== 0n || before2.size > 16n * 1024n * 1024n)
     throw new Error;
-  const fd = openSync31(path, constants30.O_RDONLY | constants30.O_NOFOLLOW | constants30.O_NONBLOCK);
+  const fd = openSync30(path, constants30.O_RDONLY | constants30.O_NOFOLLOW | constants30.O_NONBLOCK);
   try {
-    if (identity6(fstatSync31(fd, { bigint: true })) !== identity6(before2))
+    if (identity6(fstatSync30(fd, { bigint: true })) !== identity6(before2))
       throw new Error;
     const bytes = Buffer.alloc(Number(before2.size) + 1);
     let length = 0;
@@ -120042,14 +118755,14 @@ function readClaudeFirstRunConfig(path, verifyPath) {
         break;
       length += count;
     }
-    if (BigInt(length) !== before2.size || identity6(fstatSync31(fd, { bigint: true })) !== identity6(before2) || identity6(lstatSync43(path, { bigint: true })) !== identity6(before2))
+    if (BigInt(length) !== before2.size || identity6(fstatSync30(fd, { bigint: true })) !== identity6(before2) || identity6(lstatSync43(path, { bigint: true })) !== identity6(before2))
       throw new Error;
     const content = bytes.subarray(0, length);
     verifyPath();
     parseClaudeConfig(content);
     return content;
   } finally {
-    closeSync31(fd);
+    closeSync30(fd);
   }
 }
 function parseClaudeConfig(bytes) {
@@ -120113,7 +118826,7 @@ function withClaudeConfigLock(path, action) {
   }
 }
 function registerCodexMcp(command, environment) {
-  const path = join71(homedir11(), ".codex", "config.toml");
+  const path = join70(homedir11(), ".codex", "config.toml");
   const body = `command = ${JSON.stringify(command)}
 args = ["--stdio"]${Object.keys(environment).length ? `
 env = { ${Object.entries(environment).map(([key2, value]) => `${JSON.stringify(key2)} = ${JSON.stringify(value)}`).join(", ")} }` : ""}`;
@@ -120135,7 +118848,7 @@ ${body}`;
   }
 }
 function registerOpenCodeMcp(command, environment) {
-  const path = join71(homedir11(), ".config", "opencode", "opencode.json");
+  const path = join70(homedir11(), ".config", "opencode", "opencode.json");
   const server2 = {
     type: "local",
     command: [command, "--stdio"],
@@ -120232,7 +118945,7 @@ function findCommandOnPath(command) {
   for (const dir of pathValue.split(":")) {
     if (!dir)
       continue;
-    const candidate2 = join71(dir, command);
+    const candidate2 = join70(dir, command);
     if (existsSync33(candidate2))
       return candidate2;
   }
@@ -120457,21 +119170,21 @@ var init_reviewed_runtime_lock = __esm(() => {
 import { createHash as createHash45, randomUUID as randomUUID13 } from "crypto";
 import { Readable } from "stream";
 import { createGunzip as createGunzip2 } from "zlib";
-import { spawnSync as spawnSync6 } from "child_process";
+import { spawnSync as spawnSync5 } from "child_process";
 import {
   chmodSync as chmodSync4,
   copyFileSync,
   existsSync as existsSync34,
   lstatSync as lstatSync44,
   mkdirSync as mkdirSync28,
-  readFileSync as readFileSync44,
+  readFileSync as readFileSync43,
   readdirSync as readdirSync26,
   readlinkSync as readlinkSync8,
   realpathSync as realpathSync20,
   renameSync as renameSync17,
   writeFileSync as writeFileSync26
 } from "fs";
-import { basename as basename23, delimiter as delimiter3, dirname as dirname45, isAbsolute as isAbsolute42, join as join72, relative as relative14, resolve as resolve38, sep as sep20 } from "path";
+import { basename as basename23, delimiter as delimiter3, dirname as dirname45, isAbsolute as isAbsolute41, join as join71, relative as relative14, resolve as resolve38, sep as sep20 } from "path";
 function oldLauncherState(item) {
   if (item.oldShape === "pinned")
     return { shape: "pinned", runtime: item.oldRuntime, cwd: item.oldCwd, target: item.oldTarget, sha256: item.oldSha256, format: item.oldFormat, profile: item.oldProfile };
@@ -120497,7 +119210,7 @@ function assertLauncherRecordShapes(item, expectedProfile) {
         throw new Error("RECEIPT_LAUNCHER_SHAPE_INVALID");
       continue;
     }
-    if (shape !== "pinned" || typeof runtime !== "string" || !isAbsolute42(runtime) || typeof cwd2 !== "string" || !isAbsolute42(cwd2) || typeof sha7 !== "string" || !hex4.test(sha7)) {
+    if (shape !== "pinned" || typeof runtime !== "string" || !isAbsolute41(runtime) || typeof cwd2 !== "string" || !isAbsolute41(cwd2) || typeof sha7 !== "string" || !hex4.test(sha7)) {
       throw new Error("RECEIPT_LAUNCHER_SHAPE_INVALID");
     }
     const target = side === "old" ? item.oldTarget : item.newTarget;
@@ -120524,10 +119237,10 @@ function verifyTargetPrerequisites(manifest, packageRoot, home, cwd2, pathValue)
   if (Object.keys(contract).length !== 2 || contract.version !== 1 || contract.entry !== "dist/runtime-prerequisites.js") {
     throw new Error("RUNTIME_PREREQUISITE_CONTRACT_INVALID");
   }
-  const entry = join72(packageRoot, contract.entry);
+  const entry = join71(packageRoot, contract.entry);
   if (!entryExists(entry) || !lstatSync44(entry).isFile() || lstatSync44(entry).isSymbolicLink())
     throw new Error("RUNTIME_PREREQUISITE_ENTRY_MISSING");
-  const entrySha256 = hash6(readFileSync44(entry));
+  const entrySha256 = hash6(readFileSync43(entry));
   const env3 = { HOME: home, PATH: pathValue, BUN_RUNTIME_TRANSPILER_CACHE_PATH: "0" };
   for (const key2 of ["HASNA_SKILLS_DIR", "HASNA_SKILLS_HOME", "SKILLS_HOME", "HASNA_DATA_HOME", "XDG_DATA_HOME", "XDG_CONFIG_HOME", "XDG_CACHE_HOME", "XDG_STATE_HOME", "SUMI_HOME", "SUMI_CONFIG_DIR", "HERMES_HOME"]) {
     if (process.env[key2] !== undefined)
@@ -120536,7 +119249,7 @@ function verifyTargetPrerequisites(manifest, packageRoot, home, cwd2, pathValue)
   for (const key2 of ["SUMI_CONFIG", "SUMI_CONFIG_CONTENT"])
     if (process.env[key2] !== undefined)
       env3[key2] = "";
-  const child2 = spawnSync6(pinnedLauncherRuntime(), [...PINNED_LAUNCHER_BUN_FLAGS2, entry, home, cwd2], {
+  const child2 = spawnSync5(pinnedLauncherRuntime(), [...PINNED_LAUNCHER_BUN_FLAGS2, entry, home, cwd2], {
     cwd: dirname45(packageRoot),
     env: env3,
     encoding: "buffer",
@@ -120570,7 +119283,7 @@ function verifyTargetPrerequisites(manifest, packageRoot, home, cwd2, pathValue)
   }
   if (child2.status !== 0 || result2.code !== null)
     throw new Error("RUNTIME_PREREQUISITE_RESPONSE_INVALID");
-  if (hash6(readFileSync44(entry)) !== entrySha256)
+  if (hash6(readFileSync43(entry)) !== entrySha256)
     throw new Error("RUNTIME_PREREQUISITE_ENTRY_CHANGED");
   return { status: "verified", schema: result2.schema, targetVersion: result2.targetVersion, entry: contract.entry, entrySha256, checked: result2.checked };
 }
@@ -120584,7 +119297,7 @@ function hash6(bytes) {
 }
 function isWithin(parent, child2) {
   const rel = relative14(parent, child2);
-  return rel === "" || !rel.startsWith(`..${sep20}`) && rel !== ".." && !isAbsolute42(rel);
+  return rel === "" || !rel.startsWith(`..${sep20}`) && rel !== ".." && !isAbsolute41(rel);
 }
 function entryExists(path) {
   try {
@@ -120599,7 +119312,7 @@ function assertNoSymlinkAncestors(path) {
   const parts = absolute.split(sep20).filter(Boolean);
   let current = sep20;
   for (const part of parts) {
-    current = join72(current, part);
+    current = join71(current, part);
     const stat3 = lstatSync44(current);
     if (stat3.isSymbolicLink())
       throw new Error("PATH_ANCESTOR_SYMLINK_UNSUPPORTED");
@@ -120608,23 +119321,23 @@ function assertNoSymlinkAncestors(path) {
   }
 }
 function acquireRuntimeLock(runtimeRoot) {
-  const lockPath = join72(runtimeRoot, ".copyfile-update-lock");
+  const lockPath = join71(runtimeRoot, ".copyfile-update-lock");
   try {
     mkdirSync28(lockPath, { mode: 448 });
   } catch {
     throw new Error("RUNTIME_UPDATE_LOCKED");
   }
   try {
-    writeJsonPrivate(join72(lockPath, "lock.json"), { operationId: randomUUID13(), pid: process.pid, startedAt: new Date().toISOString() });
+    writeJsonPrivate(join71(lockPath, "lock.json"), { operationId: randomUUID13(), pid: process.pid, startedAt: new Date().toISOString() });
   } catch {
     try {
-      renameSync17(lockPath, join72(runtimeRoot, `.copyfile-update-lock-incomplete-${randomUUID13()}`));
+      renameSync17(lockPath, join71(runtimeRoot, `.copyfile-update-lock-incomplete-${randomUUID13()}`));
     } catch {}
     throw new Error("RUNTIME_LOCK_INITIALIZATION_FAILED");
   }
   return () => {
-    const released = join72(runtimeRoot, `.copyfile-update-lock-released-${randomUUID13()}`);
-    writeJsonPrivate(join72(lockPath, "released.json"), { completedAt: new Date().toISOString() });
+    const released = join71(runtimeRoot, `.copyfile-update-lock-released-${randomUUID13()}`);
+    writeJsonPrivate(join71(lockPath, "released.json"), { completedAt: new Date().toISOString() });
     renameSync17(lockPath, released);
   };
 }
@@ -120633,7 +119346,7 @@ function packageBins(pkg) {
   const entries = typeof raw === "string" ? [[PACKAGE_NAME.slice(PACKAGE_NAME.lastIndexOf("/") + 1), raw]] : raw && typeof raw === "object" && !Array.isArray(raw) ? Object.entries(raw) : [];
   const output2 = {};
   for (const [name, value] of entries) {
-    if (!/^[a-zA-Z0-9._-]+$/.test(name) || typeof value !== "string" || !value || isAbsolute42(value)) {
+    if (!/^[a-zA-Z0-9._-]+$/.test(name) || typeof value !== "string" || !value || isAbsolute41(value)) {
       throw new Error("PACKAGE_BIN_INVALID");
     }
     const normalized2 = value.replaceAll("\\", "/");
@@ -120648,7 +119361,7 @@ function packageBins(pkg) {
 function readPackage(path) {
   let data;
   try {
-    data = object11(JSON.parse(readFileSync44(path, "utf8")), "PACKAGE_JSON_INVALID");
+    data = object11(JSON.parse(readFileSync43(path, "utf8")), "PACKAGE_JSON_INVALID");
   } catch {
     throw new Error("PACKAGE_JSON_INVALID");
   }
@@ -120659,7 +119372,7 @@ function readPackage(path) {
 }
 function resolveRuntimeLayout(homeInput, pathInput) {
   const home = realpathSync20(homeInput);
-  const runtimeRoot = join72(home, ".hasna", "skills", "runtime");
+  const runtimeRoot = join71(home, ".hasna", "skills", "runtime");
   assertNoSymlinkAncestors(runtimeRoot);
   const runtimeRootStat = lstatSync44(runtimeRoot);
   if (!runtimeRootStat.isDirectory() || runtimeRootStat.isSymbolicLink() || (runtimeRootStat.mode & 63) !== 0) {
@@ -120690,8 +119403,8 @@ function resolveRuntimeLayout(homeInput, pathInput) {
   if (relativePackage.length !== 4 || relativePackage[1] !== "node_modules" || relativePackage[2] !== "@hasna" || relativePackage[3] !== "skills") {
     throw new Error("ACTIVE_RUNTIME_LAYOUT_UNSUPPORTED");
   }
-  const current = readPackage(join72(currentPackageRoot, "package.json"));
-  if (!activeBinary.startsWith(`${currentPackageRoot}${sep20}`) || activeBinary !== join72(currentPackageRoot, current.bins.skills)) {
+  const current = readPackage(join71(currentPackageRoot, "package.json"));
+  if (!activeBinary.startsWith(`${currentPackageRoot}${sep20}`) || activeBinary !== join71(currentPackageRoot, current.bins.skills)) {
     throw new Error("ACTIVE_RUNTIME_ENTRYPOINT_MISMATCH");
   }
   const launchers = [];
@@ -120702,7 +119415,7 @@ function resolveRuntimeLayout(homeInput, pathInput) {
       continue;
     seenDirectories.add(dir);
     for (const [name, target] of Object.entries(current.bins)) {
-      const path = join72(dir, name);
+      const path = join71(dir, name);
       if (!existsSync34(path))
         continue;
       assertNoSymlinkAncestors(dir);
@@ -120717,9 +119430,9 @@ function resolveRuntimeLayout(homeInput, pathInput) {
       if (launcher.kind === "foreign")
         continue;
       const actual = launcher.target;
-      if (actual !== join72(currentPackageRoot, target))
+      if (actual !== join71(currentPackageRoot, target))
         continue;
-      const newTarget = join72(runtimeRoot, "__target__", "node_modules", "@hasna", "skills", target);
+      const newTarget = join71(runtimeRoot, "__target__", "node_modules", "@hasna", "skills", target);
       const backupPath = `${path}.skills-prev-${randomUUID13()}`;
       if (launcher.kind === "symlink") {
         if (resolve38(dirname45(path), launcher.linkTarget) !== actual)
@@ -120878,14 +119591,14 @@ async function downloadPackage(version2, stagingRoot, registryOrigin, fetcher) {
   if (unpacked.name !== PACKAGE_NAME || unpacked.version !== version2)
     throw new Error("TARBALL_PACKAGE_IDENTITY_MISMATCH");
   const bins = packageBins(unpacked);
-  const archiveRoot = join72(stagingRoot, "verified-archive");
+  const archiveRoot = join71(stagingRoot, "verified-archive");
   mkdirSync28(archiveRoot, { mode: 448 });
   await archive.extract(archiveRoot);
-  const extractedPackage = join72(archiveRoot, "package");
+  const extractedPackage = join71(archiveRoot, "package");
   const extracted = readTree(extractedPackage, false);
-  const tarballPath = join72(stagingRoot, "verified-package.tgz");
+  const tarballPath = join71(stagingRoot, "verified-package.tgz");
   writeFileSync26(tarballPath, bytes, { flag: "wx", mode: 384 });
-  if (!readFileSync44(tarballPath).equals(Buffer.from(bytes)))
+  if (!readFileSync43(tarballPath).equals(Buffer.from(bytes)))
     throw new Error("TARBALL_READBACK_MISMATCH");
   return {
     tarballPath,
@@ -120931,7 +119644,7 @@ function readTree(root2, includeModes, excludeNpmDependencies = false) {
   const entries = [];
   const walk2 = (dir, prefix = "") => {
     for (const item of readdirSync26(dir).sort()) {
-      const path = join72(dir, item);
+      const path = join71(dir, item);
       const rel = prefix ? `${prefix}/${item}` : item;
       const stat3 = lstatSync44(path);
       if (excludeNpmDependencies && !prefix && item === "node_modules") {
@@ -120959,7 +119672,7 @@ function readTree(root2, includeModes, excludeNpmDependencies = false) {
       } else if (stat3.isFile()) {
         if (stat3.nlink !== 1)
           throw new Error("TREE_HARDLINK_UNSUPPORTED");
-        const bytes = readFileSync44(path);
+        const bytes = readFileSync43(path);
         entries.push({ path: rel, kind: "file", sha256: hash6(bytes), ...includeModes ? { mode: stat3.mode & 511 } : {} });
       } else
         throw new Error("TREE_ENTRY_TYPE_UNSUPPORTED");
@@ -120975,7 +119688,7 @@ function normalizeModes(root2) {
   chmodSync4(root2, rootStat.mode & 493);
   const walk2 = (dir) => {
     for (const item of readdirSync26(dir)) {
-      const path = join72(dir, item);
+      const path = join71(dir, item);
       const stat3 = lstatSync44(path);
       if (stat3.isSymbolicLink())
         continue;
@@ -120995,23 +119708,23 @@ function writeJsonPrivate(path, value) {
 `);
   writeFileSync26(path, bytes, { flag: "wx", mode: 384 });
   chmodSync4(path, 384);
-  if (!readFileSync44(path).equals(bytes))
+  if (!readFileSync43(path).equals(bytes))
     throw new Error("PRIVATE_JSON_READBACK_MISMATCH");
 }
 function writePreimageManifest(stage, configs, launchers) {
-  const path = join72(stage, "preimage", "manifest.json");
+  const path = join71(stage, "preimage", "manifest.json");
   const value = { schema: "skills.copyfile-preimage.v1", configs, launchers };
   const bytes = Buffer.from(`${JSON.stringify(value, null, 2)}
 `);
   writeFileSync26(path, bytes, { flag: "wx", mode: 256 });
   chmodSync4(path, 256);
-  if (!readFileSync44(path).equals(bytes))
+  if (!readFileSync43(path).equals(bytes))
     throw new Error("PREIMAGE_MANIFEST_READBACK_MISMATCH");
   return hash6(bytes);
 }
 function verifyPreimageManifest(runtimePath, receipt, home) {
-  const path = join72(runtimePath, "preimage", "manifest.json");
-  const bytes = readFileSync44(path);
+  const path = join71(runtimePath, "preimage", "manifest.json");
+  const bytes = readFileSync43(path);
   if (hash6(bytes) !== receipt.preimageSha256)
     throw new Error("PREIMAGE_MANIFEST_DRIFT");
   const manifest = object11(JSON.parse(bytes.toString("utf8")), "PREIMAGE_MANIFEST_INVALID");
@@ -121022,33 +119735,33 @@ function verifyPreimageManifest(runtimePath, receipt, home) {
     throw new Error("PREIMAGE_CONFIG_SET_INVALID");
   for (const [index, relativePath] of CONFIG_PREIMAGE_PATHS.entries()) {
     const config2 = receipt.configs[index];
-    if (config2.relativePath !== relativePath || config2.sourcePath !== join72(home, relativePath))
+    if (config2.relativePath !== relativePath || config2.sourcePath !== join71(home, relativePath))
       throw new Error("PREIMAGE_CONFIG_BINDING_INVALID");
     if (config2.present) {
-      const backup = join72(runtimePath, "preimage", "configs", relativePath);
+      const backup = join71(runtimePath, "preimage", "configs", relativePath);
       const stat3 = lstatSync44(backup);
-      const saved = readFileSync44(backup);
+      const saved = readFileSync43(backup);
       if (!stat3.isFile() || stat3.isSymbolicLink() || hash6(saved) !== config2.sha256 || saved.byteLength !== config2.byteSize)
         throw new Error("PREIMAGE_CONFIG_DRIFT");
     }
   }
 }
 function captureConfigPreimages(home, stage) {
-  const root2 = join72(stage, "preimage", "configs");
+  const root2 = join71(stage, "preimage", "configs");
   mkdirSync28(root2, { recursive: true, mode: 448 });
   return CONFIG_PREIMAGE_PATHS.map((relativePath) => {
-    const sourcePath = join72(home, relativePath);
+    const sourcePath = join71(home, relativePath);
     if (!entryExists(sourcePath))
       return { sourcePath, relativePath, present: false };
     const stat3 = lstatSync44(sourcePath);
     if (!stat3.isFile() || stat3.isSymbolicLink())
       throw new Error("CONFIG_PREIMAGE_NOT_REGULAR_FILE");
-    const bytes = readFileSync44(sourcePath);
-    const backupPath = join72(root2, relativePath);
+    const bytes = readFileSync43(sourcePath);
+    const backupPath = join71(root2, relativePath);
     mkdirSync28(dirname45(backupPath), { recursive: true, mode: 448 });
     writeFileSync26(backupPath, bytes, { flag: "wx", mode: 384 });
     chmodSync4(backupPath, 384);
-    const readback = readFileSync44(backupPath);
+    const readback = readFileSync43(backupPath);
     if (!readback.equals(bytes))
       throw new Error("CONFIG_PREIMAGE_READBACK_MISMATCH");
     return { sourcePath, relativePath, present: true, sha256: hash6(bytes), byteSize: bytes.byteLength };
@@ -121061,7 +119774,7 @@ function assertConfigUnchanged(configs) {
       throw new Error("CONFIG_DRIFT_DURING_UPDATE");
     if (present2) {
       const stat3 = lstatSync44(config2.sourcePath);
-      if (!stat3.isFile() || stat3.isSymbolicLink() || hash6(readFileSync44(config2.sourcePath)) !== config2.sha256) {
+      if (!stat3.isFile() || stat3.isSymbolicLink() || hash6(readFileSync43(config2.sourcePath)) !== config2.sha256) {
         throw new Error("CONFIG_DRIFT_DURING_UPDATE");
       }
     }
@@ -121102,7 +119815,7 @@ async function npmReleaseAgeCapability(cwd2, env3) {
   }
 }
 async function runNpm(args2, cwd2, home, staging, policy) {
-  const userNpmrc = join72(staging, "npm-user.npmrc"), globalNpmrc = join72(staging, "npm-global.npmrc");
+  const userNpmrc = join71(staging, "npm-user.npmrc"), globalNpmrc = join71(staging, "npm-global.npmrc");
   const baseConfig = `registry=${REGISTRY_ORIGIN}/
 ignore-scripts=true
 `;
@@ -121117,14 +119830,14 @@ ignore-scripts=true
     CI: "1",
     NPM_CONFIG_USERCONFIG: userNpmrc,
     NPM_CONFIG_GLOBALCONFIG: globalNpmrc,
-    NPM_CONFIG_CACHE: join72(staging, "npm-cache"),
+    NPM_CONFIG_CACHE: join71(staging, "npm-cache"),
     NPM_CONFIG_REGISTRY: `${REGISTRY_ORIGIN}/`,
     NPM_CONFIG_IGNORE_SCRIPTS: "true"
   };
-  const capabilityNpmrc = join72(staging, "npm-capability.npmrc");
+  const capabilityNpmrc = join71(staging, "npm-capability.npmrc");
   if (policy && !existsSync34(capabilityNpmrc))
     writeFileSync26(capabilityNpmrc, baseConfig, { mode: 384, flag: "wx" });
-  if (policy && readFileSync44(capabilityNpmrc, "utf8") !== baseConfig)
+  if (policy && readFileSync43(capabilityNpmrc, "utf8") !== baseConfig)
     throw new Error("NPM_ISOLATED_CONFIG_DRIFT");
   const npmVersion = policy ? await npmReleaseAgeCapability(cwd2, { ...env3, NPM_CONFIG_USERCONFIG: capabilityNpmrc }) : undefined;
   const config2 = baseConfig + (policy ? `min-release-age=${policy.minReleaseAge}
@@ -121132,7 +119845,7 @@ ${policy.minReleaseAgeExclude.map((pattern) => `min-release-age-exclude[]=${patt
 `).join("")}` : "");
   if (!existsSync34(userNpmrc))
     writeFileSync26(userNpmrc, config2, { mode: 384, flag: "wx" });
-  if (readFileSync44(userNpmrc, "utf8") !== config2 || readFileSync44(globalNpmrc, "utf8") !== baseConfig)
+  if (readFileSync43(userNpmrc, "utf8") !== config2 || readFileSync43(globalNpmrc, "utf8") !== baseConfig)
     throw new Error("NPM_ISOLATED_CONFIG_DRIFT");
   const proc = Bun.spawn(["npm", ...args2, "--registry", `${REGISTRY_ORIGIN}/`, "--ignore-scripts", "--no-audit", "--no-fund"], {
     cwd: cwd2,
@@ -121146,8 +119859,58 @@ ${policy.minReleaseAgeExclude.map((pattern) => `min-release-age-exclude[]=${patt
     throw new Error("DEPENDENCY_GRAPH_INSTALL_FAILED");
   return npmVersion;
 }
+async function carryInstalledSecrets(layout, stagePackage, home, stagePath, policy) {
+  const runtimePath = dirname45(dirname45(dirname45(layout.currentPackageRoot)));
+  const source = [join71(layout.currentPackageRoot, "node_modules", PRIVATE_OPTIONAL_PACKAGE), join71(runtimePath, "node_modules", PRIVATE_OPTIONAL_PACKAGE)].find((path) => entryExists(join71(path, "package.json")));
+  if (!source)
+    return null;
+  assertNoSymlinkAncestors(source);
+  const manifest = object11(JSON.parse(readFileSync43(join71(source, "package.json"), "utf8")), "CARRIED_SECRETS_MANIFEST_INVALID");
+  if (manifest.name !== PRIVATE_OPTIONAL_PACKAGE || typeof manifest.version !== "string" || !STABLE_SEMVER_PATTERN.test(manifest.version))
+    throw new Error("CARRIED_SECRETS_MANIFEST_INVALID");
+  let verification2 = "unrecorded";
+  if (entryExists(join71(runtimePath, "rollout-receipt.json"))) {
+    const prior = object11(JSON.parse(readFileSync43(join71(runtimePath, "rollout-receipt.json"), "utf8")), "CARRIED_SECRETS_RUNTIME_DRIFT");
+    if (readTree(join71(runtimePath, "node_modules"), true).digest !== prior.runtimeTreeSha256)
+      throw new Error("CARRIED_SECRETS_RUNTIME_DRIFT");
+    verification2 = "runtime-receipt";
+  }
+  if (entryExists(join71(runtimePath, "install-lock.json"))) {
+    const lock = object11(JSON.parse(readFileSync43(join71(runtimePath, "install-lock.json"), "utf8")), "CARRIED_SECRETS_LOCK_MISMATCH");
+    const locked2 = lock.packages?.[relative14(runtimePath, source).split(sep20).join("/")];
+    if (locked2?.version !== manifest.version)
+      throw new Error("CARRIED_SECRETS_LOCK_MISMATCH");
+  }
+  const carried = join71(stagePackage, "carried");
+  mkdirSync28(carried, { mode: 448 });
+  await runNpm(["pack", source, "--pack-destination", carried], stagePackage, home, stagePath, policy);
+  const file2 = `hasna-secrets-${manifest.version}.tgz`;
+  if (JSON.stringify(readdirSync26(carried)) !== JSON.stringify([file2]))
+    throw new Error("CARRIED_SECRETS_PACK_FAILED");
+  return { spec: `file:./carried/${file2}`, source, record: {
+    version: manifest.version,
+    tarballSha256: hash6(readFileSync43(join71(carried, file2))),
+    packageTreeSha256: readTree(source, false, true).digest,
+    verification: verification2
+  } };
+}
+function unresolvedOptionalDependencies(lockBytes) {
+  const lock = object11(JSON.parse(new TextDecoder().decode(lockBytes)), "INSTALL_LOCK_INVALID");
+  const packages = object11(lock.packages, "INSTALL_LOCK_INVALID");
+  const resolves = (from, name) => {
+    for (let base3 = from;; ) {
+      if (packages[base3 ? `${base3}/node_modules/${name}` : `node_modules/${name}`])
+        return true;
+      if (!base3)
+        return false;
+      const at2 = base3.lastIndexOf("node_modules/");
+      base3 = at2 > 0 ? base3.slice(0, at2 - 1) : "";
+    }
+  };
+  return Object.entries(packages).filter(([, entry]) => !entry.link).flatMap(([from, entry]) => Object.keys(entry.optionalDependencies ?? {}).filter((name) => !resolves(from, name)).map((name) => `${from} ${name}`)).sort();
+}
 function comparePackageTrees(expectedRoot, installedRoot) {
-  if (entryExists(join72(expectedRoot, "node_modules")))
+  if (entryExists(join71(expectedRoot, "node_modules")))
     throw new Error("TARBALL_BUNDLED_DEPENDENCIES_UNSUPPORTED");
   const expected = readTree(expectedRoot, false);
   const installed = readTree(installedRoot, false, true);
@@ -121183,12 +119946,12 @@ function atomicJson(path, value) {
   writeFileSync26(temp, bytes, { flag: "wx", mode: 384 });
   chmodSync4(temp, 384);
   renameSync17(temp, path);
-  if (!readFileSync44(path).equals(bytes))
+  if (!readFileSync43(path).equals(bytes))
     throw new Error("RECEIPT_READBACK_MISMATCH");
 }
 function persistReceipt(path, value) {
   if (entryExists(path)) {
-    const priorBytes = readFileSync44(path);
+    const priorBytes = readFileSync43(path);
     const prior = object11(JSON.parse(priorBytes.toString("utf8")), "RECEIPT_INVALID");
     if (prior.id !== value.id || prior.schema !== "skills.copyfile-runtime-receipt.v1" || typeof prior.state !== "string" || !/^[a-z-]{1,32}$/.test(prior.state))
       throw new Error("RECEIPT_ID_DRIFT");
@@ -121196,23 +119959,23 @@ function persistReceipt(path, value) {
 `);
     if (priorBytes.equals(nextBytes))
       return;
-    const historyRoot = join72(dirname45(path), "receipt-history");
+    const historyRoot = join71(dirname45(path), "receipt-history");
     if (!entryExists(historyRoot))
       mkdirSync28(historyRoot, { mode: 448 });
     const historyStat = lstatSync44(historyRoot);
     if (!historyStat.isDirectory() || historyStat.isSymbolicLink() || (historyStat.mode & 63) !== 0)
       throw new Error("RECEIPT_HISTORY_NOT_PRIVATE");
-    const historyPath = join72(historyRoot, `${value.id}-${String(prior.state)}-${randomUUID13()}.json`);
+    const historyPath = join71(historyRoot, `${value.id}-${String(prior.state)}-${randomUUID13()}.json`);
     writeFileSync26(historyPath, priorBytes, { flag: "wx", mode: 256 });
     chmodSync4(historyPath, 256);
-    if (!readFileSync44(historyPath).equals(priorBytes))
+    if (!readFileSync43(historyPath).equals(priorBytes))
       throw new Error("RECEIPT_HISTORY_READBACK_MISMATCH");
   }
   atomicJson(path, value);
 }
 function persistAliasReceipt(path, value) {
   if (entryExists(path)) {
-    const priorBytes = readFileSync44(path);
+    const priorBytes = readFileSync43(path);
     const prior = object11(JSON.parse(priorBytes.toString("utf8")), "ALIAS_RECEIPT_INVALID");
     if (prior.schema !== value.schema || prior.id !== value.id || typeof prior.state !== "string")
       throw new Error("ALIAS_RECEIPT_DRIFT");
@@ -121220,16 +119983,16 @@ function persistAliasReceipt(path, value) {
 `);
     if (priorBytes.equals(nextBytes))
       return;
-    const history = join72(dirname45(path), "history");
+    const history = join71(dirname45(path), "history");
     if (!entryExists(history))
       mkdirSync28(history, { mode: 448 });
     const historyStat = lstatSync44(history);
     if (!historyStat.isDirectory() || historyStat.isSymbolicLink() || (historyStat.mode & 63) !== 0)
       throw new Error("ALIAS_RECEIPT_HISTORY_UNSAFE");
-    const saved = join72(history, `${value.id}-${String(prior.state)}-${randomUUID13()}.json`);
+    const saved = join71(history, `${value.id}-${String(prior.state)}-${randomUUID13()}.json`);
     writeFileSync26(saved, priorBytes, { flag: "wx", mode: 256 });
     chmodSync4(saved, 256);
-    if (!readFileSync44(saved).equals(priorBytes))
+    if (!readFileSync43(saved).equals(priorBytes))
       throw new Error("ALIAS_RECEIPT_HISTORY_READBACK_MISMATCH");
   }
   atomicJson(path, value);
@@ -121249,21 +120012,21 @@ function assertOwnedSafePath(path, home, requireWritable = false) {
 function activeAliasRuntime(home, pathValue) {
   const layout = resolveRuntimeLayout(home, pathValue);
   const runtimePath = dirname45(dirname45(dirname45(layout.currentPackageRoot)));
-  const receiptPath = join72(runtimePath, "rollout-receipt.json");
-  const rollout = object11(JSON.parse(readFileSync44(receiptPath, "utf8")), "ROLLOUT_RECEIPT_INVALID");
-  if (rollout.schema !== "skills.copyfile-runtime-receipt.v1" || rollout.state !== "switched" || rollout.targetPackageRoot !== layout.currentPackageRoot || rollout.targetVersion !== layout.currentVersion || rollout.runtimeRoot !== layout.runtimeRoot || rollout.package !== PACKAGE_NAME || hash6(readFileSync44(join72(runtimePath, "verified-package.tgz"))) !== rollout.tarballSha256 || readTree(join72(runtimePath, "node_modules"), true).digest !== rollout.runtimeTreeSha256) {
+  const receiptPath = join71(runtimePath, "rollout-receipt.json");
+  const rollout = object11(JSON.parse(readFileSync43(receiptPath, "utf8")), "ROLLOUT_RECEIPT_INVALID");
+  if (rollout.schema !== "skills.copyfile-runtime-receipt.v1" || rollout.state !== "switched" || rollout.targetPackageRoot !== layout.currentPackageRoot || rollout.targetVersion !== layout.currentVersion || rollout.runtimeRoot !== layout.runtimeRoot || rollout.package !== PACKAGE_NAME || hash6(readFileSync43(join71(runtimePath, "verified-package.tgz"))) !== rollout.tarballSha256 || readTree(join71(runtimePath, "node_modules"), true).digest !== rollout.runtimeTreeSha256) {
     throw new Error("ACTIVE_RUNTIME_RECEIPT_DRIFT");
   }
   verifyPreimageManifest(runtimePath, rollout, home);
   return { layout, rollout };
 }
 function aliasDirs(home) {
-  return [join72(home, ".local", "bin"), join72(home, ".bun", "bin"), "/opt/homebrew/bin", "/usr/local/bin"];
+  return [join71(home, ".local", "bin"), join71(home, ".bun", "bin"), "/opt/homebrew/bin", "/usr/local/bin"];
 }
 function aliasPackageLink(home, aliasPath) {
   const dir = dirname45(aliasPath);
-  if (dir === join72(home, ".local", "bin"))
-    return join72(home, ".local", "lib", "node_modules", "@hasna", "skills");
+  if (dir === join71(home, ".local", "bin"))
+    return join71(home, ".local", "lib", "node_modules", "@hasna", "skills");
   if (dir === "/opt/homebrew/bin")
     return "/opt/homebrew/lib/node_modules/@hasna/skills";
   if (dir === "/usr/local/bin")
@@ -121279,7 +120042,7 @@ function inspectAliasPackageChain(home, aliasPath, oldLinkTarget, oldTarget, bin
   }
   const packageLinkPath = aliasPackageLink(home, aliasPath);
   const physicalPackage = dirname45(dirname45(oldTarget));
-  if (!packageLinkPath || immediate !== join72(packageLinkPath, bin) || !isWithin(join72(home, ".hasna", "skills", "runtime"), physicalPackage)) {
+  if (!packageLinkPath || immediate !== join71(packageLinkPath, bin) || !isWithin(join71(home, ".hasna", "skills", "runtime"), physicalPackage)) {
     throw new Error("ALIAS_LINK_CHAIN_UNSUPPORTED");
   }
   assertOwnedSafePath(dirname45(packageLinkPath), home);
@@ -121302,19 +120065,19 @@ function inspectAliasPackageChain(home, aliasPath, oldLinkTarget, oldTarget, bin
 }
 function validateAliasSource(home, name, actual) {
   const packageRoot = dirname45(dirname45(actual));
-  const roots = [join72(home, ".hasna", "skills", "runtime"), join72(home, ".bun", "install"), join72(home, ".local", "lib", "node_modules")];
+  const roots = [join71(home, ".hasna", "skills", "runtime"), join71(home, ".bun", "install"), join71(home, ".local", "lib", "node_modules")];
   if (basename23(packageRoot) !== "skills" || basename23(dirname45(packageRoot)) !== "@hasna" || !roots.some((root2) => isWithin(root2, packageRoot))) {
     throw new Error("ALIAS_SOURCE_ROOT_UNSUPPORTED");
   }
   assertOwnedSafePath(packageRoot, home);
-  const manifestPath = join72(packageRoot, "package.json");
+  const manifestPath = join71(packageRoot, "package.json");
   const manifestStat = lstatSync44(manifestPath), binaryStat = lstatSync44(actual);
   if (!manifestStat.isFile() || manifestStat.isSymbolicLink() || !binaryStat.isFile() || binaryStat.isSymbolicLink() || ![0, process.getuid?.() ?? -1].includes(manifestStat.uid) || ![0, process.getuid?.() ?? -1].includes(binaryStat.uid) || manifestStat.mode & 18)
     throw new Error("ALIAS_SOURCE_UNSAFE");
   const pkg = readPackage(manifestPath);
-  if (!pkg.bins[name] || actual !== join72(packageRoot, pkg.bins[name]))
+  if (!pkg.bins[name] || actual !== join71(packageRoot, pkg.bins[name]))
     throw new Error("ALIAS_SOURCE_BIN_MISMATCH");
-  return { version: pkg.version, packageRoot, binarySha256: hash6(readFileSync44(actual)) };
+  return { version: pkg.version, packageRoot, binarySha256: hash6(readFileSync43(actual)) };
 }
 function adoptCopyfileAliases(options = {}) {
   const home = realpathSync20(resolve38(options.homeDir ?? process.env.HOME ?? ""));
@@ -121322,12 +120085,12 @@ function adoptCopyfileAliases(options = {}) {
   const { layout, rollout } = activeAliasRuntime(home, pathValue);
   const currentRuntime = dirname45(dirname45(dirname45(layout.currentPackageRoot)));
   const launcherRuntime = pinnedLauncherRuntime();
-  pinnedLauncherState(launcherRuntime, currentRuntime, join72(layout.currentPackageRoot, layout.bin.skills ?? "bin/index.js"));
+  pinnedLauncherState(launcherRuntime, currentRuntime, join71(layout.currentPackageRoot, layout.bin.skills ?? "bin/index.js"));
   const releaseLock = acquireRuntimeLock(layout.runtimeRoot);
   const id2 = randomUUID13();
   const aliases = [];
-  const receiptDir = join72(currentRuntime, "alias-adoptions");
-  const receiptPath = join72(receiptDir, `${id2}.json`);
+  const receiptDir = join71(currentRuntime, "alias-adoptions");
+  const receiptPath = join71(receiptDir, `${id2}.json`);
   let receipt;
   try {
     const locked2 = activeAliasRuntime(home, pathValue);
@@ -121337,7 +120100,7 @@ function adoptCopyfileAliases(options = {}) {
       if (!entryExists(dir))
         continue;
       for (const [name, target] of Object.entries(layout.bin)) {
-        const path = join72(dir, name);
+        const path = join71(dir, name);
         if (!entryExists(path))
           continue;
         assertOwnedSafePath(dir, home, true);
@@ -121354,7 +120117,7 @@ function adoptCopyfileAliases(options = {}) {
           throw new Error("ALIAS_LINK_NOT_OWNED");
         const actual = launcher.target;
         const oldLinkTarget = launcher.kind === "symlink" ? launcher.linkTarget : actual;
-        const newTarget = join72(layout.currentPackageRoot, target);
+        const newTarget = join71(layout.currentPackageRoot, target);
         if (actual === newTarget && launcher.kind === "pinned" && launcher.format === "v3" && launcher.profile === launcherProfileForBin(name, target))
           continue;
         const chain = inspectAliasPackageChain(home, path, oldLinkTarget, actual, target);
@@ -121476,19 +120239,19 @@ function rollbackCopyfileAliases(receiptId, options = {}) {
   const pathValue = options.pathValue ?? process.env.PATH ?? "";
   const { layout, rollout } = activeAliasRuntime(home, pathValue);
   const runtimePath = dirname45(dirname45(dirname45(layout.currentPackageRoot)));
-  const receiptPath = join72(runtimePath, "alias-adoptions", `${receiptId}.json`);
+  const receiptPath = join71(runtimePath, "alias-adoptions", `${receiptId}.json`);
   const releaseLock = acquireRuntimeLock(layout.runtimeRoot);
   try {
     const locked2 = activeAliasRuntime(home, pathValue);
     if (locked2.layout.currentPackageRoot !== layout.currentPackageRoot || locked2.rollout.id !== rollout.id)
       throw new Error("ACTIVE_RUNTIME_CHANGED_BEFORE_ALIAS_ROLLBACK");
-    const receipt = object11(JSON.parse(readFileSync44(receiptPath, "utf8")), "ALIAS_RECEIPT_INVALID");
+    const receipt = object11(JSON.parse(readFileSync43(receiptPath, "utf8")), "ALIAS_RECEIPT_INVALID");
     if (receipt.schema !== "skills.copyfile-alias-adoption.v1" || receipt.id !== receiptId || !["switched", "switching", "rollback-required"].includes(receipt.state) || receipt.targetPackageRoot !== layout.currentPackageRoot || receipt.targetVersion !== layout.currentVersion || receipt.rolloutReceiptId !== rollout.id || !Array.isArray(receipt.aliases))
       throw new Error("ALIAS_RECEIPT_BINDING_INVALID");
     const seen = new Set;
     for (const item of receipt.aliases) {
       const name = basename23(item.path), target = layout.bin[name];
-      if (!target || seen.has(item.path) || !aliasDirs(home).includes(dirname45(item.path)) || item.newTarget !== join72(layout.currentPackageRoot, target) || item.backupPath !== `${item.path}.skills-alias-prev-${receiptId}` || item.chain !== undefined && (!item.chain || typeof item.chain !== "object" || typeof item.chain.packageLinkPath !== "string" || typeof item.chain.packageLinkTarget !== "string")) {
+      if (!target || seen.has(item.path) || !aliasDirs(home).includes(dirname45(item.path)) || item.newTarget !== join71(layout.currentPackageRoot, target) || item.backupPath !== `${item.path}.skills-alias-prev-${receiptId}` || item.chain !== undefined && (!item.chain || typeof item.chain !== "object" || typeof item.chain.packageLinkPath !== "string" || typeof item.chain.packageLinkTarget !== "string")) {
         throw new Error("ALIAS_RECEIPT_LAUNCHER_INVALID");
       }
       inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, target, item.chain, true);
@@ -121564,13 +120327,13 @@ async function updateCopyfileRuntime(version2, options = {}) {
       throw new Error("REVIEWED_LOCK_INPUT_PAIR_REQUIRED");
     if (!policy)
       throw new Error("REVIEWED_LOCK_RELEASE_AGE_REQUIRED");
-    if (!isAbsolute42(options.reviewedLock))
+    if (!isAbsolute41(options.reviewedLock))
       throw new Error("REVIEWED_LOCK_ABSOLUTE_PATH_REQUIRED");
     assertNoSymlinkAncestors(dirname45(options.reviewedLock));
     const stat3 = lstatSync44(options.reviewedLock);
     if (!stat3.isFile() || stat3.isSymbolicLink() || stat3.nlink !== 1 || stat3.uid !== process.getuid?.() || stat3.mode & 63 || stat3.size > 8 * 1024 * 1024)
       throw new Error("REVIEWED_LOCK_FILE_UNSAFE");
-    reviewedLockBytes = readFileSync44(options.reviewedLock);
+    reviewedLockBytes = readFileSync43(options.reviewedLock);
     if (!/^[a-f0-9]{64}$/.test(options.reviewedLockSha256))
       throw new Error("REVIEWED_LOCK_SHA256_INVALID");
     if (hash6(reviewedLockBytes) !== options.reviewedLockSha256)
@@ -121592,11 +120355,11 @@ async function updateCopyfileRuntime(version2, options = {}) {
   if ((runtimeRootStat.mode & 63) !== 0)
     throw new Error("RUNTIME_ROOT_NOT_PRIVATE");
   const id2 = randomUUID13();
-  const stagePath = join72(layout.runtimeRoot, `.stage-${version2}-${id2}`);
-  const finalPath = join72(layout.runtimeRoot, `${version2}-copyfile`);
+  const stagePath = join71(layout.runtimeRoot, `.stage-${version2}-${id2}`);
+  const finalPath = join71(layout.runtimeRoot, `${version2}-copyfile`);
   const launcherRuntime = pinnedLauncherRuntime();
   const launchers = layout.launchers.map((item) => {
-    const newTarget = join72(finalPath, "node_modules", "@hasna", "skills", layout.bin[basename23(item.path)]);
+    const newTarget = join71(finalPath, "node_modules", "@hasna", "skills", layout.bin[basename23(item.path)]);
     return { ...item, newTarget, ...pinnedRecordFields(launcherRuntime, finalPath, newTarget, launcherProfileForBin(basename23(item.path), layout.bin[basename23(item.path)])) };
   });
   const releaseLock = acquireRuntimeLock(layout.runtimeRoot);
@@ -121613,50 +120376,71 @@ async function updateCopyfileRuntime(version2, options = {}) {
     if (artifact.packageBins && JSON.stringify(Object.entries(artifact.packageBins).sort()) !== JSON.stringify(Object.entries(layout.bin).sort())) {
       throw new Error("PACKAGE_BIN_SET_CHANGED");
     }
-    const stagePackage = join72(stagePath, "install");
+    const stagePackage = join71(stagePath, "install");
     mkdirSync28(stagePackage, { mode: 448 });
-    copyFileSync(artifact.tarballPath, join72(stagePackage, "verified.tgz"));
-    writeFileSync26(join72(stagePackage, "package.json"), JSON.stringify({ name: "skills-runtime-install", version: "0.0.0", private: true, dependencies: { [PACKAGE_NAME]: "file:./verified.tgz" } }, null, 2), { mode: 384, flag: "wx" });
+    copyFileSync(artifact.tarballPath, join71(stagePackage, "verified.tgz"));
+    const carriedSecrets = await carryInstalledSecrets(layout, stagePackage, home, stagePath, policy);
+    if (carriedSecrets && reviewedLockBytes)
+      throw new Error("REVIEWED_LOCK_CANNOT_CARRY_SECRETS");
+    writeFileSync26(join71(stagePackage, "package.json"), JSON.stringify({
+      name: "skills-runtime-install",
+      version: "0.0.0",
+      private: true,
+      dependencies: { [PACKAGE_NAME]: "file:./verified.tgz" },
+      ...carriedSecrets ? { overrides: { [PRIVATE_OPTIONAL_PACKAGE]: carriedSecrets.spec } } : {}
+    }, null, 2), { mode: 384, flag: "wx" });
     let npmVersion;
     if (reviewedLockBytes) {
       await validateReviewedRuntimeLock(reviewedLockBytes, options.reviewedLockSha256, {
         version: version2,
         archiveIntegrity: artifact.integrity,
-        packageManifest: object11(JSON.parse(readFileSync44(join72(stagePath, "verified-archive", "package", "package.json"), "utf8")), "PACKAGE_MANIFEST_INVALID"),
+        packageManifest: object11(JSON.parse(readFileSync43(join71(stagePath, "verified-archive", "package", "package.json"), "utf8")), "PACKAGE_MANIFEST_INVALID"),
         registryOrigin: REGISTRY_ORIGIN,
         ...policy,
         fetcher
       });
-      writeFileSync26(join72(stagePackage, "package-lock.json"), reviewedLockBytes, { mode: 384, flag: "wx" });
-      if (!readFileSync44(join72(stagePackage, "package-lock.json")).equals(reviewedLockBytes))
+      writeFileSync26(join71(stagePackage, "package-lock.json"), reviewedLockBytes, { mode: 384, flag: "wx" });
+      if (!readFileSync43(join71(stagePackage, "package-lock.json")).equals(reviewedLockBytes))
         throw new Error("REVIEWED_LOCK_COPY_MISMATCH");
     } else {
       npmVersion = await runNpm(["install", "--package-lock-only", "--prefix", stagePackage], stagePackage, home, stagePath, policy);
     }
-    const ciNpmVersion = await runNpm(["ci", "--prefix", stagePackage], stagePackage, home, stagePath, policy);
+    const plannedLock = readFileSync43(join71(stagePackage, "package-lock.json"));
+    const refusedOptional = unresolvedOptionalDependencies(plannedLock);
+    if (refusedOptional.some((item) => item !== `node_modules/${PACKAGE_NAME} ${PRIVATE_OPTIONAL_PACKAGE}`))
+      throw new Error("DEPENDENCY_GRAPH_OPTIONAL_REFUSED");
+    const ciNpmVersion = await runNpm([refusedOptional.length ? "install" : "ci", "--prefix", stagePackage], stagePackage, home, stagePath, policy);
     if (!reviewedLockBytes && npmVersion !== ciNpmVersion)
       throw new Error("NPM_VERSION_DRIFT_DURING_UPDATE");
+    if (!readFileSync43(join71(stagePackage, "package-lock.json")).equals(plannedLock))
+      throw new Error(reviewedLockBytes ? "REVIEWED_LOCK_DRIFT_DURING_INSTALL" : "INSTALL_LOCK_DRIFT_DURING_INSTALL");
     npmVersion = ciNpmVersion;
-    const lockBytes = readFileSync44(join72(stagePackage, "package-lock.json"));
+    const lockBytes = readFileSync43(join71(stagePackage, "package-lock.json"));
     if (reviewedLockBytes) {
       if (!lockBytes.equals(reviewedLockBytes))
         throw new Error("REVIEWED_LOCK_DRIFT_DURING_INSTALL");
       const treeNpmVersion = await runNpm(["sbom", "--sbom-format=cyclonedx", "--package-lock-only=false", "--omit=dev", "--prefix", stagePackage], stagePackage, home, stagePath, policy);
       if (treeNpmVersion !== npmVersion)
         throw new Error("NPM_VERSION_DRIFT_DURING_UPDATE");
-      if (!readFileSync44(join72(stagePackage, "package-lock.json")).equals(reviewedLockBytes))
+      if (!readFileSync43(join71(stagePackage, "package-lock.json")).equals(reviewedLockBytes))
         throw new Error("REVIEWED_LOCK_DRIFT_DURING_INSTALL");
     }
-    const installedPackage = join72(stagePackage, "node_modules", "@hasna", "skills");
-    const installed = readPackage(join72(installedPackage, "package.json"));
+    const installedPackage = join71(stagePackage, "node_modules", "@hasna", "skills");
+    const installedSecrets = [join71(installedPackage, "node_modules", PRIVATE_OPTIONAL_PACKAGE), join71(stagePackage, "node_modules", PRIVATE_OPTIONAL_PACKAGE)].find((path) => entryExists(join71(path, "package.json")));
+    if (carriedSecrets) {
+      if (!installedSecrets || object11(JSON.parse(readFileSync43(join71(installedSecrets, "package.json"), "utf8")), "CARRIED_SECRETS_INSTALL_MISMATCH").version !== carriedSecrets.record.version || readTree(installedSecrets, false, true).digest !== carriedSecrets.record.packageTreeSha256)
+        throw new Error("CARRIED_SECRETS_INSTALL_MISMATCH");
+    } else if (installedSecrets && refusedOptional.length)
+      throw new Error("PRIVATE_OPTIONAL_PACKAGE_UNEXPECTED");
+    const installed = readPackage(join71(installedPackage, "package.json"));
     if (installed.version !== version2 || JSON.stringify(Object.entries(installed.bins).sort()) !== JSON.stringify(Object.entries(layout.bin).sort())) {
       throw new Error("INSTALLED_PACKAGE_IDENTITY_MISMATCH");
     }
-    const unpackedPackage = join72(stagePath, "verified-archive", "package");
+    const unpackedPackage = join71(stagePath, "verified-archive", "package");
     const packageTreeSha256 = comparePackageTrees(unpackedPackage, installedPackage);
     if (packageTreeSha256 !== artifact.packageTreeSha256)
       throw new Error("PACKAGE_TREE_HASH_MISMATCH");
-    const nodeModules = join72(stagePackage, "node_modules");
+    const nodeModules = join71(stagePackage, "node_modules");
     normalizeModes(nodeModules);
     chmodSync4(stagePath, 448);
     const runtimeTree = readTree(nodeModules, true);
@@ -121664,7 +120448,7 @@ async function updateCopyfileRuntime(version2, options = {}) {
       throw new Error("RUNTIME_FILE_MODE_UNSAFE");
     }
     assertConfigUnchanged(configPreimages);
-    const targetPackageRoot = join72(finalPath, "node_modules", "@hasna", "skills");
+    const targetPackageRoot = join71(finalPath, "node_modules", "@hasna", "skills");
     const preimageSha256 = writePreimageManifest(stagePath, configPreimages, launchers);
     const receipt = {
       schema: "skills.copyfile-runtime-receipt.v1",
@@ -121688,36 +120472,38 @@ async function updateCopyfileRuntime(version2, options = {}) {
       preimageSha256,
       ...policy ? { dependencyPolicy: { ...policy, npmVersion } } : {},
       ...reviewedLockBytes ? { reviewedLockSha256: options.reviewedLockSha256 } : {},
+      ...carriedSecrets ? { carriedSecrets: carriedSecrets.record } : {},
+      ...refusedOptional.length ? { refusedOptionalPackages: [PRIVATE_OPTIONAL_PACKAGE] } : {},
       launchers,
       switchedLaunchers: [],
       rollbackCompletedLaunchers: []
     };
-    writeJsonPrivate(join72(stagePath, "rollout-receipt.json"), receipt);
+    writeJsonPrivate(join71(stagePath, "rollout-receipt.json"), receipt);
     try {
       receipt.prerequisites = verifyTargetPrerequisites(installed.data, installedPackage, home, resolve38(options.cwd ?? process.env[LAUNCH_CWD_VARIABLE3] ?? process.cwd()), options.pathValue ?? process.env.PATH ?? "");
     } catch (error61) {
       const code2 = error61 instanceof Error && /^RUNTIME_PREREQUISITE_[A-Z_]+$/.test(error61.message) ? error61.message : "RUNTIME_PREREQUISITE_CHECK_UNAVAILABLE";
       receipt.prerequisites = { status: "refused", code: code2 };
-      persistReceipt(join72(stagePath, "rollout-receipt.json"), receipt);
+      persistReceipt(join71(stagePath, "rollout-receipt.json"), receipt);
       throw new Error(code2);
     }
-    persistReceipt(join72(stagePath, "rollout-receipt.json"), receipt);
-    const finalNodeModules = join72(stagePackage, "node_modules");
-    const stagedNodeModules = join72(stagePath, "node_modules");
+    persistReceipt(join71(stagePath, "rollout-receipt.json"), receipt);
+    const finalNodeModules = join71(stagePackage, "node_modules");
+    const stagedNodeModules = join71(stagePath, "node_modules");
     renameSync17(finalNodeModules, stagedNodeModules);
-    copyFileSync(join72(stagePackage, "package-lock.json"), join72(stagePath, "install-lock.json"));
-    chmodSync4(join72(stagePath, "install-lock.json"), 384);
+    copyFileSync(join71(stagePackage, "package-lock.json"), join71(stagePath, "install-lock.json"));
+    chmodSync4(join71(stagePath, "install-lock.json"), 384);
     const stagedTree = readTree(stagedNodeModules, true);
     if (stagedTree.digest !== runtimeTree.digest)
       throw new Error("STAGED_RUNTIME_READBACK_MISMATCH");
-    receipt.targetPackageRoot = join72(finalPath, "node_modules", "@hasna", "skills");
+    receipt.targetPackageRoot = join71(finalPath, "node_modules", "@hasna", "skills");
     receipt.runtimeTreeSha256 = stagedTree.digest;
-    persistReceipt(join72(stagePath, "rollout-receipt.json"), receipt);
+    persistReceipt(join71(stagePath, "rollout-receipt.json"), receipt);
     renameSync17(stagePath, finalPath);
     moved = true;
     const finalReceiptBytes = Buffer.from(`${JSON.stringify(receipt, null, 2)}
 `);
-    if (!readFileSync44(join72(finalPath, "rollout-receipt.json")).equals(finalReceiptBytes))
+    if (!readFileSync43(join71(finalPath, "rollout-receipt.json")).equals(finalReceiptBytes))
       throw new Error("RECEIPT_MOVE_READBACK_MISMATCH");
     assertConfigUnchanged(configPreimages);
     for (const item of launchers) {
@@ -121725,7 +120511,7 @@ async function updateCopyfileRuntime(version2, options = {}) {
         throw new Error("LAUNCHER_DRIFT_BEFORE_SWITCH");
       receipt.state = "switching";
       receipt.switchedLaunchers = [...receipt.switchedLaunchers, item.path];
-      persistReceipt(join72(finalPath, "rollout-receipt.json"), receipt);
+      persistReceipt(join71(finalPath, "rollout-receipt.json"), receipt);
       replaceLauncher(item);
       if (!launcherIs(item.path, newLauncherState(item)) || !launcherIs(item.backupPath, oldLauncherState(item))) {
         throw new Error("LAUNCHER_SWITCH_READBACK_MISMATCH");
@@ -121734,7 +120520,7 @@ async function updateCopyfileRuntime(version2, options = {}) {
       options.onLauncherSwitched?.(item.path);
     }
     receipt.state = "switched";
-    persistReceipt(join72(finalPath, "rollout-receipt.json"), receipt);
+    persistReceipt(join71(finalPath, "rollout-receipt.json"), receipt);
     return { updated: true, version: version2, currentVersion: layout.currentVersion, receiptId: id2, runtimeRoot: finalPath, tarballSha256: artifact.sha256, tarballIntegrity: artifact.integrity, runtimeTreeSha256: stagedTree.digest, launcherCount: launchers.length, configCount: configPreimages.length, prerequisites: receipt.prerequisites, ...policy ? { dependencyPolicy: { ...policy, npmVersion } } : {}, ...reviewedLockBytes ? { reviewedLockSha256: options.reviewedLockSha256 } : {} };
   } catch (error61) {
     if (switched.length > 0 || moved) {
@@ -121757,8 +120543,8 @@ async function updateCopyfileRuntime(version2, options = {}) {
         }
       }
       try {
-        const receiptPath = join72(finalPath, "rollout-receipt.json");
-        const receipt = JSON.parse(readFileSync44(receiptPath, "utf8"));
+        const receiptPath = join71(finalPath, "rollout-receipt.json");
+        const receipt = JSON.parse(readFileSync43(receiptPath, "utf8"));
         receipt.state = rollbackFailed ? "rollback-required" : "rolled-back";
         persistReceipt(receiptPath, receipt);
       } catch {
@@ -121777,7 +120563,7 @@ function rollbackCopyfileRuntime(receiptId, options = {}) {
   const home = resolve38(options.homeDir ?? process.env.HOME ?? "");
   if (!home || !existsSync34(home))
     throw new Error("HOME_NOT_FOUND");
-  const runtimeRoot = join72(realpathSync20(home), ".hasna", "skills", "runtime");
+  const runtimeRoot = join71(realpathSync20(home), ".hasna", "skills", "runtime");
   assertNoSymlinkAncestors(runtimeRoot);
   const rootStat = lstatSync44(runtimeRoot);
   if (!rootStat.isDirectory() || rootStat.isSymbolicLink() || (rootStat.mode & 63) !== 0)
@@ -121787,40 +120573,40 @@ function rollbackCopyfileRuntime(receiptId, options = {}) {
     const matches2 = readdirSync26(runtimeRoot).filter((name) => {
       if (!/^\d+\.\d+\.\d+-copyfile$/.test(name))
         return false;
-      const receipt2 = join72(runtimeRoot, name, "rollout-receipt.json");
+      const receipt2 = join71(runtimeRoot, name, "rollout-receipt.json");
       if (!existsSync34(receipt2))
         return false;
       try {
-        return JSON.parse(readFileSync44(receipt2, "utf8")).id === receiptId;
+        return JSON.parse(readFileSync43(receipt2, "utf8")).id === receiptId;
       } catch {
         return false;
       }
     });
     if (matches2.length !== 1)
       throw new Error("RECEIPT_NOT_FOUND_OR_AMBIGUOUS");
-    const receiptPath = join72(runtimeRoot, matches2[0], "rollout-receipt.json");
-    const receipt = object11(JSON.parse(readFileSync44(receiptPath, "utf8")), "RECEIPT_INVALID");
+    const receiptPath = join71(runtimeRoot, matches2[0], "rollout-receipt.json");
+    const receipt = object11(JSON.parse(readFileSync43(receiptPath, "utf8")), "RECEIPT_INVALID");
     if (receipt.schema !== "skills.copyfile-runtime-receipt.v1" || !["switched", "switching", "rollback-required"].includes(receipt.state) || receipt.runtimeRoot !== runtimeRoot) {
       throw new Error("RECEIPT_STATE_INVALID");
     }
     if (receipt.package !== PACKAGE_NAME || matches2[0] !== `${receipt.targetVersion}-copyfile` || !new RegExp(SEMVER_PATTERN).test(receipt.currentVersion) || !new RegExp(SEMVER_PATTERN).test(receipt.targetVersion))
       throw new Error("RECEIPT_BINDING_INVALID");
-    const runtimePath = join72(runtimeRoot, matches2[0]);
-    if (receipt.targetPackageRoot !== join72(runtimePath, "node_modules", "@hasna", "skills") || receipt.currentPackageRoot !== join72(runtimeRoot, `${receipt.currentVersion}-copyfile`, "node_modules", "@hasna", "skills"))
+    const runtimePath = join71(runtimeRoot, matches2[0]);
+    if (receipt.targetPackageRoot !== join71(runtimePath, "node_modules", "@hasna", "skills") || receipt.currentPackageRoot !== join71(runtimeRoot, `${receipt.currentVersion}-copyfile`, "node_modules", "@hasna", "skills"))
       throw new Error("RECEIPT_RUNTIME_BINDING_INVALID");
-    if (readTree(join72(runtimePath, "node_modules"), true).digest !== receipt.runtimeTreeSha256) {
+    if (readTree(join71(runtimePath, "node_modules"), true).digest !== receipt.runtimeTreeSha256) {
       throw new Error("ACTIVE_RUNTIME_TREE_DRIFT");
     }
     verifyPreimageManifest(runtimePath, receipt, home);
-    const oldBins = readPackage(join72(receipt.currentPackageRoot, "package.json")).bins;
-    const newPackage = readPackage(join72(receipt.targetPackageRoot, "package.json"));
+    const oldBins = readPackage(join71(receipt.currentPackageRoot, "package.json")).bins;
+    const newPackage = readPackage(join71(receipt.targetPackageRoot, "package.json"));
     if (newPackage.version !== receipt.targetVersion || JSON.stringify(Object.entries(oldBins).sort()) !== JSON.stringify(Object.entries(newPackage.bins).sort()))
       throw new Error("RECEIPT_BIN_BINDING_INVALID");
     const switched = [];
     const seen = new Set;
     for (const item of receipt.launchers) {
       const bin = oldBins[basename23(item.path)];
-      if (!bin || !isAbsolute42(item.path) || seen.has(item.path) || item.oldTarget !== join72(receipt.currentPackageRoot, bin) || item.newTarget !== join72(receipt.targetPackageRoot, bin) || !/^.+\.skills-prev-[0-9a-f-]{36}$/.test(item.backupPath) || !item.backupPath.startsWith(`${item.path}.skills-prev-`) || typeof item.oldLinkTarget !== "string" || resolve38(dirname45(item.path), item.oldLinkTarget) !== item.oldTarget)
+      if (!bin || !isAbsolute41(item.path) || seen.has(item.path) || item.oldTarget !== join71(receipt.currentPackageRoot, bin) || item.newTarget !== join71(receipt.targetPackageRoot, bin) || !/^.+\.skills-prev-[0-9a-f-]{36}$/.test(item.backupPath) || !item.backupPath.startsWith(`${item.path}.skills-prev-`) || typeof item.oldLinkTarget !== "string" || resolve38(dirname45(item.path), item.oldLinkTarget) !== item.oldTarget)
         throw new Error("RECEIPT_LAUNCHER_BINDING_INVALID");
       assertNoSymlinkAncestors(dirname45(item.path));
       assertLauncherRecordShapes(item, launcherProfileForBin(basename23(item.path), bin));
@@ -121865,7 +120651,7 @@ function rollbackCopyfileRuntime(receiptId, options = {}) {
     releaseLock();
   }
 }
-var PACKAGE_NAME = "@hasna/skills", REGISTRY_ORIGIN = "https://registry.npmjs.org", STABLE_SEMVER_PATTERN, MAX_TARBALL_BYTES, MAX_TARBALL_EXPANDED_BYTES, MAX_TARBALL_ENTRIES = 20000, CONFIG_PREIMAGE_PATHS;
+var PACKAGE_NAME = "@hasna/skills", PRIVATE_OPTIONAL_PACKAGE = "@hasna/secrets", REGISTRY_ORIGIN = "https://registry.npmjs.org", STABLE_SEMVER_PATTERN, MAX_TARBALL_BYTES, MAX_TARBALL_EXPANDED_BYTES, MAX_TARBALL_ENTRIES = 20000, CONFIG_PREIMAGE_PATHS;
 var init_runtime_copyfile = __esm(() => {
   init_skill_contract();
   init_reviewed_runtime_lock();
@@ -121888,8 +120674,8 @@ __export(exports_runtime, {
   registerRuntime: () => registerRuntime
 });
 import { createHash as createHash46, randomUUID as randomUUID14 } from "crypto";
-import { lstatSync as lstatSync45, mkdirSync as mkdirSync29, readFileSync as readFileSync45, writeFileSync as writeFileSync27 } from "fs";
-import { basename as basename24, isAbsolute as isAbsolute43, join as join73 } from "path";
+import { lstatSync as lstatSync45, mkdirSync as mkdirSync29, readFileSync as readFileSync44, writeFileSync as writeFileSync27 } from "fs";
+import { basename as basename24, isAbsolute as isAbsolute42, join as join72 } from "path";
 import { createInterface } from "readline";
 function registerRuntime(parent) {
   parent.command("run").argument("<skill>", "Skill name").argument("[args...]", "Arguments to pass to the skill; use -- to end Skills options").allowUnknownOption(true).passThroughOptions(true).option("--json", "Output result as JSON", false).option("--remote", "Run on the configured server, using its catalog and quote", false).option("--target <target>", "Execution target: local or cloud").option("--secret-bindings <path>", "Reviewed, exact-selection local execution vault bindings (JSON file)").option("--secret-bindings-template", "Print a scoped bindings template without resolving secrets or running the skill", false).option("--input <json>", "Structured cloud execution input").option("--skill-version <version>", "Exact selected skill version").option("--selection-profile <id>", "Selected Skills profile").option("--session <id>", "Pinned Skills session").option("--cached", "Use the explicit verified selected cache", false).option("--yes", "Approve the server's quoted credit cost for this run", false).option("--idempotency-key <key>", "Reuse this key when retrying the same remote submission").option("--file <path>", "Attach a local input file to a remote run (repeatable)", (value, prior) => [...prior, value], []).option("--wait", "Poll remote runs until a terminal status", false).option("--poll-interval-ms <ms>", "Remote polling interval in milliseconds", "1000").option("--poll-timeout-ms <ms>", "Maximum time to wait for a remote run", "300000").description("Run a skill directly").action(async (name, args2, options, command) => {
@@ -122092,7 +120878,7 @@ Updating ${name}...
 async function readUpdatedVersion(bunExecutable) {
   const output2 = await readUpdateCommand([bunExecutable, "pm", "bin", "-g"]);
   const globalBin = output2.replace(/\r?\n$/, "");
-  if (!globalBin || !isAbsolute43(globalBin) || /[\r\n\0]/.test(globalBin))
+  if (!globalBin || !isAbsolute42(globalBin) || /[\r\n\0]/.test(globalBin))
     throw new Error("Update bin discovery failed");
   const installed = Bun.which("skills", { PATH: globalBin, cwd: globalBin });
   const selected = Bun.which("skills");
@@ -122431,7 +121217,7 @@ async function handleRun(name, args2, options, separatorBeforeSkill) {
         const info = lstatSync45(path);
         if (!info.isFile() || info.size > 20 * 1024 * 1024)
           throw new Error("Input must be a regular file no larger than 20 MiB");
-        return { name: basename24(path), bytes: new Uint8Array(readFileSync45(path)) };
+        return { name: basename24(path), bytes: new Uint8Array(readFileSync44(path)) };
       });
       describeRemoteFiles(inputFiles);
       client2 = new RemoteSkillsClient(routing.apiKey, routing.apiOrigin);
@@ -122817,7 +121603,7 @@ async function handleExportsDownload(runId2, options) {
         continue;
       const verified = await client2.getVerifiedRunArtifact(runId2, artifactId);
       const relativePath = safeArtifactRelativePath(typeof artifact.relativePath === "string" ? artifact.relativePath : artifact.fileName, String(artifact.fileName || artifactId));
-      const outputPath = join73(exportDir, relativePath);
+      const outputPath = join72(exportDir, relativePath);
       ensureSafeExportParent(exportDir, relativePath);
       writeFileSync27(outputPath, verified.bytes, { flag: "wx", mode: 384 });
       downloaded.push({ id: artifactId, path: outputPath, byteSize: verified.byteSize });
@@ -122856,7 +121642,7 @@ function ensureSafeExportParent(root2, relativePath) {
   let parent = root2;
   for (const part of ["", ...parts]) {
     if (part)
-      parent = join73(parent, part);
+      parent = join72(parent, part);
     try {
       if (!lstatSync45(parent).isDirectory() || lstatSync45(parent).isSymbolicLink())
         throw new Error("Unsafe artifact directory");
@@ -123153,12 +121939,12 @@ var exports_recurring = {};
 __export(exports_recurring, {
   registerRecurringCommands: () => registerRecurringCommands
 });
-import { constants as constants31, closeSync as closeSync32, fstatSync as fstatSync32, lstatSync as lstatSync46, openSync as openSync32, readSync as readSync24 } from "fs";
+import { constants as constants31, closeSync as closeSync31, fstatSync as fstatSync31, lstatSync as lstatSync46, openSync as openSync31, readSync as readSync24 } from "fs";
 import { createInterface as createInterface2 } from "readline";
 function readRequest(path) {
-  const fd = openSync32(path, constants31.O_RDONLY | constants31.O_NOFOLLOW | constants31.O_NONBLOCK);
+  const fd = openSync31(path, constants31.O_RDONLY | constants31.O_NOFOLLOW | constants31.O_NONBLOCK);
   try {
-    const before2 = fstatSync32(fd);
+    const before2 = fstatSync31(fd);
     if (!before2.isFile() || before2.size > 1048576 || before2.size < 1)
       throw new RecurringInputError;
     const bytes = Buffer.alloc(before2.size + 1);
@@ -123169,14 +121955,14 @@ function readRequest(path) {
         break;
       length += n2;
     }
-    const after2 = fstatSync32(fd), current = lstatSync46(path);
+    const after2 = fstatSync31(fd), current = lstatSync46(path);
     if (length !== before2.size || after2.size !== before2.size || before2.mtimeMs !== after2.mtimeMs || before2.ctimeMs !== after2.ctimeMs || current.dev !== before2.dev || current.ino !== before2.ino || !current.isFile() || current.isSymbolicLink())
       throw new RecurringInputError;
     return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes.subarray(0, length)));
   } catch {
     throw new RecurringInputError;
   } finally {
-    closeSync32(fd);
+    closeSync31(fd);
   }
 }
 async function acceptAtTerminal(draft) {
@@ -123455,7 +122241,7 @@ var init_completion = __esm(() => {
 // src/lib/portable-snapshot-filter.ts
 import { readdirSync as readdirSync27, statSync as statSync23 } from "fs";
 import { homedir as homedir12 } from "os";
-import { join as join74, sep as sep21 } from "path";
+import { join as join73, sep as sep21 } from "path";
 function isExcludedSkillFileName(fileName) {
   if (EXCLUDE_FILE_NAMES.has(fileName)) {
     return true;
@@ -123478,16 +122264,16 @@ function isPortableWithinSkill(relativeParts) {
 function homePathFor(definition, homesRoot) {
   const home = homesRoot ?? homedir12();
   if (definition.subClass === "skills" || definition.subClass === "custom") {
-    return join74(skillsDataRootForHome(home), definition.name);
+    return join73(skillsDataRootForHome(home), definition.name);
   }
   if (definition.agent === "opencode") {
-    return join74(home, ".config", "opencode", "skills");
+    return join73(home, ".config", "opencode", "skills");
   }
-  return join74(home, `.${definition.agent}`, "skills");
+  return join73(home, `.${definition.agent}`, "skills");
 }
 function destinationFor(definition, stationId, relativePath) {
-  const category = definition.subClass === "agent-homes" ? join74("agent-homes", definition.agent ?? "") : definition.name;
-  return join74("resources", stationId, "skills", category, ...relativePath.split(sep21));
+  const category = definition.subClass === "agent-homes" ? join73("agent-homes", definition.agent ?? "") : definition.name;
+  return join73("resources", stationId, "skills", category, ...relativePath.split(sep21));
 }
 function walkEntries(absoluteRoot) {
   let entries;
@@ -123498,7 +122284,7 @@ function walkEntries(absoluteRoot) {
   }
   const output2 = [];
   for (const entry of entries) {
-    const childFull = join74(absoluteRoot, entry.name);
+    const childFull = join73(absoluteRoot, entry.name);
     if (entry.isSymbolicLink()) {
       output2.push({ kind: "symlink", relativePath: entry.name, fullPath: childFull });
       continue;
@@ -123509,7 +122295,7 @@ function walkEntries(absoluteRoot) {
       }
       const nested = walkEntries(childFull);
       for (const item of nested) {
-        output2.push({ ...item, relativePath: join74(entry.name, item.relativePath) });
+        output2.push({ ...item, relativePath: join73(entry.name, item.relativePath) });
       }
       continue;
     }
@@ -123606,18 +122392,18 @@ import { createHash as createHash47 } from "crypto";
 import {
   copyFileSync as copyFileSync2,
   mkdirSync as mkdirSync30,
-  readFileSync as readFileSync46,
+  readFileSync as readFileSync45,
   statSync as statSync24,
   writeFileSync as writeFileSync28
 } from "fs";
-import { dirname as dirname47, isAbsolute as isAbsolute44, relative as relative15, resolve as resolve39, sep as sep22 } from "path";
+import { dirname as dirname47, isAbsolute as isAbsolute43, relative as relative15, resolve as resolve39, sep as sep22 } from "path";
 function validateStationId(stationId) {
   if (!/^[a-z0-9-]+$/.test(stationId)) {
     throw new StationSnapshotError("INVALID_STATION", `station id must be a slug, got: ${stationId}`);
   }
 }
 function sha256File(filePath) {
-  return createHash47("sha256").update(readFileSync46(filePath)).digest("hex");
+  return createHash47("sha256").update(readFileSync45(filePath)).digest("hex");
 }
 function scanHome(definition, homesRoot) {
   const homePath = homePathFor(definition, homesRoot);
@@ -123716,7 +122502,7 @@ function writeStationSnapshot(options) {
   for (const plan of plans) {
     const destination = resolve39(repoRoot, plan.destination);
     const destinationRelative = relative15(repoRoot, destination);
-    if (destinationRelative.startsWith("..") || destinationRelative.startsWith(sep22) || isAbsolute44(destinationRelative)) {
+    if (destinationRelative.startsWith("..") || destinationRelative.startsWith(sep22) || isAbsolute43(destinationRelative)) {
       throw new StationSnapshotError("DESTINATION_ESCAPE", `destination escapes repo root: ${plan.destination}`);
     }
     let existingDigest = null;
@@ -123790,7 +122576,7 @@ __export(exports_create_sync_config, {
   registerCreateSync: () => registerCreateSync
 });
 import { existsSync as existsSync35 } from "fs";
-import { join as join75 } from "path";
+import { join as join74 } from "path";
 function registerCreateSync(parent) {
   const configCmd = parent.command("config").description("Manage skills configuration");
   configCmd.command("show", { isDefault: true }).option("--json", "Output as JSON", false).description("Show current merged configuration").action((options) => {
@@ -123900,7 +122686,7 @@ function handleCreate(name, options) {
       console.log(source_default.green(`\u2713 Created custom skill '${result2.name}' at ${result2.path}`));
       console.log(source_default.dim(`  Category: ${result2.manifest.category}`));
       console.log(source_default.dim(`  Tags: ${result2.manifest.tags?.join(", ")}`));
-      console.log(`  ${source_default.cyan("Edit:")} ${join75(result2.path, options.kind === "instruction" ? "SKILL.md" : "src/index.ts")}`);
+      console.log(`  ${source_default.cyan("Edit:")} ${join74(result2.path, options.kind === "instruction" ? "SKILL.md" : "src/index.ts")}`);
       console.log(`  ${source_default.cyan("Prepare:")} skills prepare ${result2.name} --version <new-semver>`);
     }
   } catch (error61) {
@@ -124190,8 +122976,8 @@ var init_create_sync_config = __esm(() => {
 
 // src/lib/claude-hook-disable.ts
 import { createHash as createHash48, randomUUID as randomUUID15 } from "crypto";
-import { constants as constants32, closeSync as closeSync33, fchownSync as fchownSync2, fchmodSync as fchmodSync4, fsyncSync as fsyncSync11, lstatSync as lstatSync47, mkdirSync as mkdirSync31, openSync as openSync33, realpathSync as realpathSync21 } from "fs";
-import { basename as basename25, dirname as dirname48, isAbsolute as isAbsolute45, join as join76, resolve as resolve40 } from "path";
+import { constants as constants32, closeSync as closeSync32, fchownSync as fchownSync2, fchmodSync as fchmodSync4, fsyncSync as fsyncSync11, lstatSync as lstatSync47, mkdirSync as mkdirSync31, openSync as openSync32, realpathSync as realpathSync21 } from "fs";
+import { basename as basename25, dirname as dirname48, isAbsolute as isAbsolute44, join as join75, resolve as resolve40 } from "path";
 import { KernelLock as KernelLock2 } from "@hasna/contracts/kernel-lock";
 function fail6(reason2) {
   throw new Error(`CLAUDE_HOOK_DISABLE_${reason2}`);
@@ -124204,7 +122990,7 @@ function serialize(value) {
   return value.kind === "string" ? JSON.stringify(value.value) : value.value;
 }
 function path(value) {
-  if (!isAbsolute45(value) || resolve40(value) !== value || /[\x00-\x1f\x7f]/.test(value))
+  if (!isAbsolute44(value) || resolve40(value) !== value || /[\x00-\x1f\x7f]/.test(value))
     fail6("PATH_INVALID");
 }
 function parents3(file2) {
@@ -124239,10 +123025,10 @@ function executable2(command, expectedSha256) {
   if (commandFile.sha256 !== expectedSha256)
     fail6("COMMAND_CHANGED");
   const entry = resolved.entry, packageRoot = dirname48(dirname48(entry));
-  if (entry !== join76(packageRoot, "bin", "index.js") || realpathSync21(entry) !== entry)
+  if (entry !== join75(packageRoot, "bin", "index.js") || realpathSync21(entry) !== entry)
     fail6("COMMAND_UNVERIFIED");
   const entryFile = snapshot(entry, false, { readOnlyPackage: true });
-  const manifest = snapshot(join76(packageRoot, "package.json"), false, { readOnlyPackage: true });
+  const manifest = snapshot(join75(packageRoot, "package.json"), false, { readOnlyPackage: true });
   const parsed = parseNativeJsonObject(manifest.text);
   if (string6(field3(parsed, "name")) !== "@hasna/skills" || string6(field3(field3(parsed, "bin"), "skills")) !== "bin/index.js")
     fail6("COMMAND_UNVERIFIED");
@@ -124383,26 +123169,26 @@ function disableClaudeHooks(options) {
     mkdirSync31(options.preimageDir, { mode: 448 });
     if ((lstatSync47(options.preimageDir).mode & 511) !== 448)
       fail6("PREIMAGE_INVALID");
-    preimage = join76(options.preimageDir, "settings.preimage.json");
+    preimage = join75(options.preimageDir, "settings.preimage.json");
     save(preimage, before2.bytes);
     const preserved = snapshot(preimage, true), checkPreservationRoot = parents3(preimage);
     if (preserved.sha256 !== before2.sha256 || !preserved.bytes.equals(before2.bytes))
       fail6("PRESERVATION_FAILED");
-    displaced = join76(dirname48(options.settings), `.settings.skills-disable-${randomUUID15()}.json`);
+    displaced = join75(dirname48(options.settings), `.settings.skills-disable-${randomUUID15()}.json`);
     save(displaced, after2);
-    const fd = openSync33(displaced, constants32.O_RDONLY | constants32.O_NOFOLLOW);
+    const fd = openSync32(displaced, constants32.O_RDONLY | constants32.O_NOFOLLOW);
     try {
       fchownSync2(fd, Number(before2.stat.uid), Number(before2.stat.gid));
       fchmodSync4(fd, 384);
       fsyncSync11(fd);
     } finally {
-      closeSync33(fd);
+      closeSync32(fd);
     }
     const staged = snapshot(displaced, true);
     assertNativePathAcl(displaced, staged.stat);
     if (staged.sha256 !== result2.plannedAfterSha256)
       fail6("STAGING_CHANGED");
-    receipt = join76(options.preimageDir, "receipt.json");
+    receipt = join75(options.preimageDir, "receipt.json");
     const preparationBytes = `${JSON.stringify({
       ...result2,
       state: "prepared",
@@ -124438,14 +123224,14 @@ function disableClaudeHooks(options) {
     unchanged2(preserved);
     if (movedIdentity(displacedOriginal.stat) !== movedIdentity(before2.stat) || displacedOriginal.sha256 !== before2.sha256 || movedIdentity(current.stat) !== movedIdentity(staged.stat) || current.sha256 !== staged.sha256)
       fail6("POST_WRITE_CHANGED");
-    const directory3 = openSync33(dirname48(options.settings), constants32.O_RDONLY | constants32.O_DIRECTORY);
+    const directory3 = openSync32(dirname48(options.settings), constants32.O_RDONLY | constants32.O_DIRECTORY);
     try {
       fsyncSync11(directory3);
     } finally {
-      closeSync33(directory3);
+      closeSync32(directory3);
     }
     const applied = { ...result2, state: "applied", mutationOccurred: true, afterSha256: staged.sha256, preimage, displaced, receipt };
-    const completed = join76(options.preimageDir, "completed.json");
+    const completed = join75(options.preimageDir, "completed.json");
     const completionBytes = `${JSON.stringify({ ...applied, receipt: completed })}
 `;
     save(completed, completionBytes);
@@ -124489,7 +123275,7 @@ var init_claude_hook_disable = __esm(() => {
 
 // src/lib/agent-install-selection.ts
 import { lstatSync as lstatSync48 } from "fs";
-import { dirname as dirname49, join as join77, resolve as resolve41 } from "path";
+import { dirname as dirname49, join as join76, resolve as resolve41 } from "path";
 import { homedir as homedir13 } from "os";
 function detectedIntegrationAgents(options = {}) {
   const home = options.home ?? homedir13(), env3 = options.env ?? process.env;
@@ -124513,12 +123299,12 @@ function detectedIntegrationAgents(options = {}) {
     if (agent === "sumi") {
       const xdg = env3.XDG_CONFIG_HOME;
       const xdgSumi = xdg?.trim() ? resolve41(options.cwd ?? process.cwd(), xdg === "~" ? home : xdg.startsWith("~/") || xdg.startsWith("~\\") ? resolve41(home, xdg.slice(2)) : xdg, "sumi") : null;
-      return ["SUMI_HOME", "SUMI_CONFIG_DIR", "SUMI_CONFIG", "SUMI_CONFIG_CONTENT"].some((key2) => env3[key2] !== undefined) || Bun.which("sumi-paths", { PATH: env3.PATH ?? "" }) !== null || NATIVE_SKILL_ROOTS.some(([provider, root2]) => provider === "sumi" && present2(join77(home, dirname49(root2)))) || present2(join77(home, ".config", "sumi")) || xdgSumi !== null && present2(xdgSumi);
+      return ["SUMI_HOME", "SUMI_CONFIG_DIR", "SUMI_CONFIG", "SUMI_CONFIG_CONTENT"].some((key2) => env3[key2] !== undefined) || Bun.which("sumi-paths", { PATH: env3.PATH ?? "" }) !== null || NATIVE_SKILL_ROOTS.some(([provider, root2]) => provider === "sumi" && present2(join76(home, dirname49(root2)))) || present2(join76(home, ".config", "sumi")) || xdgSumi !== null && present2(xdgSumi);
     }
     if (agent === "hermes" && env3.HERMES_HOME !== undefined)
       return true;
     const adapter = AGENT_ADAPTERS[agent];
-    return present2(join77(home, dirname49(adapter.config))) || NATIVE_SKILL_ROOTS.some(([provider, root2]) => provider === agent && dirname49(root2) === `.${agent}` && present2(join77(home, dirname49(root2))));
+    return present2(join76(home, dirname49(adapter.config))) || NATIVE_SKILL_ROOTS.some(([provider, root2]) => provider === agent && dirname49(root2) === `.${agent}` && present2(join76(home, dirname49(root2))));
   });
   if (!selected.length && !options.allowEmpty)
     throw new Error(`No configured or detected agents; select --agent <agent> explicitly (${INTEGRATION_AGENTS.join(", ")}).`);
@@ -124533,10 +123319,10 @@ var init_agent_install_selection = __esm(() => {
 
 // src/lib/codex-hook-trust-identity.ts
 import { lstatSync as lstatSync49, realpathSync as realpathSync22 } from "fs";
-import { dirname as dirname50, isAbsolute as isAbsolute46, join as join78, resolve as resolve42 } from "path";
+import { dirname as dirname50, isAbsolute as isAbsolute45, join as join77, resolve as resolve42 } from "path";
 import { isDeepStrictEqual as isDeepStrictEqual20 } from "util";
 function commandPhysical(command) {
-  need8(typeof command === "string" && isAbsolute46(command) && !command.includes("\x00") && resolve42(command) === command, COMMAND_NOT_CANONICAL);
+  need8(typeof command === "string" && isAbsolute45(command) && !command.includes("\x00") && resolve42(command) === command, COMMAND_NOT_CANONICAL);
   const physical = realpathSync22(command);
   let spelled;
   try {
@@ -124591,12 +123377,12 @@ function targetUnchanged(command, target) {
     assertPinnedRuntime(target.runtime);
 }
 function inspectRecordedSkillsCli(command, expected) {
-  need8(isAbsolute46(command) && !command.includes("\x00"), "RECONCILE_RECORDED_COMMAND_REQUIRED");
+  need8(isAbsolute45(command) && !command.includes("\x00"), "RECONCILE_RECORDED_COMMAND_REQUIRED");
   const target = skillsCommandTarget(command), resolved = target.entry;
   const cli = snapshot(resolved, false, { readOnlyPackage: true });
-  const manifest = snapshot(join78(dirname50(dirname50(resolved)), "package.json"), false, { readOnlyPackage: true });
+  const manifest = snapshot(join77(dirname50(dirname50(resolved)), "package.json"), false, { readOnlyPackage: true });
   const pkg = JSON.parse(manifest.text);
-  need8(pkg.name === "@hasna/skills" && /^\d+\.\d+\.\d+$/.test(pkg.version) && pkg.bin?.skills === "bin/index.js" && resolved === join78(dirname50(manifest.file), "bin/index.js"), "SKILLS_PACKAGE_MISMATCH");
+  need8(pkg.name === "@hasna/skills" && /^\d+\.\d+\.\d+$/.test(pkg.version) && pkg.bin?.skills === "bin/index.js" && resolved === join77(dirname50(manifest.file), "bin/index.js"), "SKILLS_PACKAGE_MISMATCH");
   need8((cli.stat.mode & 0o100n) !== 0n, "SKILLS_COMMAND_NOT_EXECUTABLE");
   const receipt = { path: resolved, version: pkg.version, sha256: cli.sha256, manifestSha256: manifest.sha256 };
   need8(isDeepStrictEqual20(receipt, expected), "RECONCILE_SKILLS_BINDING_CHANGED");
@@ -124610,16 +123396,16 @@ function bindSkillsCli(command, reviewed) {
   const normal = Bun.which("skills", { PATH: process.env.PATH });
   need8(normal, "SKILLS_COMMAND_UNAVAILABLE");
   const normalTarget = skillsCommandTarget(normal), resolved = normalTarget.entry;
-  const bound = isAbsolute46(command) ? command : command === "skills" ? normal : undefined;
+  const bound = isAbsolute45(command) ? command : command === "skills" ? normal : undefined;
   need8(bound, "SKILLS_COMMAND_MISMATCH");
   const boundTarget = skillsCommandTarget(bound);
   need8(boundTarget.entry === resolved, "SKILLS_COMMAND_MISMATCH");
   const entrypoint = reviewed?.path ?? process.argv[1];
   need8(entrypoint && realpathSync22(entrypoint) === resolved, "SKILLS_ENTRYPOINT_MISMATCH");
   const cli = snapshot(resolved, false, { readOnlyPackage: true });
-  const manifest = snapshot(join78(dirname50(dirname50(resolved)), "package.json"), false, { readOnlyPackage: true });
+  const manifest = snapshot(join77(dirname50(dirname50(resolved)), "package.json"), false, { readOnlyPackage: true });
   const pkg = JSON.parse(manifest.text);
-  need8(pkg.name === "@hasna/skills" && /^\d+\.\d+\.\d+$/.test(pkg.version) && pkg.bin?.skills === "bin/index.js" && resolved === join78(dirname50(manifest.file), "bin/index.js"), "SKILLS_PACKAGE_MISMATCH");
+  need8(pkg.name === "@hasna/skills" && /^\d+\.\d+\.\d+$/.test(pkg.version) && pkg.bin?.skills === "bin/index.js" && resolved === join77(dirname50(manifest.file), "bin/index.js"), "SKILLS_PACKAGE_MISMATCH");
   if (reviewed)
     need8(/^[a-f0-9]{64}$/.test(reviewed.sha256) && reviewed.sha256 === cli.sha256 && reviewed.version === pkg.version, "SKILLS_RELEASE_MISMATCH");
   need8((cli.stat.mode & 0o100n) !== 0n, "SKILLS_COMMAND_NOT_EXECUTABLE");
@@ -124638,7 +123424,7 @@ function captureSkillsCliProducerIdentity(command) {
   const bound = bindSkillsCli(command);
   const target = skillsCommandTarget(command);
   const cli = snapshot(target.entry, false, { readOnlyPackage: true });
-  const manifest = snapshot(join78(dirname50(dirname50(target.entry)), "package.json"), false, { readOnlyPackage: true });
+  const manifest = snapshot(join77(dirname50(dirname50(target.entry)), "package.json"), false, { readOnlyPackage: true });
   const pkg = JSON.parse(manifest.text);
   need8(pkg.name === "@hasna/skills" && pkg.version === bound.receipt.version && target.entry === bound.receipt.path, "SKILLS_PACKAGE_MISMATCH");
   const launcher = target.launcher ?? cli;
@@ -124692,23 +123478,23 @@ var init_codex_hook_policy_recovery = __esm(() => {
 });
 
 // src/lib/agent-codex-trust.ts
-import { lstatSync as lstatSync50, mkdirSync as mkdirSync32, readdirSync as readdirSync28, readFileSync as readFileSync47, realpathSync as realpathSync23, statSync as statSync25 } from "fs";
+import { lstatSync as lstatSync50, mkdirSync as mkdirSync32, readdirSync as readdirSync28, readFileSync as readFileSync46, realpathSync as realpathSync23, statSync as statSync25 } from "fs";
 import { createHash as createHash49, randomUUID as randomUUID16 } from "crypto";
 import { execFileSync as execFileSync2 } from "child_process";
-import { dirname as dirname51, isAbsolute as isAbsolute47, join as join79, resolve as resolve43 } from "path";
+import { dirname as dirname51, isAbsolute as isAbsolute46, join as join78, resolve as resolve43 } from "path";
 import { homedir as homedir14 } from "os";
 import { isDeepStrictEqual as isDeepStrictEqual22 } from "util";
 function verifyReleaseArtifact(proof, skillsCli) {
-  need8(isAbsolute47(proof.packageTarPath) && !proof.packageTarPath.includes("\x00"), "RECONCILE_RELEASE_PROVENANCE_PATH");
+  need8(isAbsolute46(proof.packageTarPath) && !proof.packageTarPath.includes("\x00"), "RECONCILE_RELEASE_PROVENANCE_PATH");
   const tarPath = realpathSync23(proof.packageTarPath);
   need8(statSync25(tarPath).isFile(), "RECONCILE_RELEASE_PROVENANCE_PATH");
-  const tarBytes = readFileSync47(tarPath);
+  const tarBytes = readFileSync46(tarPath);
   need8(tarBytes.byteLength === proof.packageTarBytes && createHash49("sha256").update(tarBytes).digest("hex") === proof.packageTarSha256, "RECONCILE_RELEASE_ARTIFACT_CHANGED");
   const packageRoot = dirname51(dirname51(realpathSync23(skillsCli.receipt.path)));
-  const manifest = readFileSync47(join79(packageRoot, "package.json"));
+  const manifest = readFileSync46(join78(packageRoot, "package.json"));
   need8(createHash49("sha256").update(manifest).digest("hex") === skillsCli.receipt.manifestSha256 && skillsCli.receipt.manifestSha256 === proof.manifestSha256, "RECONCILE_RELEASE_MANIFEST_CHANGED");
-  need8(createHash49("sha256").update(readFileSync47(skillsCli.receipt.path)).digest("hex") === proof.executableSha256 && skillsCli.receipt.sha256 === proof.executableSha256, "RECONCILE_RELEASE_EXECUTABLE_CHANGED");
-  const members2 = [["package/package.json", manifest], ["package/bin/index.js", readFileSync47(skillsCli.receipt.path)]];
+  need8(createHash49("sha256").update(readFileSync46(skillsCli.receipt.path)).digest("hex") === proof.executableSha256 && skillsCli.receipt.sha256 === proof.executableSha256, "RECONCILE_RELEASE_EXECUTABLE_CHANGED");
+  const members2 = [["package/package.json", manifest], ["package/bin/index.js", readFileSync46(skillsCli.receipt.path)]];
   for (const [member, expected] of members2) {
     let actual;
     try {
@@ -124723,25 +123509,25 @@ async function reconcileCodexNativeHooks(options, connect = connectCodexHookRpc)
   let rpc;
   try {
     const home = resolve43(options.home ?? homedir14()), dataDir3 = resolve43(options.dataDir ?? getDataDirReadOnly());
-    const parent = resolve43(join79(dataDir3, "native-hook-trust")), journal = resolve43(options.journal);
+    const parent = resolve43(join78(dataDir3, "native-hook-trust")), journal = resolve43(options.journal);
     need8(journal.startsWith(parent + "/") && /^[a-f0-9-]{36}$/.test(journal.slice(parent.length + 1)), "RECONCILE_JOURNAL_PATH");
     const dir = lstatSync50(journal, { throwIfNoEntry: false });
     need8(!!dir && dir.isDirectory() && !dir.isSymbolicLink() && dir.uid === process.getuid() && (dir.mode & 511) === 448, "UNSAFE_JOURNAL");
-    need8(!lstatSync50(join79(journal, "receipt.json"), { throwIfNoEntry: false }), "RECONCILE_ALREADY_COMPLETE");
-    need8(lstatSync50(join79(journal, "stopped.json"), { throwIfNoEntry: false })?.isFile(), "RECONCILE_JOURNAL_INCOMPLETE");
-    const stoppedFile = snapshot(join79(journal, "stopped.json"), true);
-    const intentFile = snapshot(join79(journal, "intent.json"), true), intent = JSON.parse(intentFile.text);
-    const configBefore = snapshot(join79(journal, "config.before.toml"), true), hooksBefore = snapshot(join79(journal, "hooks.before.json"), true), policyBefore = snapshot(join79(journal, "policy.before.json"), true);
+    need8(!lstatSync50(join78(journal, "receipt.json"), { throwIfNoEntry: false }), "RECONCILE_ALREADY_COMPLETE");
+    need8(lstatSync50(join78(journal, "stopped.json"), { throwIfNoEntry: false })?.isFile(), "RECONCILE_JOURNAL_INCOMPLETE");
+    const stoppedFile = snapshot(join78(journal, "stopped.json"), true);
+    const intentFile = snapshot(join78(journal, "intent.json"), true), intent = JSON.parse(intentFile.text);
+    const configBefore = snapshot(join78(journal, "config.before.toml"), true), hooksBefore = snapshot(join78(journal, "hooks.before.json"), true), policyBefore = snapshot(join78(journal, "policy.before.json"), true);
     const legacyIntent = intent.home === undefined && intent.configSha256 === undefined && intent.configVersion === undefined && intent.declarations === undefined && intent.admitted === undefined && intent.nativeHooks === undefined;
     need8(intent.version === 1 && /^[a-f0-9]{64}$/.test(intent.planDigest) && typeof intent.configPath === "string" && /^[a-f0-9]{64}$/.test(intent.policySha256) && /^[a-f0-9]{64}$/.test(intent.hooksSha256) && Array.isArray(intent.hooks) && intent.hooks.length > 0 && intent.hooks.length <= 100 && (legacyIntent || typeof intent.home === "string" && intent.home === home && /^[a-f0-9]{64}$/.test(intent.configSha256) && typeof intent.configVersion === "string" && Array.isArray(intent.declarations) && Array.isArray(intent.admitted) && Array.isArray(intent.nativeHooks)), "RECONCILE_INTENT_INVALID");
-    const declarations = intent.declarations ?? intent.hooks.map((hook) => ({ event: hook.event, key: `${join79(home, ".codex/hooks.json")}${hook.key.slice(hook.key.indexOf(".codex/hooks.json") + ".codex/hooks.json".length)}`, command: hook.command }));
+    const declarations = intent.declarations ?? intent.hooks.map((hook) => ({ event: hook.event, key: `${join78(home, ".codex/hooks.json")}${hook.key.slice(hook.key.indexOf(".codex/hooks.json") + ".codex/hooks.json".length)}`, command: hook.command }));
     const admitted = intent.admitted ?? intent.hooks;
     const configSha256 = intent.configSha256 ?? configBefore.sha256, configVersion = intent.configVersion ?? intent.expectedVersion;
     const digestInput = { version: 1, home: intent.home ?? home, configPath: intent.configPath, ...intent.nativeConfigPath !== undefined ? { nativeConfigPath: intent.nativeConfigPath } : {}, configSha256, configVersion, policySha256: intent.policySha256, hooksSha256: intent.hooksSha256, skillsCli: intent.skillsCli, nativeVersion: intent.nativeVersion, declarations, admitted };
     need8(makePlanDigest(digestInput) === intent.planDigest, "RECONCILE_PLAN_CHANGED");
     need8(isDeepStrictEqual22(intent.hooks, admitted.filter((hook) => !hook.enabled || hook.trustStatus !== "trusted")), "RECONCILE_INTENT_HOOKS_CHANGED");
     need8(configBefore.sha256 === (intent.beforeSha256 ?? intent.configSha256) && hooksBefore.sha256 === intent.hooksSha256 && policyBefore.sha256 === intent.policySha256, "RECONCILE_JOURNAL_CHANGED");
-    const policyCurrent = snapshot(join79(dataDir3, "agent-policy.json"), true);
+    const policyCurrent = snapshot(join78(dataDir3, "agent-policy.json"), true);
     const { claudeDiscoveryRecovery: claudeRecovery, nativeHookAdditionsRecovery: additionsRecovery } = options;
     const recovery = claudeRecovery ?? additionsRecovery;
     need8(!recovery || !options.supersedeBinding, "RECONCILE_RECOVERY_MODE_CONFLICT");
@@ -124758,17 +123544,17 @@ async function reconcileCodexNativeHooks(options, connect = connectCodexHookRpc)
     if (supersededBinding || recovery) {
       need8(Array.isArray(intent.nativeHooks) && intent.nativeHooks.length > 0, "RECONCILE_NATIVE_INVENTORY_REQUIRED");
       const proof = options.releaseProof;
-      need8(!!proof && isAbsolute47(proof.packageTarPath) && /^[a-f0-9]{64}$/.test(proof.packageTarSha256) && Number.isInteger(proof.packageTarBytes) && proof.packageTarBytes > 0 && /^[a-f0-9]{64}$/.test(proof.manifestSha256) && /^[a-f0-9]{64}$/.test(proof.executableSha256), "RECONCILE_RELEASE_PROVENANCE_REQUIRED");
+      need8(!!proof && isAbsolute46(proof.packageTarPath) && /^[a-f0-9]{64}$/.test(proof.packageTarSha256) && Number.isInteger(proof.packageTarBytes) && proof.packageTarBytes > 0 && /^[a-f0-9]{64}$/.test(proof.manifestSha256) && /^[a-f0-9]{64}$/.test(proof.executableSha256), "RECONCILE_RELEASE_PROVENANCE_REQUIRED");
     }
     const currentConfig = snapshot(intent.configPath, true);
     const policy = parseManagedSkillPolicy(policyCurrent.text), binding = policy.bridge;
-    const alias = binding.rootAliases?.find((item) => item.agent === "codex"), physicalRoot = alias?.target ?? join79(home, ".codex"), hooksPath = join79(physicalRoot, "hooks.json");
-    need8(resolve43(intent.configPath) === resolve43(join79(physicalRoot, "config.toml")), "RECONCILE_CONFIG_PATH_CHANGED");
+    const alias = binding.rootAliases?.find((item) => item.agent === "codex"), physicalRoot = alias?.target ?? join78(home, ".codex"), hooksPath = join78(physicalRoot, "hooks.json");
+    need8(resolve43(intent.configPath) === resolve43(join78(physicalRoot, "config.toml")), "RECONCILE_CONFIG_PATH_CHANGED");
     const nativeConfigPath = intent.nativeConfigPath ?? intent.configPath;
-    need8([join79(home, ".codex/config.toml"), join79(physicalRoot, "config.toml")].includes(nativeConfigPath), "RECONCILE_NATIVE_CONFIG_PATH_CHANGED");
+    need8([join78(home, ".codex/config.toml"), join78(physicalRoot, "config.toml")].includes(nativeConfigPath), "RECONCILE_NATIVE_CONFIG_PATH_CHANGED");
     const codexHome = nativeConfigPath !== intent.configPath ? undefined : dirname51(nativeConfigPath);
     const hooksCurrent = snapshot(hooksPath);
-    const additions = additionsRecovery ? reviewNativeHookAdditions({ path: additionsRecovery.path, intent: intentFile, policy: policyCurrent, configBefore, configCurrent: currentConfig, hooksBefore, hooksCurrent, nativeHooksPath: join79(dirname51(nativeConfigPath), "hooks.json"), journalHooks: intent.hooks, recordedNativeHooks: intent.nativeHooks }) : undefined;
+    const additions = additionsRecovery ? reviewNativeHookAdditions({ path: additionsRecovery.path, intent: intentFile, policy: policyCurrent, configBefore, configCurrent: currentConfig, hooksBefore, hooksCurrent, nativeHooksPath: join78(dirname51(nativeConfigPath), "hooks.json"), journalHooks: intent.hooks, recordedNativeHooks: intent.nativeHooks }) : undefined;
     const managedHooks = [...intent.hooks, ...additions?.hooks ?? []];
     const managedKeys = managedHooks.map((h) => h.key);
     const witnessSame = codexTrustReconcileWitness(configBefore.text, managedKeys) === codexTrustReconcileWitness(currentConfig.text, managedKeys);
@@ -124832,7 +123618,7 @@ async function reconcileCodexNativeHooks(options, connect = connectCodexHookRpc)
         need8(isDeepStrictEqual22(actual, expected), "RECONCILE_UNRELATED_HOOK_CHANGED");
     }
     for (const wanted of intent.hooks) {
-      const matches2 = nativeHooks.filter((h2) => h2.key === wanted.key || h2.key === wanted.key.replace(join79(home, ".codex/hooks.json"), hooksPath));
+      const matches2 = nativeHooks.filter((h2) => h2.key === wanted.key || h2.key === wanted.key.replace(join78(home, ".codex/hooks.json"), hooksPath));
       need8(matches2.length === 1, "RECONCILE_NATIVE_IDENTITY_CHANGED");
       const h = matches2[0];
       const trusted = h.trustStatus === "trusted";
@@ -124881,7 +123667,7 @@ async function reconcileCodexNativeHooks(options, connect = connectCodexHookRpc)
     const receipt = { version: 1, status: preview2 ? "recovery-review-required" : supersededBinding ? "superseded" : "reconciled", reconciled: !preview2, supersededBinding, automaticRollback: false, journal, planDigest: intent.planDigest, nativeVersion: rpc.version, nativeStateVerified: !nativeTrustPending, nativeTrustPending, bindingRefreshRequired: !!configDiscoveryRecovery, nativeExecutionVerified: false, configSha256: currentConfig.sha256, hooksSha256: hooksCurrent.sha256, policySha256: policyBefore.sha256, policyBeforeSha256: policyBefore.sha256, policyCurrentSha256: policyCurrent.sha256, previousSkillsCli: intent.skillsCli, skillsCli: skillsCli.receipt, releaseProof: options.releaseProof, nativeInventoryScope: recordedNativeHooks ? "complete" : "declared-managed-hooks-only", unrelatedNativeHooksPreserved: !!recordedNativeHooks, unrelatedSettingsAndCommentsPreserved: true, ...recoveryPlan ? { recoveryPlan, recoveryPlanDigest } : {}, ...codexAdmissionReceipt(rpc.admission) };
     if (preview2)
       return receipt;
-    save(join79(journal, "receipt.json"), json2(receipt));
+    save(join78(journal, "receipt.json"), json2(receipt));
     return receipt;
   } catch (error61) {
     const message = error61 instanceof Error && error61.message.startsWith("CODEX_HOOK_TRUST_") ? error61.message : "CODEX_HOOK_TRUST_RECONCILE_REFUSED";
@@ -124892,20 +123678,20 @@ async function reconcileCodexNativeHooks(options, connect = connectCodexHookRpc)
 }
 async function enrollCodexNativeHooks(options = {}, connect = connectCodexHookRpc) {
   const home = resolve43(options.home ?? homedir14());
-  return withCodexCorpusWriteAsync([join79(home, ".codex")], (_assertCurrent, admission) => enrollCodexNativeHooksUnlocked(options, connect, admission), options);
+  return withCodexCorpusWriteAsync([join78(home, ".codex")], (_assertCurrent, admission) => enrollCodexNativeHooksUnlocked(options, connect, admission), options);
 }
 async function enrollCodexNativeHooksUnlocked(options, connect, admission) {
   let rpc, journal;
   try {
     const home = resolve43(options.home ?? homedir14()), dataDir3 = resolve43(options.dataDir ?? getDataDirReadOnly());
     assertManagedAgentBridge("codex", { home, dataDir: dataDir3, projectDir: home });
-    const policyFile = snapshot(join79(dataDir3, "agent-policy.json"), true), policy = parseManagedSkillPolicy(policyFile.text);
+    const policyFile = snapshot(join78(dataDir3, "agent-policy.json"), true), policy = parseManagedSkillPolicy(policyFile.text);
     const binding = policy.bridge, alias = binding.rootAliases?.find((item) => item.agent === "codex");
     const skillsCli = bindSkillsCli(binding.commands.codex, options.reviewedSkillsCli);
-    const physicalRoot = alias?.target ?? join79(home, ".codex"), hooksPath = join79(physicalRoot, "hooks.json"), configPath = join79(physicalRoot, "config.toml");
-    need8(options.codexHome === undefined || isAbsolute47(options.codexHome) && [join79(home, ".codex"), physicalRoot].includes(options.codexHome), "NATIVE_HOME_NOT_ADMITTED");
+    const physicalRoot = alias?.target ?? join78(home, ".codex"), hooksPath = join78(physicalRoot, "hooks.json"), configPath = join78(physicalRoot, "config.toml");
+    need8(options.codexHome === undefined || isAbsolute46(options.codexHome) && [join78(home, ".codex"), physicalRoot].includes(options.codexHome), "NATIVE_HOME_NOT_ADMITTED");
     const codexHome = options.codexHome === undefined ? undefined : physicalRoot;
-    const nativeConfigPath = join79(codexHome ?? join79(home, ".codex"), "config.toml");
+    const nativeConfigPath = join78(codexHome ?? join78(home, ".codex"), "config.toml");
     const hooksFile = snapshot(hooksPath), configFile = snapshot(configPath, true), original = structure3(configFile.text);
     const declarations = JSON.parse(hooksFile.text).hooks, expected = [];
     for (const [event, [nativeEvent, label]] of Object.entries(eventNames)) {
@@ -124914,25 +123700,25 @@ async function enrollCodexNativeHooksUnlocked(options, connect, admission) {
       need8(Array.isArray(groups), "DECLARATION_CHANGED");
       const matches2 = groups.flatMap((group, gi) => (group.hooks ?? []).flatMap((entry, hi) => entry.command === command ? [{ group, entry, gi, hi }] : []));
       need8(matches2.length === 1 && isDeepStrictEqual22(matches2[0].group, { hooks: [{ type: "command", command, timeout: 15 }] }), "DECLARATION_CHANGED");
-      expected.push({ event: nativeEvent, key: `${join79(home, ".codex/hooks.json")}:${label}:${matches2[0].gi}:${matches2[0].hi}`, command });
+      expected.push({ event: nativeEvent, key: `${join78(home, ".codex/hooks.json")}:${label}:${matches2[0].gi}:${matches2[0].hi}`, command });
     }
     codexTrustTextWitness(configFile.text, expected.map((h) => h.key));
     rpc = await connect({ command: options.codexCommand ?? "codex", home, codexHome });
     need8(SUPPORTED_CODEX_HOOK_VERSIONS.includes(rpc.version), "NATIVE_UNSUPPORTED_VERSION");
     const list2 = async () => {
       const response = await rpc.request("hooks/list", { cwds: [home] });
-      const nativeRoots = [...new Set([physicalRoot, join79(home, ".codex")])];
-      const coexistenceWarnings = nativeRoots.flatMap((hooksRoot) => nativeRoots.map((configRoot) => `loading hooks from both ${join79(hooksRoot, "hooks.json")} and ${join79(configRoot, "config.toml")}; prefer a single representation for this layer`));
+      const nativeRoots = [...new Set([physicalRoot, join78(home, ".codex")])];
+      const coexistenceWarnings = nativeRoots.flatMap((hooksRoot) => nativeRoots.map((configRoot) => `loading hooks from both ${join78(hooksRoot, "hooks.json")} and ${join78(configRoot, "config.toml")}; prefer a single representation for this layer`));
       const entry = response?.data?.[0];
       need8(Array.isArray(response?.data) && response.data.length === 1 && entry.cwd === home && Array.isArray(entry.hooks) && entry.hooks.length <= 1e4 && Array.isArray(entry.errors) && entry.errors.length === 0 && Array.isArray(entry.warnings) && entry.warnings.length <= 1 && entry.warnings.every((warning) => typeof warning === "string" && coexistenceWarnings.includes(warning)), "NATIVE_DISCOVERY_REFUSED");
       return response.data[0].hooks;
     };
     const admit = (hooks) => expected.map((wanted) => {
-      const canonicalKey = wanted.key.replace(join79(home, ".codex/hooks.json"), hooksPath);
+      const canonicalKey = wanted.key.replace(join78(home, ".codex/hooks.json"), hooksPath);
       const matches2 = hooks.filter((h2) => h2.key === wanted.key || h2.key === canonicalKey);
       need8(matches2.length === 1, "AMBIGUOUS_IDENTITY");
       const h = matches2[0];
-      need8(h.eventName === wanted.event && h.handlerType === "command" && h.command === wanted.command && h.matcher === null && h.timeoutSec === 15 && h.async === false && h.statusMessage === null && h.additionalContextLimit === null && [hooksPath, join79(home, ".codex/hooks.json")].includes(h.sourcePath) && h.source === "user" && h.pluginId === null && h.isManaged === false && /^sha256:[a-f0-9]{64}$/.test(h.currentHash) && typeof h.enabled === "boolean", "NATIVE_IDENTITY_CHANGED");
+      need8(h.eventName === wanted.event && h.handlerType === "command" && h.command === wanted.command && h.matcher === null && h.timeoutSec === 15 && h.async === false && h.statusMessage === null && h.additionalContextLimit === null && [hooksPath, join78(home, ".codex/hooks.json")].includes(h.sourcePath) && h.source === "user" && h.pluginId === null && h.isManaged === false && /^sha256:[a-f0-9]{64}$/.test(h.currentHash) && typeof h.enabled === "boolean", "NATIVE_IDENTITY_CHANGED");
       need8(hooks.filter((other) => other.command === wanted.command).length === 1, "AMBIGUOUS_IDENTITY");
       need8(["trusted", "untrusted", "modified"].includes(h.trustStatus), "UNKNOWN_TRUST_STATUS");
       return { key: h.key, event: wanted.event, command: wanted.command, handlerType: h.handlerType, timeoutSec: h.timeoutSec, sourcePath: h.sourcePath, currentHash: h.currentHash, enabled: h.enabled, trustStatus: h.trustStatus };
@@ -124958,7 +123744,7 @@ async function enrollCodexNativeHooksUnlocked(options, connect, admission) {
     const baseReceipt = { planDigest, skillsCli: skillsCli.receipt, nativeVersion: rpc.version, nativeConfigPath, ownedNativeProcessId: rpc.processId, agent: "codex", applied: false, planned, nativeEligible: planned.length === 0, bindingRefreshRequired: false, transport: "owned-stdio-process", existingSessionsReloaded: false, nativeExecutionVerified: false, ...codexAdmissionReceipt(admission) };
     if (options.apply)
       need8(options.reviewedPlanDigest === planDigest, "PLAN_CHANGED: run the dry-run again and pass its reviewed --plan-digest with --apply");
-    const parent = join79(dataDir3, "native-hook-trust");
+    const parent = join78(dataDir3, "native-hook-trust");
     const st = lstatSync50(parent, { throwIfNoEntry: false });
     if (st) {
       need8(st.isDirectory() && !st.isSymbolicLink() && st.uid === process.getuid() && (st.mode & 511) === 448, "UNSAFE_JOURNAL");
@@ -124966,19 +123752,19 @@ async function enrollCodexNativeHooksUnlocked(options, connect, admission) {
       need8(priorJournals.length < 1000, "JOURNAL_BOUND");
       for (const name of priorJournals) {
         need8(/^[a-f0-9-]{36}$/.test(name), "UNSAFE_JOURNAL");
-        need8(lstatSync50(join79(parent, name, "receipt.json"), { throwIfNoEntry: false })?.isFile(), "RECONCILE_REQUIRED: inspect the incomplete private journal before applying again");
+        need8(lstatSync50(join78(parent, name, "receipt.json"), { throwIfNoEntry: false })?.isFile(), "RECONCILE_REQUIRED: inspect the incomplete private journal before applying again");
       }
     }
     if (!options.apply || !planned.length)
       return baseReceipt;
     if (!st)
       mkdirSync32(parent, { mode: 448 });
-    journal = join79(parent, randomUUID16());
+    journal = join78(parent, randomUUID16());
     mkdirSync32(journal, { mode: 448 });
-    save(join79(journal, "config.before.toml"), configFile.bytes);
-    save(join79(journal, "hooks.before.json"), hooksFile.bytes);
-    save(join79(journal, "policy.before.json"), policyFile.bytes);
-    save(join79(journal, "intent.json"), json2({ ...digestInput, planDigest, hooks: planned, nativeHooks: discovered.map(safeNativeHook), ...codexAdmissionReceipt(admission) }));
+    save(join78(journal, "config.before.toml"), configFile.bytes);
+    save(join78(journal, "hooks.before.json"), hooksFile.bytes);
+    save(join78(journal, "policy.before.json"), policyFile.bytes);
+    save(join78(journal, "intent.json"), json2({ ...digestInput, planDigest, hooks: planned, nativeHooks: discovered.map(safeNativeHook), ...codexAdmissionReceipt(admission) }));
     need8(isDeepStrictEqual22(admit(await list2()), admitted), "NATIVE_DISCOVERY_CHANGED");
     checkInputs();
     let result2;
@@ -124994,7 +123780,7 @@ async function enrollCodexNativeHooksUnlocked(options, connect, admission) {
     for (const h of planned)
       expectedConfig.hooks.state[h.key] = { ...expectedConfig.hooks.state[h.key], enabled: true, trusted_hash: h.currentHash };
     need8(isDeepStrictEqual22(structure3(after2.text), expectedConfig) && codexTrustTextWitness(after2.text, keys4) === preservationText, "PRESERVATION_FAILED");
-    const savedConfig = snapshot(join79(journal, "config.before.toml"), true);
+    const savedConfig = snapshot(join78(journal, "config.before.toml"), true);
     need8(savedConfig.sha256 === configFile.sha256, "JOURNAL_CHANGED");
     const discoveryTransition = binding.discovery?.codex ? createCodexHookDiscoveryRecovery(binding.discovery.codex, savedConfig, after2, planned) : undefined;
     unchanged2(policyFile);
@@ -125010,13 +123796,13 @@ async function enrollCodexNativeHooksUnlocked(options, connect, admission) {
     skillsCli.recheck();
     assertManagedAgentBridge("codex", { home, dataDir: dataDir3, projectDir: home, codexDiscoveryRecovery: discoveryTransition });
     const receipt = { ...baseReceipt, applied: true, nativeEligible: true, bindingRefreshRequired: !!discoveryTransition, ...discoveryTransition ? { discoveryTransition } : {}, nativeConfigVersion: result2.version, journal, beforeSha256: configFile.sha256, afterSha256: after2.sha256, unrelatedSettingsAndCommentsPreserved: true };
-    save(join79(journal, "receipt.json"), json2(receipt));
+    save(join78(journal, "receipt.json"), json2(receipt));
     return receipt;
   } catch (error61) {
     const message = error61 instanceof Error && error61.message.startsWith("CODEX_HOOK_TRUST_") ? error61.message : "CODEX_HOOK_TRUST_REFUSED: verify managed bridge installation and native Codex support";
     if (journal) {
       try {
-        save(join79(journal, "stopped.json"), json2({ error: message.split(":")[0], automaticRollback: false, reconcileBeforeRetry: true, ...codexAdmissionReceipt(admission) }));
+        save(join78(journal, "stopped.json"), json2({ error: message.split(":")[0], automaticRollback: false, reconcileBeforeRetry: true, ...codexAdmissionReceipt(admission) }));
       } catch {}
     }
     throw new Error(message);
@@ -125050,8 +123836,8 @@ var init_agent_codex_trust = __esm(() => {
 
 // src/lib/codex-native-trust.ts
 import { createHash as createHash50 } from "crypto";
-import { readFileSync as readFileSync48 } from "fs";
-import { join as join80, resolve as resolve44 } from "path";
+import { readFileSync as readFileSync47 } from "fs";
+import { join as join79, resolve as resolve44 } from "path";
 function refuse7(detail) {
   throw new Error(`NATIVE_SKILL_POLICY_TRUST_REFUSED: ${detail}`);
 }
@@ -125070,7 +123856,7 @@ function planCodexNativeTrust(options) {
     refuse7("digests must be unique");
   if (typeof expectedPolicySha256 !== "string" || !HEX_DIGEST2.test(expectedPolicySha256))
     refuse7("--expected-policy-sha256 must be lowercase SHA-256 hex");
-  const dataDir3 = resolve44(options.dataDir ?? getDataDirReadOnly()), policyPath = join80(dataDir3, "agent-policy.json");
+  const dataDir3 = resolve44(options.dataDir ?? getDataDirReadOnly()), policyPath = join79(dataDir3, "agent-policy.json");
   assertOperatorTrustRoot(dataDir3);
   const snapshot2 = readManagedSkillPolicySnapshot(dataDir3);
   if (!snapshot2)
@@ -125108,7 +123894,7 @@ function applyCodexNativeTrust(plan, expectedPolicySha256) {
     const backupPath = result2.backups[0];
     if (result2.backups.length !== 1 || typeof backupPath !== "string")
       throw new Error("NATIVE_SKILL_POLICY_TRUST_WRITE_UNVERIFIED: the pre-change backup was not recorded");
-    const backupSha256 = sha7(readFileSync48(backupPath));
+    const backupSha256 = sha7(readFileSync47(backupPath));
     if (backupSha256 !== plan.policySha256Before)
       throw new Error(`NATIVE_SKILL_POLICY_TRUST_WRITE_UNVERIFIED: the backup at ${backupPath} does not read back as the pre-change policy`);
     receipt.backup = { path: backupPath, sha256: backupSha256, verified: true };
@@ -125135,8 +123921,8 @@ var init_codex_native_trust = __esm(() => {
 
 // src/lib/claude-prospective-review.ts
 import { createHash as createHash51 } from "crypto";
-import { lstatSync as lstatSync51, readFileSync as readFileSync49, readdirSync as readdirSync29, realpathSync as realpathSync24 } from "fs";
-import { basename as basename26, dirname as dirname52, isAbsolute as isAbsolute48, join as join81, relative as relative16, resolve as resolve45, sep as sep23 } from "path";
+import { lstatSync as lstatSync51, readFileSync as readFileSync48, readdirSync as readdirSync29, realpathSync as realpathSync24 } from "fs";
+import { basename as basename26, dirname as dirname52, isAbsolute as isAbsolute47, join as join80, relative as relative16, resolve as resolve45, sep as sep23 } from "path";
 import { isDeepStrictEqual as isDeepStrictEqual23 } from "util";
 function hashClaudeDiscoveryBinding(binding) {
   return sha8(JSON.stringify(binding));
@@ -125187,7 +123973,7 @@ function keys4(value, expected, name) {
     refuse8(`${name} has an unsupported shape`);
 }
 function abs(path2, name) {
-  if (typeof path2 !== "string" || !path2 || path2.length > 4096 || /[\x00-\x1f\x7f]/.test(path2) || !isAbsolute48(path2) || resolve45(path2) !== path2)
+  if (typeof path2 !== "string" || !path2 || path2.length > 4096 || /[\x00-\x1f\x7f]/.test(path2) || !isAbsolute47(path2) || resolve45(path2) !== path2)
     refuse8(`${name} must be a normalized absolute path`);
 }
 function validUtcTimestamp(value) {
@@ -125205,7 +123991,7 @@ function safeFile(path2, name) {
   const stat3 = lstatSync51(path2, { throwIfNoEntry: false });
   if (!stat3?.isFile() || stat3.isSymbolicLink() || stat3.size > MAX_CANDIDATE_BYTES)
     refuse8(`${name} is not a bounded regular file`);
-  return readFileSync49(path2);
+  return readFileSync48(path2);
 }
 function canonicalDir(path2, name) {
   abs(path2, name);
@@ -125231,7 +124017,7 @@ function captureClaudeProspectiveCandidateClosure(root2) {
     for (const name of names) {
       if (!name || name === "." || name === ".." || name.includes("/") || name.includes("\\") || /[\x00-\x1f\x7f]/.test(name))
         refuse8("candidate contains an unsupported path member");
-      const path2 = join81(directory3, name), rel = relative16(root2, path2).split(sep23).join("/");
+      const path2 = join80(directory3, name), rel = relative16(root2, path2).split(sep23).join("/");
       if (entries.length >= MAX_CANDIDATE_FILES)
         refuse8("candidate closure exceeds its member limit");
       const stat3 = lstatSync51(path2);
@@ -125262,9 +124048,9 @@ function captureClaudeProspectiveCandidateClosure(root2) {
 function captureClaudeInstallerCandidate(root2, policyPath) {
   const closureSha256 = captureClaudeProspectiveCandidateClosure(root2);
   const dataDir3 = getDataDirReadOnly();
-  if (policyPath !== join81(dataDir3, "agent-policy.json"))
+  if (policyPath !== join80(dataDir3, "agent-policy.json"))
     refuse8("Skills policy path differs from the package-owned resolver");
-  const catalogPath = join81(root2, ".claude-plugin/marketplace.json");
+  const catalogPath = join80(root2, ".claude-plugin/marketplace.json");
   const catalog = jsonFile(catalogPath, "candidate catalog");
   if (!catalog || !Array.isArray(catalog.plugins))
     refuse8("candidate catalog is invalid");
@@ -125275,13 +124061,13 @@ function captureClaudeInstallerCandidate(root2, policyPath) {
     if (names.has(row2.name))
       refuse8("candidate catalog repeats a plugin name");
     names.add(row2.name);
-    if (typeof row2.source !== "string" || isAbsolute48(row2.source) || /[\\\x00-\x1f\x7f]/.test(row2.source))
+    if (typeof row2.source !== "string" || isAbsolute47(row2.source) || /[\\\x00-\x1f\x7f]/.test(row2.source))
       refuse8("candidate catalog plugin source is invalid");
     const pluginRoot = resolve45(root2, row2.source);
     const relativeRoot = relative16(root2, pluginRoot);
-    if (!relativeRoot || relativeRoot === "." || relativeRoot === ".." || relativeRoot.startsWith(`..${sep23}`) || isAbsolute48(relativeRoot))
+    if (!relativeRoot || relativeRoot === "." || relativeRoot === ".." || relativeRoot.startsWith(`..${sep23}`) || isAbsolute47(relativeRoot))
       refuse8("candidate plugin source escapes the candidate root");
-    const path2 = join81(pluginRoot, ".claude-plugin/plugin.json");
+    const path2 = join80(pluginRoot, ".claude-plugin/plugin.json");
     return { plugin: row2.name, ...captureClaudePluginManifestFile(path2) };
   });
   const policy = readManagedSkillPolicySnapshot(dataDir3);
@@ -125381,7 +124167,7 @@ function assertNoUnprojectedSkillPayload(root2, catalogPath, marketplace, plugin
     refuse8("candidate marketplace entry declares native skill or command payloads");
   const walk2 = (directory3) => {
     for (const name of readdirSync29(directory3).sort()) {
-      const path2 = join81(directory3, name), rel = relative16(root2, path2).split(sep23).join("/");
+      const path2 = join80(directory3, name), rel = relative16(root2, path2).split(sep23).join("/");
       const stat3 = lstatSync51(path2);
       if (stat3.isDirectory())
         walk2(path2);
@@ -125439,11 +124225,11 @@ function reviewClaudeProspectiveCandidate(request2, requestFileSha256) {
     refuse8("Skills policy root alias changed or is invalid");
   }
   const canonical9 = (path2) => canonicalAgentPath(path2, aliases);
-  const configRoot = canonical9(join81(request2.native.home, ".claude"));
+  const configRoot = canonical9(join80(request2.native.home, ".claude"));
   canonicalDir(configRoot, "Claude config root");
   if (request2.native.configRoot !== configRoot)
     refuse8("Claude config root differs from the current resolver and reviewed root alias");
-  const pluginRoot = join81(configRoot, "plugins");
+  const pluginRoot = join80(configRoot, "plugins");
   if (process.env.CLAUDE_CODE_PLUGIN_CACHE_DIR)
     refuse8("CLAUDE_CODE_PLUGIN_CACHE_DIR overrides are unsupported by this prospective schema; bind and review the actual cache root first");
   if (request2.native.pluginRoot !== pluginRoot)
@@ -125460,7 +124246,7 @@ function reviewClaudeProspectiveCandidate(request2, requestFileSha256) {
     refuse8("candidate must select between one and 32 plugins from one marketplace");
   if (candidate2.functionHooksEnv !== undefined && candidate2.functionHooksEnv !== "1")
     refuse8("function-hook environment mutation only supports the explicit value 1");
-  const settingsMarketplaceWriterVersions = ["2.1.276", "2.1.278", "2.1.282", "2.1.287", "2.1.293", "2.1.296", "2.1.299", "2.1.300", "2.1.301", "2.1.302"];
+  const settingsMarketplaceWriterVersions = ["2.1.276", "2.1.278", "2.1.282", "2.1.287", "2.1.293", "2.1.296", "2.1.299", "2.1.300", "2.1.301", "2.1.302", "2.1.314", "2.1.316"];
   const nativeVersion = request2.native.executable.version;
   const measuredSettingsWriter = settingsMarketplaceWriterVersions.some((version2) => nativeVersion === version2 || nativeVersion === `${version2} (Claude Code)`);
   if (hasOwn2(candidate2, "settingsMarketplaceSource") && (candidate2.settingsMarketplaceSource !== "directory" || request2.scope.kind !== "user" || !measuredSettingsWriter))
@@ -125468,7 +124254,7 @@ function reviewClaudeProspectiveCandidate(request2, requestFileSha256) {
   abs(candidate2.catalogPath, "catalog path");
   if (!candidate2.catalogPath.startsWith(candidate2.root + sep23))
     refuse8("catalog must be inside the frozen candidate root");
-  if (candidate2.catalogPath !== join81(candidate2.root, ".claude-plugin", "marketplace.json"))
+  if (candidate2.catalogPath !== join80(candidate2.root, ".claude-plugin", "marketplace.json"))
     refuse8("marketplace catalog must be at the frozen root's .claude-plugin/marketplace.json path");
   if (!SHA2562.test(candidate2.catalogSha256) || !SHA2562.test(candidate2.closureSha256))
     refuse8("candidate digests must be lowercase SHA-256");
@@ -125510,11 +124296,11 @@ function reviewClaudeProspectiveCandidate(request2, requestFileSha256) {
     if (Buffer.byteLength(canonicalJson3(selected.optionsPatch), "utf8") > 16 * 1024)
       refuse8("selected plugin optionsPatch exceeds its byte bound");
     abs(selected.manifestPath, "manifest path");
-    if (!selected.manifestPath.startsWith(candidate2.root + sep23) || basename26(dirname52(selected.manifestPath)) !== ".claude-plugin" || selected.manifestPath !== join81(dirname52(dirname52(selected.manifestPath)), ".claude-plugin", "plugin.json"))
+    if (!selected.manifestPath.startsWith(candidate2.root + sep23) || basename26(dirname52(selected.manifestPath)) !== ".claude-plugin" || selected.manifestPath !== join80(dirname52(dirname52(selected.manifestPath)), ".claude-plugin", "plugin.json"))
       refuse8("plugin manifest must be under a plugin root inside the frozen marketplace closure");
     const pluginRoot2 = dirname52(dirname52(selected.manifestPath));
     const relativePluginRoot = relative16(candidate2.root, pluginRoot2);
-    if (!relativePluginRoot || relativePluginRoot === "." || relativePluginRoot === ".." || relativePluginRoot.startsWith(`..${sep23}`) || isAbsolute48(relativePluginRoot))
+    if (!relativePluginRoot || relativePluginRoot === "." || relativePluginRoot === ".." || relativePluginRoot.startsWith(`..${sep23}`) || isAbsolute47(relativePluginRoot))
       refuse8("plugin root must be a child of the frozen marketplace root");
     canonicalDir(pluginRoot2, "candidate plugin root");
     if (!SHA2562.test(selected.manifestSha256))
@@ -125548,7 +124334,7 @@ function reviewClaudeProspectiveCandidate(request2, requestFileSha256) {
     const sourcePath = selectedEntry.source;
     const sourceRelativePath = relative16(candidate2.root, pluginRoot2).split(sep23).join("/");
     const expectedSourcePath = sourceRelativePath === "." ? "./" : `./${sourceRelativePath}`;
-    if (typeof sourcePath !== "string" || isAbsolute48(sourcePath) || sourcePath !== expectedSourcePath || resolve45(dirname52(dirname52(candidate2.catalogPath)), sourcePath) !== pluginRoot2)
+    if (typeof sourcePath !== "string" || isAbsolute47(sourcePath) || sourcePath !== expectedSourcePath || resolve45(dirname52(dirname52(candidate2.catalogPath)), sourcePath) !== pluginRoot2)
       refuse8("marketplace source does not resolve to the frozen plugin closure; external source mapping is not supported by this schema");
     const entry = captureClaudeMarketplaceEntry(candidate2.catalogPath, candidate2.marketplace, selected.plugin);
     if (entry.sha256.length !== 64)
@@ -125568,12 +124354,12 @@ function reviewClaudeProspectiveCandidate(request2, requestFileSha256) {
   for (const name of ["settings", "projectSettings", "projectSettingsLocal", "marketplaces", "installedPlugins"])
     keys4(request2.preimages[name], ["path", "sha256"], `${name} preimage`);
   const expectedPaths = {
-    settings: request2.scope.kind === "project" ? canonical9(join81(request2.scope.projectPath, ".claude/settings.json")) : canonical9(join81(request2.native.home, ".claude/settings.json")),
-    userSettings: canonical9(join81(request2.native.home, ".claude/settings.json")),
-    projectSettings: canonical9(join81(request2.scope.projectPath, ".claude/settings.json")),
-    projectSettingsLocal: canonical9(join81(request2.scope.projectPath, ".claude/settings.local.json")),
-    marketplaces: canonical9(join81(request2.native.home, ".claude/plugins/known_marketplaces.json")),
-    installedPlugins: canonical9(join81(request2.native.home, ".claude/plugins/installed_plugins.json"))
+    settings: request2.scope.kind === "project" ? canonical9(join80(request2.scope.projectPath, ".claude/settings.json")) : canonical9(join80(request2.native.home, ".claude/settings.json")),
+    userSettings: canonical9(join80(request2.native.home, ".claude/settings.json")),
+    projectSettings: canonical9(join80(request2.scope.projectPath, ".claude/settings.json")),
+    projectSettingsLocal: canonical9(join80(request2.scope.projectPath, ".claude/settings.local.json")),
+    marketplaces: canonical9(join80(request2.native.home, ".claude/plugins/known_marketplaces.json")),
+    installedPlugins: canonical9(join80(request2.native.home, ".claude/plugins/installed_plugins.json"))
   };
   for (const name of Object.keys(expectedPaths)) {
     const witness = request2.preimages[name];
@@ -125706,7 +124492,7 @@ function reviewClaudeProspectiveCandidate(request2, requestFileSha256) {
     const manifestVersion = manifest.version;
     const sanitizeComponent = (value) => value.replace(/[^A-Za-z0-9_-]/g, "-");
     const sanitizedVersion = manifestVersion === "." || manifestVersion === ".." ? "-" : manifestVersion.replace(/[^A-Za-z0-9._-]/g, "-");
-    const expectedInstallPath = join81(pluginRoot, "cache", sanitizeComponent(candidate2.marketplace), sanitizeComponent(plugin), sanitizedVersion);
+    const expectedInstallPath = join80(pluginRoot, "cache", sanitizeComponent(candidate2.marketplace), sanitizeComponent(plugin), sanitizedVersion);
     if (expectedInstallPath.length > 4096)
       refuse8("candidate native cache path exceeds its bound");
     const targetRegistration = {
@@ -125845,7 +124631,7 @@ function reviewClaudeProspectiveCandidate(request2, requestFileSha256) {
       { name: "project-settings-local", path: expectedPaths.projectSettingsLocal, sha256: request2.preimages.projectSettingsLocal.sha256 },
       { name: "known-marketplaces", path: expectedPaths.marketplaces, sha256: request2.preimages.marketplaces.sha256 },
       { name: "installed-plugins", path: expectedPaths.installedPlugins, sha256: request2.preimages.installedPlugins.sha256 },
-      { name: "skills-policy", path: join81(request2.skills.dataDir, "agent-policy.json"), sha256: request2.skills.policySha256 }
+      { name: "skills-policy", path: join80(request2.skills.dataDir, "agent-policy.json"), sha256: request2.skills.policySha256 }
     ],
     ownedDelta: { settingsEnabledPlugins: selectedPluginIds, selectedPluginOptions: selectedOptionPaths, functionHooksEnv: candidate2.functionHooksEnv ?? null, knownMarketplace: candidate2.marketplace, installedPlugins: selectedPluginIds, unrelatedGraph: "preserved-by-complete-semantic-documents" },
     identityPrecondition: "Harnesses must resolve the installed Claude home/config/plugin roots and executable path/version/hash plus the installed Skills data directory through their package-owned consumers, then compare every value before trusting this receipt; this validator checks supplied paths and current bytes only and does not establish actual consumer identity",
@@ -125887,7 +124673,7 @@ var init_claude_prospective_review = __esm(() => {
 
 // src/lib/codex-plugin-reconcile.ts
 import { realpathSync as realpathSync25 } from "fs";
-import { join as join82, resolve as resolve46 } from "path";
+import { join as join81, resolve as resolve46 } from "path";
 function boundedMessage(text5) {
   const line = text5.replace(/[\u0000-\u001f\u007f-\u009f\u061c\u200e\u200f\u2028-\u202e\u2066-\u2069]/g, " ").trim();
   return line.length > 800 ? `${line.slice(0, 797)}...` : line;
@@ -125930,11 +124716,11 @@ async function runCodexPluginReconcile(options) {
           return resolve46(path2);
         }
       };
-      if (canonical9(options.codexHome) !== canonical9(join82(home, ".codex")))
+      if (canonical9(options.codexHome) !== canonical9(join81(home, ".codex")))
         throw new CodexPluginReconcileRefusal("CODEX_RECONCILE_CODEX_HOME_UNSUPPORTED", "CODEX_HOME names a Codex home other than the one the Skills binding reviews");
     }
     const capture2 = options.captureCatalog ?? captureCodexNativeSkillCatalog;
-    const remoteReceipts = captureCodexRemoteReceiptSnapshot(join82(home, ".codex/plugins/cache"));
+    const remoteReceipts = captureCodexRemoteReceiptSnapshot(join81(home, ".codex/plugins/cache"));
     const captured = await capture2({ command: options.codexCommand ?? "codex", home, ...options.codexHome === undefined ? {} : { codexHome: options.codexHome }, cwd: projectDir });
     const catalog = captured && typeof captured === "object" ? { ...captured, remoteReceipts } : captured;
     base3.codexVersion = typeof catalog?.version === "string" ? catalog.version : null;
@@ -125996,7 +124782,7 @@ var init_codex_plugin_reconcile = __esm(() => {
 
 // src/lib/claude-installer-binding.ts
 import { createHash as createHash52 } from "crypto";
-import { join as join83 } from "path";
+import { join as join82 } from "path";
 function readPolicy(dataDir3) {
   let snapshot2;
   try {
@@ -126008,7 +124794,7 @@ function readPolicy(dataDir3) {
 }
 function verifyClaudeInstallerDiscoveryBinding(policyPath) {
   const dataDir3 = getDataDirReadOnly();
-  if (policyPath !== join83(dataDir3, "agent-policy.json"))
+  if (policyPath !== join82(dataDir3, "agent-policy.json"))
     refuse9("POLICY_PATH_MISMATCH");
   const snapshot2 = readPolicy(dataDir3);
   const bridge = snapshot2.value.bridge;
@@ -126087,8 +124873,8 @@ var init_claude_installer_binding = __esm(() => {
 });
 
 // src/cli/commands/claude-installer-capture.ts
-import { closeSync as closeSync34, constants as constants33, fstatSync as fstatSync33, lstatSync as lstatSync52, openSync as openSync34, readSync as readSync25 } from "fs";
-import { isAbsolute as isAbsolute49, resolve as resolve47 } from "path";
+import { closeSync as closeSync33, constants as constants33, fstatSync as fstatSync32, lstatSync as lstatSync52, openSync as openSync33, readSync as readSync25 } from "fs";
+import { isAbsolute as isAbsolute48, resolve as resolve47 } from "path";
 function need11(condition, code2) {
   if (!condition)
     throw new CaptureRefusal(code2);
@@ -126102,16 +124888,16 @@ function exactKeys5(value, expected, operation) {
   }
 }
 function canonicalPath2(value) {
-  need11(typeof value === "string" && isAbsolute49(value) && resolve47(value) === value && !/[\x00-\x1f\x7f]/.test(value), "INVALID_PATH: path fields must be normalized absolute paths without control characters");
+  need11(typeof value === "string" && isAbsolute48(value) && resolve47(value) === value && !/[\x00-\x1f\x7f]/.test(value), "INVALID_PATH: path fields must be normalized absolute paths without control characters");
 }
 function readRequest2(path2) {
   canonicalPath2(path2);
   const before2 = lstatSync52(path2, { throwIfNoEntry: false });
   if (!before2?.isFile() || before2.isSymbolicLink() || before2.size > MAX_REQUEST_BYTES)
     throw new CaptureRefusal("INVALID_REQUEST_FILE: --request must name a regular non-symlink JSON file no larger than 64 KiB");
-  const fd = openSync34(path2, constants33.O_RDONLY | (constants33.O_NOFOLLOW ?? 0) | constants33.O_NONBLOCK);
+  const fd = openSync33(path2, constants33.O_RDONLY | (constants33.O_NOFOLLOW ?? 0) | constants33.O_NONBLOCK);
   try {
-    const opened = fstatSync33(fd);
+    const opened = fstatSync32(fd);
     need11(opened.isFile() && opened.dev === before2.dev && opened.ino === before2.ino && opened.size === before2.size, "INVALID_REQUEST_FILE: --request must remain the same regular file while read");
     const bytes = Buffer.alloc(MAX_REQUEST_BYTES + 1);
     let length = 0;
@@ -126121,7 +124907,7 @@ function readRequest2(path2) {
         break;
       length += count;
     }
-    const after2 = fstatSync33(fd), current = lstatSync52(path2);
+    const after2 = fstatSync32(fd), current = lstatSync52(path2);
     need11(length <= MAX_REQUEST_BYTES && length === opened.size && after2.size === opened.size && after2.mtimeMs === opened.mtimeMs && after2.ctimeMs === opened.ctimeMs && current.dev === opened.dev && current.ino === opened.ino && current.mtimeMs === opened.mtimeMs && current.ctimeMs === opened.ctimeMs, "INVALID_REQUEST_FILE: --request must remain unchanged while read");
     try {
       return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes.subarray(0, length)));
@@ -126129,7 +124915,7 @@ function readRequest2(path2) {
       throw new CaptureRefusal("INVALID_REQUEST_JSON: --request must contain one valid UTF-8 JSON object");
     }
   } finally {
-    closeSync34(fd);
+    closeSync33(fd);
   }
 }
 function paths(value) {
@@ -126283,10 +125069,10 @@ __export(exports_agent_integration, {
   MANAGED_HOOK_CONTEXT_MAX_SKILLS: () => MANAGED_HOOK_CONTEXT_MAX_SKILLS,
   MANAGED_HOOK_CONTEXT_MAX_CHARS: () => MANAGED_HOOK_CONTEXT_MAX_CHARS
 });
-import { existsSync as existsSync36, lstatSync as lstatSync53, readFileSync as readFileSync50, readSync as readSync26, writeFileSync as writeFileSync29 } from "fs";
+import { existsSync as existsSync36, lstatSync as lstatSync53, readFileSync as readFileSync49, readSync as readSync26, writeFileSync as writeFileSync29 } from "fs";
 import { createHash as createHash53 } from "crypto";
 import { homedir as homedir15 } from "os";
-import { basename as basename27, isAbsolute as isAbsolute50, resolve as resolve48 } from "path";
+import { basename as basename27, isAbsolute as isAbsolute49, resolve as resolve48 } from "path";
 function boundedEnvInteger(name, fallback, [min2, max2]) {
   const raw = process.env[name];
   if (raw === undefined || !/^[0-9]{1,6}$/.test(raw.trim()))
@@ -126470,7 +125256,7 @@ function registerAgentIntegration(parent) {
   });
   hook.command("native-catalog").requiredOption("--cwd <path>", "Absolute project directory observed by native Codex skills/list").requiredOption("--output <file>", "New private file for the projected native catalog").option("--codex-command <path>", "Installed Codex executable used by the native client", "codex").option("--json", "Output bounded capture metadata as JSON", false).description("Capture a reviewed Codex native skill catalog for exact hook enrollment").action(async (options) => {
     try {
-      if (!isAbsolute50(options.cwd) || !isAbsolute50(options.output))
+      if (!isAbsolute49(options.cwd) || !isAbsolute49(options.output))
         throw new Error("CODEX_NATIVE_SKILL_CATALOG_ABSOLUTE_PATH_REQUIRED");
       if (existsSync36(options.output))
         throw new Error("CODEX_NATIVE_SKILL_CATALOG_OUTPUT_EXISTS");
@@ -126495,7 +125281,7 @@ function registerAgentIntegration(parent) {
         throw error61;
       }
       const written = lstatSync53(options.output);
-      if (!written.isFile() || written.isSymbolicLink() || (written.mode & 63) !== 0 || readFileSync50(options.output, "utf8") !== bytes)
+      if (!written.isFile() || written.isSymbolicLink() || (written.mode & 63) !== 0 || readFileSync49(options.output, "utf8") !== bytes)
         throw new Error("CODEX_NATIVE_SKILL_CATALOG_READBACK_FAILED");
       const receipt = {
         version: catalog.version,
@@ -126572,12 +125358,12 @@ function registerAgentIntegration(parent) {
   });
   hook.command("review-claude-candidate").requiredOption("--request <file>", "Frozen skills.claude-plugin-prospective-review/v1 JSON request").option("--json", "Return the validation-only receipt as JSON", false).description("Validate a prospective Claude plugin candidate and current preimages without changing native state; Harnesses must compare native and Skills paths against installed package-owned resolvers before trusting the receipt").action(async (options) => {
     try {
-      if (!isAbsolute50(options.request))
+      if (!isAbsolute49(options.request))
         throw new Error("CLAUDE_CANDIDATE_REVIEW_REFUSED: --request must be an absolute path");
       const stat3 = lstatSync53(options.request);
       if (!stat3.isFile() || stat3.isSymbolicLink() || stat3.size > 1024 * 1024)
         throw new Error("CLAUDE_CANDIDATE_REVIEW_REFUSED: request must be a regular file no larger than 1 MiB");
-      const requestBytes = readFileSync50(options.request);
+      const requestBytes = readFileSync49(options.request);
       const request2 = JSON.parse(requestBytes.toString("utf8"));
       const receipt = reviewClaudeProspectiveCandidate(request2, createHash53("sha256").update(requestBytes).digest("hex"));
       await writeCliOutput(options.json ? JSON.stringify(receipt) : `Claude plugin candidate review accepted for ${receipt.pluginIds.length} selected plugin(s); native state was not changed.`);
@@ -126651,8 +125437,8 @@ function registerAgentIntegration(parent) {
   });
   hook.command("install").option("--agent <agent>", `Agent to configure: ${INTEGRATION_AGENTS.join(", ")}, all (default: configured or detected agents; explicit all requires every adapter)`).option("--command <path>", "Skills executable used by the hook (preserves existing binding; new agents use skills)").option("--selection-profile <id>", "Selection profile (preserves existing binding; new agents use default)").option("--include-vendor", "Retained for compatibility; vendor system skills are always inventoried and disabled", false).option("--discovery-inputs <file>", "Advanced reviewed active plugin roots and source hashes for unsupported registrations").option("--codex-skill-denials <file>", "Explicit reviewed remote skill denials: array of exact name, path and document sha256; requires fresh catalog and discovery inputs").option("--codex-native-catalog <file>", "Reviewed supported Codex skill and installed-plugin receipt for exact qualified-name disables").option("--reviewed-cache-alias <path>", "Exact skill-containing vendor cache alias reviewed for this hook plan").option("--allow-root-aliases", "Allow home .claude/.codex aliases to existing directories within this home", false).option("--apply", "Apply the plan, preserving prior configuration in private backups", false).option("--json", "Output a receipt as JSON", false).description("Plan or install one Skills CLI bridge plus native prompt hooks").action(async (options) => {
     try {
-      const discoveryInputs = options.discoveryInputs ? JSON.parse(readFileSync50(options.discoveryInputs, "utf8")) : undefined;
-      const plan = planAgentIntegration({ projectDir: process.cwd(), agents: options.agent === undefined ? detectedIntegrationAgents() : agents(options.agent), command: options.command, profileId: options.selectionProfile, includeVendor: options.includeVendor, discoveryInputs, allowRootAliases: options.allowRootAliases, reviewedCacheAlias: options.reviewedCacheAlias, codexSkillDenials: options.codexSkillDenials ? JSON.parse(readFileSync50(options.codexSkillDenials, "utf8")) : undefined, codexNativeCatalog: options.codexNativeCatalog ? JSON.parse(readFileSync50(options.codexNativeCatalog, "utf8")) : undefined });
+      const discoveryInputs = options.discoveryInputs ? JSON.parse(readFileSync49(options.discoveryInputs, "utf8")) : undefined;
+      const plan = planAgentIntegration({ projectDir: process.cwd(), agents: options.agent === undefined ? detectedIntegrationAgents() : agents(options.agent), command: options.command, profileId: options.selectionProfile, includeVendor: options.includeVendor, discoveryInputs, allowRootAliases: options.allowRootAliases, reviewedCacheAlias: options.reviewedCacheAlias, codexSkillDenials: options.codexSkillDenials ? JSON.parse(readFileSync49(options.codexSkillDenials, "utf8")) : undefined, codexNativeCatalog: options.codexNativeCatalog ? JSON.parse(readFileSync49(options.codexNativeCatalog, "utf8")) : undefined });
       const result2 = options.apply ? applyAgentIntegration(plan) : { changed: [], backups: [] };
       const receipt = { codexPluginSkillReview: plan.codexPluginSkillReview, codexPluginSkills: plan.changes.filter((change) => change.path.endsWith("agent-policy.json")).map((change) => JSON.parse(change.after).bridge?.codexPluginSkills ?? []).flat(), applied: options.apply, planned: plan.changes.map((change) => change.path), ...result2, rootAliases: plan.rootAliases ?? [], discovery: plan.discoveryAfter, nativeSkills: plan.nativeSkills.map((entry) => ({ agent: entry.agent, path: entry.path, managed: entry.managed, vendor: entry.vendor, system: entry.system === true, bridge: entry.bridge === true })), requiresNativeRetirement: plan.nativeSkills.some((entry) => !entry.bridge && !entry.system) };
       if (options.json)
@@ -126714,7 +125500,7 @@ function registerAgentIntegration(parent) {
     try {
       if (agents(options.agent).length !== 1)
         throw new Error("A hook invocation requires one agent");
-      const inputBytes = readFileSync50(0), inputText = inputBytes.toString("utf8");
+      const inputBytes = readFileSync49(0), inputText = inputBytes.toString("utf8");
       if (inputText.length > 1024 * 1024)
         throw new Error("Hook input is too large");
       let input3 = JSON.parse(inputText);
@@ -126727,12 +125513,12 @@ function registerAgentIntegration(parent) {
       input3.hook_event_name = event;
       const projects = [process.cwd()];
       if (input3.cwd !== undefined) {
-        if (typeof input3.cwd !== "string" || !isAbsolute50(input3.cwd) || input3.cwd.includes("\x00"))
+        if (typeof input3.cwd !== "string" || !isAbsolute49(input3.cwd) || input3.cwd.includes("\x00"))
           throw new Error("Invalid native hook working directory");
         projects.push(input3.cwd);
       }
       if (options.agent === "cursor") {
-        if (!Array.isArray(input3.workspace_roots) || input3.workspace_roots.length > 32 || input3.workspace_roots.some((path2) => typeof path2 !== "string" || !isAbsolute50(path2) || path2.includes("\x00")))
+        if (!Array.isArray(input3.workspace_roots) || input3.workspace_roots.length > 32 || input3.workspace_roots.some((path2) => typeof path2 !== "string" || !isAbsolute49(path2) || path2.includes("\x00")))
           throw new Error("Invalid Cursor workspace roots");
         projects.push(...input3.workspace_roots);
         input3.cwd ??= input3.workspace_roots[0] ?? process.cwd();
@@ -126880,7 +125666,7 @@ ${driftWarning}` : unavailable2, ...output2 }));
     try {
       if (options.agent && !INTEGRATION_AGENTS.includes(options.agent))
         throw new Error(`Unsupported migration agent: ${options.agent}`);
-      const discoveryInputs = options.discoveryInputs ? JSON.parse(readFileSync50(options.discoveryInputs, "utf8")) : undefined;
+      const discoveryInputs = options.discoveryInputs ? JSON.parse(readFileSync49(options.discoveryInputs, "utf8")) : undefined;
       if (options.targetManifest && (options.includeUnmanaged || options.includeVendor))
         throw new Error("--target-manifest cannot be combined with broad native migration selectors");
       const targetManifest = options.targetManifest ? readNativeMigrationTargetManifest(options.targetManifest) : undefined;
@@ -127075,11 +125861,11 @@ var exports_profiles = {};
 __export(exports_profiles, {
   registerProfiles: () => registerProfiles
 });
-import { closeSync as closeSync35, constants as constants34, fstatSync as fstatSync34, openSync as openSync35, readSync as readSync27, writeFileSync as writeFileSync30 } from "fs";
+import { closeSync as closeSync34, constants as constants34, fstatSync as fstatSync33, openSync as openSync34, readSync as readSync27, writeFileSync as writeFileSync30 } from "fs";
 function readProfileInput(path2) {
-  const fd = openSync35(path2, constants34.O_RDONLY | constants34.O_NONBLOCK);
+  const fd = openSync34(path2, constants34.O_RDONLY | constants34.O_NONBLOCK);
   try {
-    const stat3 = fstatSync34(fd);
+    const stat3 = fstatSync33(fd);
     if (!stat3.isFile() || stat3.size > MAX_PROFILE_DOCUMENT_BYTES)
       throw new Error("Profile input exceeds the size limit or is not a regular file");
     const bytes = Buffer.alloc(MAX_PROFILE_DOCUMENT_BYTES + 1);
@@ -127094,7 +125880,7 @@ function readProfileInput(path2) {
       throw new Error("Profile input exceeds the size limit");
     return new TextDecoder("utf-8", { fatal: true }).decode(bytes.subarray(0, size2));
   } finally {
-    closeSync35(fd);
+    closeSync34(fd);
   }
 }
 function registerProfiles(parent) {
@@ -127509,16 +126295,16 @@ __export(exports_grants, {
 });
 import {
   constants as constants35,
-  closeSync as closeSync36,
-  fstatSync as fstatSync35,
-  openSync as openSync36,
+  closeSync as closeSync35,
+  fstatSync as fstatSync34,
+  openSync as openSync35,
   readSync as readSync28,
   writeFileSync as writeFileSync31
 } from "fs";
 function readInput(path2) {
-  const fd = openSync36(path2, constants35.O_RDONLY | constants35.O_NONBLOCK);
+  const fd = openSync35(path2, constants35.O_RDONLY | constants35.O_NONBLOCK);
   try {
-    const stat3 = fstatSync35(fd);
+    const stat3 = fstatSync34(fd);
     if (!stat3.isFile() || stat3.size > MAX_EXECUTION_GRANT_BYTES)
       throw new Error("Grant input must be a regular file within the policy size limit.");
     const bytes = Buffer.alloc(MAX_EXECUTION_GRANT_BYTES + 1);
@@ -127537,7 +126323,7 @@ function readInput(path2) {
       throw new Error("Grant input must be a JSON document containing a grants array.");
     }
   } finally {
-    closeSync36(fd);
+    closeSync35(fd);
   }
 }
 function registerGrants(parent) {
@@ -127578,23 +126364,23 @@ import {
   copyFileSync as copyFileSync3,
   mkdirSync as mkdirSync33,
   readdirSync as readdirSync30,
-  readFileSync as readFileSync51,
+  readFileSync as readFileSync50,
   statSync as statSync26,
   writeFileSync as writeFileSync32
 } from "fs";
-import { dirname as dirname53, join as join84, resolve as resolve49, sep as sep24 } from "path";
+import { dirname as dirname53, join as join83, resolve as resolve49, sep as sep24 } from "path";
 function fail7(code2, message, detail = []) {
   throw new StationSnapshotError(code2, message, detail);
 }
 function snapshotRootFor(repoRoot, stationId) {
-  return join84(repoRoot, "resources", stationId, "skills");
+  return join83(repoRoot, "resources", stationId, "skills");
 }
 function readSnapshotManifest(repoRoot, stationId) {
   const snapshotRoot = snapshotRootFor(repoRoot, stationId);
-  const manifestPath = join84(snapshotRoot, "sync-manifest.json");
+  const manifestPath = join83(snapshotRoot, "sync-manifest.json");
   let manifest;
   try {
-    manifest = JSON.parse(readFileSync51(manifestPath, "utf8"));
+    manifest = JSON.parse(readFileSync50(manifestPath, "utf8"));
   } catch (error61) {
     fail7("MANIFEST_UNREADABLE", `cannot read snapshot manifest: ${manifestPath}: ${error61.message}`);
   }
@@ -127618,7 +126404,7 @@ function planStationHydration(stationId, repoRoot) {
   const hashMismatches = [];
   const skippedByRule = [];
   for (const agent of SYNC_AGENTS) {
-    const agentRoot = join84(snapshotRoot, "agent-homes", agent);
+    const agentRoot = join83(snapshotRoot, "agent-homes", agent);
     let identEntries;
     try {
       identEntries = readdirSync30(agentRoot, { withFileTypes: true });
@@ -127629,7 +126415,7 @@ function planStationHydration(stationId, repoRoot) {
       if (!identEntry.isDirectory() || identEntry.name.startsWith(".")) {
         continue;
       }
-      const identRoot = join84(agentRoot, identEntry.name);
+      const identRoot = join83(agentRoot, identEntry.name);
       const entries = walkEntries(identRoot);
       for (const entry of entries) {
         const relativeParts = [identEntry.name, ...entry.relativePath.split(sep24)];
@@ -127730,7 +126516,7 @@ function planStationHydration(stationId, repoRoot) {
         for (const copy of copies) {
           let isStub = false;
           try {
-            isStub = isPointerSkillMd(readFileSync51(copy.fullPath, "utf8"));
+            isStub = isPointerSkillMd(readFileSync50(copy.fullPath, "utf8"));
           } catch {
             isStub = false;
           }
@@ -127814,7 +126600,7 @@ function writeStationHydration(options) {
   const toWrite = [];
   for (const skill of plan.winners) {
     for (const file2 of skill.files) {
-      const destination = join84(cacheRoot, skill.ident, file2.withinIdent);
+      const destination = join83(cacheRoot, skill.ident, file2.withinIdent);
       const digest7 = sha256File(file2.winner.fullPath);
       let existingDigest = null;
       try {
@@ -127856,7 +126642,7 @@ function writeStationHydration(options) {
     },
     skills: resultSkills
   };
-  const hydrationManifestPath = join84(dirname53(cacheRoot), `hydration-${options.stationId}.json`);
+  const hydrationManifestPath = join83(dirname53(cacheRoot), `hydration-${options.stationId}.json`);
   mkdirSync33(dirname53(hydrationManifestPath), { recursive: true });
   writeFileSync32(hydrationManifestPath, `${JSON.stringify(hydration, null, 2)}
 `);
@@ -127934,14 +126720,14 @@ var init_hydrate = __esm(() => {
 
 // src/lib/prepare-skill.ts
 import { createHash as createHash55, randomUUID as randomUUID17 } from "crypto";
-import { chmodSync as chmodSync5, existsSync as existsSync37, lstatSync as lstatSync54, mkdirSync as mkdirSync34, mkdtempSync as mkdtempSync7, readFileSync as readFileSync52, readdirSync as readdirSync31, renameSync as renameSync18, rmSync as rmSync10, writeFileSync as writeFileSync33 } from "fs";
+import { chmodSync as chmodSync5, existsSync as existsSync37, lstatSync as lstatSync54, mkdirSync as mkdirSync34, mkdtempSync as mkdtempSync7, readFileSync as readFileSync51, readdirSync as readdirSync31, renameSync as renameSync18, rmSync as rmSync10, writeFileSync as writeFileSync33 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
-import { dirname as dirname54, isAbsolute as isAbsolute51, join as join85, relative as relative17, resolve as resolve50, sep as sep25 } from "path";
+import { dirname as dirname54, isAbsolute as isAbsolute50, join as join84, relative as relative17, resolve as resolve50, sep as sep25 } from "path";
 function prepareSkill(name, options) {
   const normalized2 = normalizePortableSkillName(name);
   if (!new RegExp(SEMVER_PATTERN).test(options.version))
     throw new Error("--version must be a semantic version, for example 0.2.0.");
-  const path2 = join85(getPortableSkillsRootReadOnly(options), normalized2);
+  const path2 = join84(getPortableSkillsRootReadOnly(options), normalized2);
   assertPortableAuthoringPath(path2, options);
   const before2 = snapshot2(path2);
   const manifestFile = before2.files.find((file2) => file2.path === "skill.json");
@@ -127976,16 +126762,16 @@ function prepareSkill(name, options) {
     throw new Error("skill.json provenance must be an object.");
   const provenance = manifest.provenance;
   const candidate2 = { ...manifest, version: options.version, kind, provenance: { ...provenance } };
-  const staging = mkdtempSync7(join85(tmpdir2(), "skills-prepare-"));
+  const staging = mkdtempSync7(join84(tmpdir2(), "skills-prepare-"));
   try {
     for (const directory3 of before2.directories)
-      mkdirSync34(join85(staging, directory3), { recursive: true });
+      mkdirSync34(join84(staging, directory3), { recursive: true });
     for (const file2 of before2.files) {
-      const destination = join85(staging, file2.path);
+      const destination = join84(staging, file2.path);
       mkdirSync34(dirname54(destination), { recursive: true });
       writeFileSync33(destination, file2.bytes, { mode: file2.mode });
     }
-    const stagedManifest = join85(staging, "skill.json");
+    const stagedManifest = join84(staging, "skill.json");
     writeFileSync33(stagedManifest, `${JSON.stringify(candidate2, null, 2)}
 `);
     const contentHash = computeContentHash(staging);
@@ -128008,11 +126794,11 @@ ${validation.issues.map((issue2) => `${issue2.code}: ${issue2.message}`).join(`
     if (snapshot2(path2).identity !== before2.identity)
       throw new Error("Skill changed during preparation; review the draft and run prepare again.");
     if (changed3 && !options.dryRun) {
-      const temporary = join85(path2, `.skill-prepare-${randomUUID17()}.tmp`);
+      const temporary = join84(path2, `.skill-prepare-${randomUUID17()}.tmp`);
       try {
         writeFileSync33(temporary, candidateBytes, { flag: "wx", mode: manifestFile.mode });
         chmodSync5(temporary, manifestFile.mode);
-        renameSync18(temporary, join85(path2, "skill.json"));
+        renameSync18(temporary, join84(path2, "skill.json"));
       } finally {
         rmSync10(temporary, { force: true });
       }
@@ -128043,7 +126829,7 @@ function validateRuntimeEntrypoint(candidate2, root2) {
   if (typeof entry !== "string")
     return;
   const target = resolve50(root2, entry), rel = relative17(root2, target);
-  if (isAbsolute51(entry) || /^[a-zA-Z]:/.test(entry) || entry.includes("\\") || !rel || rel === ".." || rel.startsWith(`..${sep25}`) || isAbsolute51(rel) || !existsSync37(target) || !lstatSync54(target).isFile()) {
+  if (isAbsolute50(entry) || /^[a-zA-Z]:/.test(entry) || entry.includes("\\") || !rel || rel === ".." || rel.startsWith(`..${sep25}`) || isAbsolute50(rel) || !existsSync37(target) || !lstatSync54(target).isFile()) {
     throw new Error("Executable runtime.entrypoint must name an existing regular file inside the skill directory.");
   }
 }
@@ -128135,13 +126921,13 @@ function snapshot2(root2) {
   const hash8 = createHash55("sha256").update(`${rootStat.dev}:${rootStat.ino}\x00`);
   let count = 0, bytes = 0;
   const walk2 = (relative18) => {
-    for (const name of readdirSync31(join85(root2, relative18)).sort()) {
+    for (const name of readdirSync31(join84(root2, relative18)).sort()) {
       if (IGNORED.has(name.toLowerCase()) || !relative18 && ROOT_IGNORED.has(name.toLowerCase()))
         continue;
       const path2 = relative18 ? `${relative18}/${name}` : name;
       if (++count > 20000)
         throw new Error("Skill exceeds the preparation entry limit (20000).");
-      const absolute = join85(root2, path2), stat3 = lstatSync54(absolute);
+      const absolute = join84(root2, path2), stat3 = lstatSync54(absolute);
       if (stat3.isSymbolicLink())
         throw new Error(`Skill contains a symlink: ${path2}. No files were changed.`);
       if (stat3.isDirectory() && name === "node_modules")
@@ -128154,7 +126940,7 @@ function snapshot2(root2) {
         bytes += stat3.size;
         if (bytes > 50000000)
           throw new Error("Skill exceeds the preparation size limit (50000000 bytes).");
-        const content = readFileSync52(absolute);
+        const content = readFileSync51(absolute);
         if (content.length !== stat3.size)
           throw new Error("Skill changed during preparation.");
         files.push({ path: path2, bytes: content, mode: stat3.mode & 511 });
@@ -128320,11 +127106,11 @@ var exports_metadata = {};
 __export(exports_metadata, {
   registerMetadata: () => registerMetadata
 });
-import { closeSync as closeSync37, constants as constants36, fstatSync as fstatSync36, openSync as openSync37, readFileSync as readFileSync53, readSync as readSync29, writeFileSync as writeFileSync34 } from "fs";
+import { closeSync as closeSync36, constants as constants36, fstatSync as fstatSync35, openSync as openSync36, readFileSync as readFileSync52, readSync as readSync29, writeFileSync as writeFileSync34 } from "fs";
 function readPlan(path2) {
-  const fd = openSync37(path2, constants36.O_RDONLY | constants36.O_NONBLOCK | constants36.O_NOFOLLOW);
+  const fd = openSync36(path2, constants36.O_RDONLY | constants36.O_NONBLOCK | constants36.O_NOFOLLOW);
   try {
-    const stat3 = fstatSync36(fd);
+    const stat3 = fstatSync35(fd);
     if (!stat3.isFile() || stat3.size > 8 * 1024 * 1024)
       throw new SkillMetadataUpdateError("INVALID_METADATA_PLAN");
     const bytes = Buffer.alloc(stat3.size + 1);
@@ -128339,7 +127125,7 @@ function readPlan(path2) {
       throw new SkillMetadataUpdateError("INVALID_METADATA_PLAN");
     return metadataPlan(JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes.subarray(0, size2))));
   } finally {
-    closeSync37(fd);
+    closeSync36(fd);
   }
 }
 function failure(error61) {
@@ -128360,7 +127146,7 @@ function registerMetadata(parent) {
       const bytes = `${JSON.stringify(plan)}
 `;
       writeFileSync34(options.save, bytes, { mode: 384, flag: "wx" });
-      if (readFileSync53(options.save, "utf8") !== bytes)
+      if (readFileSync52(options.save, "utf8") !== bytes)
         throw new SkillMetadataUpdateError("INVALID_METADATA_PLAN");
       await writeCliOutput(JSON.stringify(metadataPlanSummary(plan), null, 2));
     } catch (error61) {
@@ -128705,8 +127491,8 @@ var init_registry_sync = __esm(() => {
 });
 
 // src/lib/review-export.ts
-import { constants as constants37, closeSync as closeSync38, existsSync as existsSync38, fstatSync as fstatSync37, fsyncSync as fsyncSync12, lstatSync as lstatSync55, openSync as openSync38, realpathSync as realpathSync26, statSync as statSync27, writeFileSync as writeFileSync36 } from "fs";
-import { basename as basename28, dirname as dirname56, isAbsolute as isAbsolute52, join as join86, parse as parse13, resolve as resolve51, sep as sep26 } from "path";
+import { constants as constants37, closeSync as closeSync37, existsSync as existsSync38, fstatSync as fstatSync36, fsyncSync as fsyncSync12, lstatSync as lstatSync55, openSync as openSync37, realpathSync as realpathSync26, statSync as statSync27, writeFileSync as writeFileSync36 } from "fs";
+import { basename as basename28, dirname as dirname56, isAbsolute as isAbsolute51, join as join85, parse as parse13, resolve as resolve51, sep as sep26 } from "path";
 function exactVersion(spec) {
   const at2 = spec.indexOf("@");
   const slug2 = spec.slice(0, at2);
@@ -128717,7 +127503,7 @@ function exactVersion(spec) {
   return { slug: slug2, version: version2 };
 }
 function assertPrivateDestination(output2) {
-  if (!isAbsolute52(output2) || resolve51(output2) !== output2 || !basename28(output2).endsWith(".tar.gz")) {
+  if (!isAbsolute51(output2) || resolve51(output2) !== output2 || !basename28(output2).endsWith(".tar.gz")) {
     throw new Error("Review output must be an absolute, normalized .tar.gz path.");
   }
   const parent = dirname56(output2);
@@ -128733,7 +127519,7 @@ function assertPrivateDestination(output2) {
     throw new Error("Review output cannot be placed in agent-native discovery or Skills installation paths.");
   }
   for (let current = parent;; current = dirname56(current)) {
-    if (existsSync38(join86(current, ".git"))) {
+    if (existsSync38(join85(current, ".git"))) {
       throw new Error("Review output cannot be placed inside a Git worktree.");
     }
     if (current === parse13(current).root)
@@ -128769,16 +127555,16 @@ async function exportSkillVersionForReview(spec, output2, client2) {
   if (bytes.byteLength !== metadata2.bundleByteSize || sha256Hex(bytes) !== metadata2.bundleSha256.toLowerCase()) {
     throw new Error("Published bundle bytes do not match the exact version metadata.");
   }
-  const fd = openSync38(target, constants37.O_WRONLY | constants37.O_CREAT | constants37.O_EXCL | constants37.O_NOFOLLOW, 384);
+  const fd = openSync37(target, constants37.O_WRONLY | constants37.O_CREAT | constants37.O_EXCL | constants37.O_NOFOLLOW, 384);
   try {
     writeFileSync36(fd, bytes);
     fsyncSync12(fd);
-    if (fstatSync37(fd).size !== bytes.byteLength)
+    if (fstatSync36(fd).size !== bytes.byteLength)
       throw new Error("Incomplete review output write.");
   } catch (error61) {
     throw new Error(`Review output write failed. A private partial file may remain at ${target}; use Trash to remove it before reusing this path.`, { cause: error61 });
   } finally {
-    closeSync38(fd);
+    closeSync37(fd);
   }
   return { slug: slug2, version: version2, bundleSha256: metadata2.bundleSha256.toLowerCase(), bundleByteSize: bytes.byteLength, output: target };
 }
@@ -129018,9 +127804,9 @@ __export(exports_publish, {
   PushSkillError: () => PushSkillError
 });
 import { execFileSync as execFileSync3 } from "child_process";
-import { existsSync as existsSync39, readFileSync as readFileSync54 } from "fs";
+import { existsSync as existsSync39, readFileSync as readFileSync53 } from "fs";
 import { hostname as hostname6 } from "os";
-import { join as join87 } from "path";
+import { join as join86 } from "path";
 function registerPublish(parent) {
   parent.command("push").argument("<name>", "Name of a skill in the local corpus (~/.hasna/skills/installed or the migrated ~/.hasna/skills/skills)").option("--version <version>", "Override the version recorded on the instance").option("--force-new-version", "If name@version already exists with different content, publish as the next patch version", false).option("--dry-run", "Pack and validate without uploading", false).option("--json", "Output result as JSON", false).description("Publish a local skill to the configured skills instance").action(async (name, options) => {
     try {
@@ -129072,8 +127858,8 @@ async function pushSkill(name, options = {}) {
   const packed = packSkillBundle(skill.path, { maxUnpackedBytes: MAX_UNPACKED_BYTES });
   await verifyPackedCanonicalHash(skill.name, packed);
   const versionManifest = buildVersionManifest(skill.path, packed);
-  const skillMdPath = join87(skill.path, "SKILL.md");
-  const skillMd = existsSync39(skillMdPath) ? readFileSync54(skillMdPath, "utf-8") : undefined;
+  const skillMdPath = join86(skill.path, "SKILL.md");
+  const skillMd = existsSync39(skillMdPath) ? readFileSync53(skillMdPath, "utf-8") : undefined;
   const base3 = {
     slug: skill.name,
     path: skill.path,
@@ -130892,15 +129678,15 @@ function registerStorage(parent) {
     }
   });
 }
-var init_storage2 = __esm(() => {
+var init_storage = __esm(() => {
   init_source();
   init_native_storage();
   init_home_migration();
 });
 
 // src/lib/registry-reconcile.ts
-import { existsSync as existsSync40, readFileSync as readFileSync55, statSync as statSync28, writeFileSync as writeFileSync37 } from "fs";
-import { join as join88 } from "path";
+import { existsSync as existsSync40, readFileSync as readFileSync54, statSync as statSync28, writeFileSync as writeFileSync37 } from "fs";
+import { join as join87 } from "path";
 function isDirectory2(path2) {
   try {
     return statSync28(path2).isDirectory();
@@ -130911,15 +129697,15 @@ function isDirectory2(path2) {
 function migrationNeeded(options) {
   if (options.rootDir)
     return false;
-  const appDir = options.homeDir ? join88(options.homeDir, ".hasna", "skills") : getDataDir();
-  return !(isOwnerLayoutMigrated(appDir) && isDirectory2(join88(appDir, SKILLS_CACHE_DIRNAME)));
+  const appDir = options.homeDir ? join87(options.homeDir, ".hasna", "skills") : getDataDir();
+  return !(isOwnerLayoutMigrated(appDir) && isDirectory2(join87(appDir, SKILLS_CACHE_DIRNAME)));
 }
 function readBaseline(skillDir) {
-  const markerPath = join88(skillDir, PULL_MARKER_FILE);
+  const markerPath = join87(skillDir, PULL_MARKER_FILE);
   if (!existsSync40(markerPath))
     return;
   try {
-    const marker = JSON.parse(readFileSync55(markerPath, "utf-8"));
+    const marker = JSON.parse(readFileSync54(markerPath, "utf-8"));
     if (!isSkillsOwnershipMarker(marker))
       return;
     return {
@@ -130931,11 +129717,11 @@ function readBaseline(skillDir) {
   }
 }
 function readCursor(root2) {
-  const path2 = join88(root2, SYNC_CURSOR_FILE);
+  const path2 = join87(root2, SYNC_CURSOR_FILE);
   if (!existsSync40(path2))
     return { runCount: 0 };
   try {
-    const cursor2 = JSON.parse(readFileSync55(path2, "utf-8"));
+    const cursor2 = JSON.parse(readFileSync54(path2, "utf-8"));
     return { runCount: typeof cursor2.runCount === "number" ? cursor2.runCount : 0 };
   } catch {
     return { runCount: 0 };
@@ -130944,12 +129730,12 @@ function readCursor(root2) {
 function resolveCorpusRootReadOnly(options) {
   if (options.rootDir)
     return { root: options.rootDir, migrationPending: false };
-  const appDir = options.homeDir ? join88(options.homeDir, ".hasna", "skills") : getDataDirReadOnly();
-  const cache3 = join88(appDir, SKILLS_CACHE_DIRNAME);
+  const appDir = options.homeDir ? join87(options.homeDir, ".hasna", "skills") : getDataDirReadOnly();
+  const cache3 = join87(appDir, SKILLS_CACHE_DIRNAME);
   if (isOwnerLayoutMigrated(appDir) && isDirectory2(cache3)) {
     return { root: cache3, migrationPending: false };
   }
-  return { root: join88(appDir, INSTALLED_SKILLS_DIRNAME), migrationPending: true };
+  return { root: join87(appDir, INSTALLED_SKILLS_DIRNAME), migrationPending: true };
 }
 function remoteRowToSkill(record14) {
   const slug2 = typeof record14.slug === "string" ? record14.slug : typeof record14.name === "string" ? record14.name : undefined;
@@ -131083,7 +129869,7 @@ async function reconcileRegistry(options = {}) {
   for (const slug2 of allSlugs) {
     const local = locals.get(slug2);
     const remote = remotes.get(slug2);
-    const baseline = local ? readBaseline(join88(root2, slug2)) : undefined;
+    const baseline = local ? readBaseline(join87(root2, slug2)) : undefined;
     const { state, reason: reason2 } = classifySkill(local, remote, baseline);
     let { action, reason: actionReason } = resolveAction(state, direction, conflict);
     if (state === "remote-only" && isDigestless(remote)) {
@@ -131142,7 +129928,7 @@ async function reconcileRegistry(options = {}) {
       try {
         await pushSkill(slug2, { rootDir: root2, client: client2 });
         const pushed = locals.get(slug2);
-        writePullMarker(join88(root2, slug2), {
+        writePullMarker(join87(root2, slug2), {
           skill: slug2,
           ...pushed?.version ? { version: pushed.version } : {},
           ...pushed?.sha256 ? { contentHash: pushed.sha256 } : {},
@@ -131214,7 +130000,7 @@ async function reconcileRegistry(options = {}) {
         runCount: readCursor(root2).runCount + 1,
         summary
       };
-      writeFileSync37(join88(root2, SYNC_CURSOR_FILE), `${JSON.stringify(cursor2, null, 2)}
+      writeFileSync37(join87(root2, SYNC_CURSOR_FILE), `${JSON.stringify(cursor2, null, 2)}
 `);
       return {
         corpusRoot: root2,
@@ -139550,7 +138336,7 @@ var { registerCustomerProfileCommands: registerCustomerProfileCommands2 } = awai
 registerCustomerProfileCommands2(program2);
 var { registerFeedback: registerFeedback2 } = await Promise.resolve().then(() => (init_feedback2(), exports_feedback));
 registerFeedback2(program2);
-var { registerStorage: registerStorage2 } = await Promise.resolve().then(() => (init_storage2(), exports_storage));
+var { registerStorage: registerStorage2 } = await Promise.resolve().then(() => (init_storage(), exports_storage));
 registerStorage2(program2);
 var { registerRegistryReconcile: registerRegistryReconcile2 } = await Promise.resolve().then(() => (init_registry_reconcile2(), exports_registry_reconcile));
 registerRegistryReconcile2(program2);