@hasna/skills 0.5.4 → 0.5.5

package/bin/server.js

@@ -20,14 +20,12 @@ var __toESM = (mod, isNodeMode, target) => {
   }
   target = mod != null ? __create(__getProtoOf(mod)) : {};
   const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
-  if (mod && typeof mod === "object" || typeof mod === "function") {
-    for (let key of __getOwnPropNames(mod))
-      if (!__hasOwnProp.call(to, key))
-        __defProp(to, key, {
-          get: __accessProp.bind(mod, key),
-          enumerable: true
-        });
-  }
+  for (let key of __getOwnPropNames(mod))
+    if (!__hasOwnProp.call(to, key))
+      __defProp(to, key, {
+        get: __accessProp.bind(mod, key),
+        enumerable: true
+      });
   if (canCache)
     cache.set(mod, to);
   return to;
@@ -50,7 +48,7 @@ var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = import.meta.require;
 
 // ../../node_modules/.bun/@smithy+types@4.18.0/node_modules/@smithy/types/dist-cjs/index.js
-var require_dist_cjs = __commonJS(function(exports) {
+var require_dist_cjs = __commonJS((exports) => {
   var HttpAuthLocation;
   (function(HttpAuthLocation2) {
     HttpAuthLocation2["HEADER"] = "header";
@@ -141,7 +139,7 @@ var require_dist_cjs = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/transport/index.js
-var require_transport = __commonJS(function(exports) {
+var require_transport = __commonJS((exports) => {
   var { SMITHY_CONTEXT_KEY } = require_dist_cjs();
   var getSmithyContext = (context) => context[SMITHY_CONTEXT_KEY] || (context[SMITHY_CONTEXT_KEY] = {});
   function hasOwn(o, k) {
@@ -314,7 +312,7 @@ var require_transport = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/schema/index.js
-var require_schema = __commonJS(function(exports) {
+var require_schema = __commonJS((exports) => {
   var { getSmithyContext, HttpResponse, toEndpointV1 } = require_transport();
   var deref = (schemaRef) => {
     if (typeof schemaRef === "function") {
@@ -983,7 +981,7 @@ var require_schema = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/client/index.js
-var require_client = __commonJS(function(exports) {
+var require_client = __commonJS((exports) => {
   var { hasOwn } = require_transport();
   var { getSmithyContext, normalizeProvider } = require_transport();
   exports.getSmithyContext = getSmithyContext;
@@ -2063,7 +2061,7 @@ var require_client = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/config/index.js
-var require_config = __commonJS(function(exports) {
+var require_config = __commonJS((exports) => {
   var { homedir } = __require("os");
   var { sep, join: join2 } = __require("path");
   var { createHash: createHash2 } = __require("crypto");
@@ -2758,7 +2756,7 @@ var require_config = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/endpoints/index.js
-var require_endpoints = __commonJS(function(exports) {
+var require_endpoints = __commonJS((exports) => {
   var { CONFIG_PREFIX_SEPARATOR, booleanSelector, SelectorType, loadConfig } = require_config();
   var { toEndpointV1, getSmithyContext, normalizeProvider, isValidHostLabel, hasOwn } = require_transport();
   exports.isValidHostLabel = isValidHostLabel;
@@ -3572,7 +3570,7 @@ var require_endpoints = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/serde/index.js
-var require_serde = __commonJS(function(exports) {
+var require_serde = __commonJS((exports) => {
   var { createHmac: createHmac2, createHash: createHash2, getRandomValues } = __require("crypto");
   var { hasOwn, HttpResponse } = require_transport();
   exports.hasOwn = hasOwn;
@@ -5213,7 +5211,7 @@ ${value}\r
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/checksum/index.js
-var require_checksum = __commonJS(function(exports) {
+var require_checksum = __commonJS((exports) => {
   var { createReadStream } = __require("fs");
   var { Writable } = __require("stream");
   var { toUint8Array, concatBytes } = require_serde();
@@ -5829,7 +5827,7 @@ var require_checksum = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/event-streams/index.js
-var require_event_streams = __commonJS(function(exports) {
+var require_event_streams = __commonJS((exports) => {
   var { Crc32 } = require_checksum();
   var { hasOwn } = require_transport();
   var { toHex, fromHex, toUtf8, fromUtf8 } = require_serde();
@@ -6721,7 +6719,7 @@ var require_event_streams = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/protocols/index.js
-var require_protocols = __commonJS(function(exports) {
+var require_protocols = __commonJS((exports) => {
   var { Uint8ArrayBlobAdapter, sdkStreamMixin, splitEvery, splitHeader, fromBase64, _parseEpochTimestamp, _parseRfc7231DateTime, _parseRfc3339DateTimeWithOffset, LazyJsonString, NumericValue, toUtf8, fromUtf8, generateIdempotencyToken, toBase64, dateToUtcString, quoteHeader } = require_serde();
   var { HttpRequest, HttpResponse, hasOwn, isValidHostname } = require_transport();
   var { parseQueryString, parseUrl } = require_transport();
@@ -7725,7 +7723,7 @@ var require_protocols = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/retry/index.js
-var require_retry = __commonJS(function(exports) {
+var require_retry = __commonJS((exports) => {
   var { Readable } = __require("stream");
   var { NoOpLogger, normalizeProvider } = require_client();
   var { HttpResponse, HttpRequest } = require_protocols();
@@ -8525,7 +8523,7 @@ var require_retry = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@aws+lambda-invoke-store@0.3.0/node_modules/@aws/lambda-invoke-store/dist-cjs/invoke-store.js
-var require_invoke_store = __commonJS(function(exports) {
+var require_invoke_store = __commonJS((exports) => {
   var PROTECTED_KEYS = {
     REQUEST_ID: Symbol.for("_AWS_LAMBDA_REQUEST_ID"),
     X_RAY_TRACE_ID: Symbol.for("_AWS_LAMBDA_X_RAY_TRACE_ID"),
@@ -8654,7 +8652,7 @@ var require_invoke_store = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/index.js
-var require_dist_cjs2 = __commonJS(function(exports) {
+var require_dist_cjs2 = __commonJS((exports) => {
   var { getSmithyContext, hasOwn } = require_transport();
   exports.getSmithyContext = getSmithyContext;
   var { HttpRequest } = require_protocols();
@@ -8982,7 +8980,7 @@ var require_dist_cjs2 = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/bowser@2.14.1/node_modules/bowser/es5.js
-var require_es5 = __commonJS(function(exports, module) {
+var require_es5 = __commonJS((exports, module) => {
   (function(e, t) {
     typeof exports == "object" && typeof module == "object" ? module.exports = t() : typeof define == "function" && define.amd ? define([], t) : typeof exports == "object" ? exports.bowser = t() : e.bowser = t();
   })(exports, function() {
@@ -9822,7 +9820,7 @@ var require_es5 = __commonJS(function(exports, module) {
 });
 
 // ../../node_modules/.bun/@aws-sdk+core@3.977.9/node_modules/@aws-sdk/core/dist-cjs/submodules/client/index.js
-var require_client2 = __commonJS(function(exports) {
+var require_client2 = __commonJS((exports) => {
   var { Retry, RETRY_MODES } = require_retry();
   var { HttpRequest, parseUrl } = require_protocols();
   var { InvokeStore } = require_invoke_store();
@@ -10760,7 +10758,7 @@ More information can be found at: https://a.co/c895JFp`);
 });
 
 // ../../node_modules/.bun/@aws-sdk+checksums@3.1000.29/node_modules/@aws-sdk/checksums/dist-cjs/submodules/crc/index.js
-var require_crc = __commonJS(function(exports) {
+var require_crc = __commonJS((exports) => {
   var { Crc32, Crc32Js, Crc32Node } = require_checksum();
   exports.Crc32 = Crc32;
   exports.Crc32Js = Crc32Js;
@@ -10917,7 +10915,7 @@ var require_crc = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+signature-v4@5.7.3/node_modules/@smithy/signature-v4/dist-cjs/index.js
-var require_dist_cjs3 = __commonJS(function(exports) {
+var require_dist_cjs3 = __commonJS((exports) => {
   var { hasOwn, fromUtf8, fromHex, toHex, toUint8Array: toUint8Array2, isArrayBuffer: isArrayBuffer2 } = require_serde();
   var { normalizeProvider: normalizeProvider2 } = require_client();
   var { escapeUri, HttpRequest: HttpRequest2 } = require_protocols();
@@ -11469,7 +11467,7 @@ ${toHex(hashedRequest)}`;
 });
 
 // ../../node_modules/.bun/@aws-sdk+signature-v4-multi-region@3.996.46/node_modules/@aws-sdk/signature-v4-multi-region/dist-cjs/index.js
-var require_dist_cjs4 = __commonJS(function(exports) {
+var require_dist_cjs4 = __commonJS((exports) => {
   var { SignatureV4, signatureV4aContainer } = require_dist_cjs3();
   var signatureV4CrtContainer = {
     CrtSignerV4: null
@@ -11601,7 +11599,7 @@ var require_dist_cjs4 = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@aws-sdk+core@3.977.9/node_modules/@aws-sdk/core/dist-cjs/submodules/util/index.js
-var require_util = __commonJS(function(exports) {
+var require_util = __commonJS((exports) => {
   var { buildQueryString } = require_protocols();
   var validate = (str) => typeof str === "string" && str.indexOf("arn:") === 0 && str.split(":").length >= 6;
   var parse = (arn) => {
@@ -11659,7 +11657,7 @@ var require_util = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/cbor/index.js
-var require_cbor = __commonJS(function(exports) {
+var require_cbor = __commonJS((exports) => {
   var { nv, NumericValue, calculateBodyLength, generateIdempotencyToken, fromBase64, _parseEpochTimestamp } = require_serde();
   var { hasOwn, getSmithyContext } = require_transport();
   var { HttpRequest: HttpRequest2, collectBody, SerdeContext, RpcProtocol } = require_protocols();
@@ -14109,7 +14107,7 @@ var require_cbor = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@aws-sdk+xml-builder@3.972.40/node_modules/@aws-sdk/xml-builder/dist-cjs/index.js
-var require_dist_cjs5 = __commonJS(function(exports) {
+var require_dist_cjs5 = __commonJS((exports) => {
   var ATTR_ESCAPE_RE = /[&<>"]/g;
   var ATTR_ESCAPE_MAP = {
     "&": "&amp;",
@@ -14477,7 +14475,7 @@ var require_dist_cjs5 = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@aws-sdk+core@3.977.9/node_modules/@aws-sdk/core/dist-cjs/submodules/protocols/index.js
-var require_protocols2 = __commonJS(function(exports) {
+var require_protocols2 = __commonJS((exports) => {
   var { SmithyRpcV2CborProtocol, loadSmithyRpcV2CborErrorCode } = require_cbor();
   var { TypeRegistry, NormalizedSchema, deref } = require_schema();
   var { decorateServiceException, getValueFromTextNode } = require_client();
@@ -17318,7 +17316,7 @@ var require_protocols2 = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@aws-sdk+core@3.977.9/node_modules/@aws-sdk/core/dist-cjs/submodules/httpAuthSchemes/index.js
-var require_httpAuthSchemes = __commonJS(function(exports) {
+var require_httpAuthSchemes = __commonJS((exports) => {
   var { ProviderError, booleanSelector: booleanSelector2, SelectorType: SelectorType3, loadConfig } = require_config();
   var { setCredentialFeature } = require_client2();
   var { normalizeProvider: normalizeProvider2, memoizeIdentityProvider, isIdentityExpired, doesIdentityRequireRefresh } = require_dist_cjs2();
@@ -17678,13 +17676,13 @@ var init_fromEnv = __esm(() => {
 // ../../node_modules/.bun/@aws-sdk+credential-provider-env@3.972.70/node_modules/@aws-sdk/credential-provider-env/dist-es/index.js
 var exports_dist_es = {};
 __export(exports_dist_es, {
-  ENV_ACCOUNT_ID: () => ENV_ACCOUNT_ID,
-  ENV_CREDENTIAL_SCOPE: () => ENV_CREDENTIAL_SCOPE,
-  ENV_EXPIRATION: () => ENV_EXPIRATION,
-  ENV_KEY: () => ENV_KEY,
-  ENV_SECRET: () => ENV_SECRET,
+  fromEnv: () => fromEnv,
   ENV_SESSION: () => ENV_SESSION,
-  fromEnv: () => fromEnv
+  ENV_SECRET: () => ENV_SECRET,
+  ENV_KEY: () => ENV_KEY,
+  ENV_EXPIRATION: () => ENV_EXPIRATION,
+  ENV_CREDENTIAL_SCOPE: () => ENV_CREDENTIAL_SCOPE,
+  ENV_ACCOUNT_ID: () => ENV_ACCOUNT_ID
 });
 var init_dist_es = __esm(() => {
   init_fromEnv();
@@ -18068,17 +18066,17 @@ var init_fromInstanceMetadata = __esm(() => {
 // ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/index.js
 var exports_dist_es2 = {};
 __export(exports_dist_es2, {
-  DEFAULT_MAX_RETRIES: () => DEFAULT_MAX_RETRIES,
-  DEFAULT_TIMEOUT: () => DEFAULT_TIMEOUT,
-  ENV_CMDS_AUTH_TOKEN: () => ENV_CMDS_AUTH_TOKEN,
-  ENV_CMDS_FULL_URI: () => ENV_CMDS_FULL_URI,
-  ENV_CMDS_RELATIVE_URI: () => ENV_CMDS_RELATIVE_URI,
-  Endpoint: () => Endpoint,
-  fromContainerMetadata: () => fromContainerMetadata,
-  fromInstanceMetadata: () => fromInstanceMetadata,
-  getInstanceMetadataEndpoint: () => getInstanceMetadataEndpoint,
+  providerConfigFromInit: () => providerConfigFromInit,
   httpRequest: () => httpRequest,
-  providerConfigFromInit: () => providerConfigFromInit
+  getInstanceMetadataEndpoint: () => getInstanceMetadataEndpoint,
+  fromInstanceMetadata: () => fromInstanceMetadata,
+  fromContainerMetadata: () => fromContainerMetadata,
+  Endpoint: () => Endpoint,
+  ENV_CMDS_RELATIVE_URI: () => ENV_CMDS_RELATIVE_URI,
+  ENV_CMDS_FULL_URI: () => ENV_CMDS_FULL_URI,
+  ENV_CMDS_AUTH_TOKEN: () => ENV_CMDS_AUTH_TOKEN,
+  DEFAULT_TIMEOUT: () => DEFAULT_TIMEOUT,
+  DEFAULT_MAX_RETRIES: () => DEFAULT_MAX_RETRIES
 });
 var init_dist_es2 = __esm(() => {
   init_fromContainerMetadata();
@@ -18089,7 +18087,7 @@ var init_dist_es2 = __esm(() => {
 });
 
 // ../../node_modules/.bun/@smithy+node-http-handler@4.12.1/node_modules/@smithy/node-http-handler/dist-cjs/index.js
-var require_dist_cjs6 = __commonJS(function(exports) {
+var require_dist_cjs6 = __commonJS((exports) => {
   var { hasOwn } = require_serde();
   var { streamCollector } = require_serde();
   exports.streamCollector = streamCollector;
@@ -19096,7 +19094,7 @@ var init_constants = __esm(() => {
 });
 
 // ../../node_modules/.bun/@aws-sdk+nested-clients@3.997.44/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso-oidc/index.js
-var require_sso_oidc = __commonJS(function(exports) {
+var require_sso_oidc = __commonJS((exports) => {
   var { awsEndpointFunctions: awsEndpointFunctions2, emitWarningIfUnsupportedVersion: emitWarningIfUnsupportedVersion$1, createDefaultUserAgentProvider, NODE_APP_ID_CONFIG_OPTIONS, getAwsRegionExtensionConfiguration, resolveAwsRegionExtensionConfiguration, resolveUserAgentConfig, resolveHostHeaderConfig, getUserAgentPlugin, getHostHeaderPlugin, getLoggerPlugin, getRecursionDetectionPlugin } = require_client2();
   var { NoAuthSigner, getHttpAuthSchemeEndpointRuleSetPlugin, DefaultIdentityProviderConfig, getHttpSigningPlugin } = require_dist_cjs2();
   var { normalizeProvider: normalizeProvider3, getSmithyContext: getSmithyContext3, ServiceException, NoOpLogger: NoOpLogger2, emitWarningIfUnsupportedVersion, loadConfigsForDefaultMode, getDefaultExtensionConfiguration, resolveDefaultRuntimeConfig, Client, makeBuilder: makeBuilder2, createAggregatedClient } = require_client();
@@ -20448,8 +20446,8 @@ var init_sso = __esm(() => {
 // ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.14/node_modules/@aws-sdk/credential-provider-sso/dist-es/loadSso.js
 var exports_loadSso = {};
 __export(exports_loadSso, {
-  GetRoleCredentialsCommand: () => $GetRoleCredentialsCommand,
-  SSOClient: () => $SSOClient
+  SSOClient: () => $SSOClient,
+  GetRoleCredentialsCommand: () => $GetRoleCredentialsCommand
 });
 var init_loadSso = __esm(() => {
   init_sso();
@@ -20642,9 +20640,9 @@ var init_fromSSO = __esm(() => {
 // ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.14/node_modules/@aws-sdk/credential-provider-sso/dist-es/index.js
 var exports_dist_es4 = {};
 __export(exports_dist_es4, {
-  fromSSO: () => fromSSO,
+  validateSsoProfile: () => validateSsoProfile,
   isSsoProfile: () => isSsoProfile,
-  validateSsoProfile: () => validateSsoProfile
+  fromSSO: () => fromSSO
 });
 var init_dist_es5 = __esm(() => {
   init_fromSSO();
@@ -20683,7 +20681,7 @@ var init_resolveCredentialSource = __esm(() => {
 });
 
 // ../../node_modules/.bun/@aws-sdk+nested-clients@3.997.44/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sts/index.js
-var require_sts = __commonJS(function(exports) {
+var require_sts = __commonJS((exports) => {
   var { awsEndpointFunctions: awsEndpointFunctions3, emitWarningIfUnsupportedVersion: emitWarningIfUnsupportedVersion$12, createDefaultUserAgentProvider: createDefaultUserAgentProvider2, NODE_APP_ID_CONFIG_OPTIONS: NODE_APP_ID_CONFIG_OPTIONS2, getAwsRegionExtensionConfiguration: getAwsRegionExtensionConfiguration2, resolveAwsRegionExtensionConfiguration: resolveAwsRegionExtensionConfiguration2, resolveUserAgentConfig: resolveUserAgentConfig2, resolveHostHeaderConfig: resolveHostHeaderConfig2, getUserAgentPlugin: getUserAgentPlugin2, getHostHeaderPlugin: getHostHeaderPlugin2, getLoggerPlugin: getLoggerPlugin2, getRecursionDetectionPlugin: getRecursionDetectionPlugin2, setCredentialFeature: setCredentialFeature5, stsRegionDefaultResolver } = require_client2();
   var { NoAuthSigner: NoAuthSigner2, getHttpAuthSchemeEndpointRuleSetPlugin: getHttpAuthSchemeEndpointRuleSetPlugin2, DefaultIdentityProviderConfig: DefaultIdentityProviderConfig2, getHttpSigningPlugin: getHttpSigningPlugin2 } = require_dist_cjs2();
   var { normalizeProvider: normalizeProvider4, getSmithyContext: getSmithyContext4, ServiceException: ServiceException2, NoOpLogger: NoOpLogger3, emitWarningIfUnsupportedVersion: emitWarningIfUnsupportedVersion2, loadConfigsForDefaultMode: loadConfigsForDefaultMode2, getDefaultExtensionConfiguration: getDefaultExtensionConfiguration2, resolveDefaultRuntimeConfig: resolveDefaultRuntimeConfig2, Client: Client2, makeBuilder: makeBuilder3, createAggregatedClient: createAggregatedClient2 } = require_client();
@@ -21773,7 +21771,7 @@ var init_resolveAssumeRoleCredentials = __esm(() => {
 });
 
 // ../../node_modules/.bun/@aws-sdk+nested-clients@3.997.44/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/signin/index.js
-var require_signin = __commonJS(function(exports) {
+var require_signin = __commonJS((exports) => {
   var { awsEndpointFunctions: awsEndpointFunctions3, emitWarningIfUnsupportedVersion: emitWarningIfUnsupportedVersion$12, createDefaultUserAgentProvider: createDefaultUserAgentProvider2, NODE_APP_ID_CONFIG_OPTIONS: NODE_APP_ID_CONFIG_OPTIONS2, getAwsRegionExtensionConfiguration: getAwsRegionExtensionConfiguration2, resolveAwsRegionExtensionConfiguration: resolveAwsRegionExtensionConfiguration2, resolveUserAgentConfig: resolveUserAgentConfig2, resolveHostHeaderConfig: resolveHostHeaderConfig2, getUserAgentPlugin: getUserAgentPlugin2, getHostHeaderPlugin: getHostHeaderPlugin2, getLoggerPlugin: getLoggerPlugin2, getRecursionDetectionPlugin: getRecursionDetectionPlugin2 } = require_client2();
   var { NoAuthSigner: NoAuthSigner2, getHttpAuthSchemeEndpointRuleSetPlugin: getHttpAuthSchemeEndpointRuleSetPlugin2, DefaultIdentityProviderConfig: DefaultIdentityProviderConfig2, getHttpSigningPlugin: getHttpSigningPlugin2 } = require_dist_cjs2();
   var { normalizeProvider: normalizeProvider4, getSmithyContext: getSmithyContext4, ServiceException: ServiceException2, NoOpLogger: NoOpLogger3, emitWarningIfUnsupportedVersion: emitWarningIfUnsupportedVersion2, loadConfigsForDefaultMode: loadConfigsForDefaultMode2, getDefaultExtensionConfiguration: getDefaultExtensionConfiguration2, resolveDefaultRuntimeConfig: resolveDefaultRuntimeConfig2, Client: Client2, makeBuilder: makeBuilder3, createAggregatedClient: createAggregatedClient2 } = require_client();
@@ -23016,8 +23014,8 @@ var init_fromTokenFile = __esm(() => {
 // ../../node_modules/.bun/@aws-sdk+credential-provider-web-identity@3.972.76/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/index.js
 var exports_dist_es7 = {};
 __export(exports_dist_es7, {
-  fromTokenFile: () => fromTokenFile,
-  fromWebToken: () => fromWebToken
+  fromWebToken: () => fromWebToken,
+  fromTokenFile: () => fromTokenFile
 });
 var init_dist_es8 = __esm(() => {
   init_fromTokenFile();
@@ -23102,7 +23100,7 @@ var init_dist_es9 = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.5.4",
+  version: "0.5.5",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -23234,6 +23232,40 @@ import { createHmac, timingSafeEqual } from "crypto";
 import { createHash } from "crypto";
 import { readFileSync, readdirSync, statSync } from "fs";
 import { join, relative } from "path";
+
+// src/lib/skill-entry-path.ts
+class SkillEntryPaths {
+  files = new Set;
+  directories = new Set;
+  add(path, maxBytes, invalid, limit) {
+    if (path.length > maxBytes)
+      limit();
+    const encoded = new TextEncoder().encode(path);
+    if (encoded.byteLength > maxBytes)
+      limit();
+    if (new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(encoded) !== path)
+      invalid("Invalid UTF-8 entry path");
+    if (!path || /[\\:\x00-\x1f\x7f]/u.test(path))
+      invalid("Unsafe entry path");
+    if (path.split("/").some((segment) => !segment || segment === "." || segment === ".."))
+      invalid("Unsafe entry path segment");
+    const key = path.normalize("NFC").toLowerCase().normalize("NFC");
+    if (this.files.has(key) || this.directories.has(key))
+      invalid("Duplicate or conflicting entry path");
+    const parents = key.split("/");
+    parents.pop();
+    while (parents.length) {
+      const parent = parents.join("/");
+      if (this.files.has(parent))
+        invalid("Conflicting entry file ancestor");
+      this.directories.add(parent);
+      parents.pop();
+    }
+    this.files.add(key);
+  }
+}
+
+// src/lib/skill-bundle.ts
 var BLOCK = 512;
 var ANY_SEGMENT_EXCLUDES = new Set([
   ".git",
@@ -23514,6 +23546,136 @@ var SKILL_BUNDLE_INSPECTION_LIMITS = Object.freeze({
   timeoutMs: 5000
 });
 
+class SkillBundleInspectionError extends Error {
+  code;
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "SkillBundleInspectionError";
+  }
+}
+function invalidBundle(message) {
+  throw new SkillBundleInspectionError("BUNDLE_INVALID", message);
+}
+class BoundedTarReader {
+  limits;
+  check;
+  header = new Uint8Array(BLOCK);
+  headerOffset = 0;
+  pending;
+  bodyOffset = 0;
+  padding = 0;
+  zeroBlocks = 0;
+  entries = [];
+  paths = new SkillEntryPaths;
+  fileBytes = 0;
+  constructor(limits, check) {
+    this.limits = limits;
+    this.check = check;
+  }
+  push(chunk) {
+    let offset = 0;
+    while (offset < chunk.byteLength) {
+      this.check();
+      if (this.pending) {
+        const count = Math.min(this.pending.bytes.byteLength - this.bodyOffset, chunk.byteLength - offset);
+        this.pending.bytes.set(chunk.subarray(offset, offset + count), this.bodyOffset);
+        offset += count;
+        this.bodyOffset += count;
+        if (this.bodyOffset === this.pending.bytes.byteLength) {
+          this.entries.push(this.pending);
+          this.pending = undefined;
+        }
+      } else if (this.padding) {
+        const count = Math.min(this.padding, chunk.byteLength - offset);
+        if (chunk.subarray(offset, offset + count).some((byte) => byte !== 0))
+          invalidBundle("Nonzero tar body padding");
+        offset += count;
+        this.padding -= count;
+      } else {
+        const count = Math.min(BLOCK - this.headerOffset, chunk.byteLength - offset);
+        this.header.set(chunk.subarray(offset, offset + count), this.headerOffset);
+        offset += count;
+        this.headerOffset += count;
+        if (this.headerOffset === BLOCK) {
+          this.readHeader();
+          this.headerOffset = 0;
+        }
+      }
+    }
+  }
+  finish() {
+    this.check();
+    if (this.pending || this.padding || this.headerOffset || this.zeroBlocks < 2)
+      invalidBundle("Truncated tar bundle");
+    return this.entries;
+  }
+  readHeader() {
+    this.check();
+    const h = this.header;
+    if (h.every((byte) => byte === 0)) {
+      this.zeroBlocks++;
+      return;
+    }
+    if (this.zeroBlocks)
+      invalidBundle("Nonzero tar data after terminator");
+    if (this.entries.length >= this.limits.entries)
+      throw new SkillBundleInspectionError("BUNDLE_LIMIT", "Bundle entry limit exceeded");
+    let checksum = 0;
+    for (let i = 0;i < BLOCK; i++)
+      checksum += i >= 148 && i < 156 ? 32 : h[i];
+    if (tarOctal(h.subarray(148, 156)) !== checksum)
+      invalidBundle("Invalid tar header checksum");
+    if (new TextDecoder().decode(h.subarray(257, 265)) !== "ustar\x00" + "00")
+      invalidBundle("Unsupported tar format");
+    if (h[156] !== 48 && h[156] !== 0 || h.subarray(157, 257).some((b) => b !== 0) || h.subarray(345).some((b) => b !== 0))
+      invalidBundle("Unsupported tar entry or path prefix");
+    const mode = tarOctal(h.subarray(100, 108));
+    if (mode > 511)
+      invalidBundle("Unsupported tar permission bits");
+    tarOctal(h.subarray(108, 116));
+    tarOctal(h.subarray(116, 124));
+    tarOctal(h.subarray(136, 148));
+    const size = tarOctal(h.subarray(124, 136));
+    if (size > this.limits.fileBytes || this.fileBytes + size > this.limits.decompressedBytes) {
+      throw new SkillBundleInspectionError("BUNDLE_LIMIT", "Bundle file byte limit exceeded");
+    }
+    const name = h.subarray(0, 100);
+    const end = name.indexOf(0);
+    if (end !== -1 && name.subarray(end).some((b) => b !== 0))
+      invalidBundle("Invalid tar path padding");
+    const raw = end === -1 ? name : name.subarray(0, end);
+    if (raw.byteLength > this.limits.pathBytes)
+      throw new SkillBundleInspectionError("BUNDLE_LIMIT", "Bundle path byte limit exceeded");
+    let path;
+    try {
+      path = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(raw);
+    } catch {
+      return invalidBundle("Invalid UTF-8 bundle path");
+    }
+    this.paths.add(path, this.limits.pathBytes, invalidBundle, () => {
+      throw new SkillBundleInspectionError("BUNDLE_LIMIT", "Bundle path byte limit exceeded");
+    });
+    this.fileBytes += size;
+    this.pending = { path, mode, bytes: new Uint8Array(new ArrayBuffer(size)) };
+    this.bodyOffset = 0;
+    this.padding = (BLOCK - size % BLOCK) % BLOCK;
+    if (!size) {
+      this.entries.push(this.pending);
+      this.pending = undefined;
+    }
+  }
+}
+function tarOctal(field) {
+  const text = new TextDecoder().decode(field);
+  if (!/^[0-7]+[\0 ]*$/.test(text))
+    invalidBundle("Invalid tar octal field");
+  const value = Number.parseInt(text, 8);
+  if (!Number.isSafeInteger(value))
+    invalidBundle("Tar integer is out of range");
+  return value;
+}
+
 // src/lib/skill-bundles.ts
 var SIGNATURE_PREFIX = "hmac-sha256:";
 function signBundleBytes(bytes, key) {
@@ -34310,10 +34472,16 @@ class SqliteSkillsStore {
     const orgId = input.principal.orgId;
     const now = nowIso();
     return this.db.transaction(() => {
-      const previous = this.get("SELECT revision_id, revision_number, bundle_sha256, bundle_byte_size, skill_md, tombstoned_at FROM skills_registry WHERE org_id = ? AND slug = ?", [orgId, input.slug]);
+      const previous = this.get("SELECT revision_id, revision_number, bundle_sha256, bundle_byte_size, skill_md, tombstoned_at, source FROM skills_registry WHERE org_id = ? AND slug = ?", [orgId, input.slug]);
       const previousSha = typeof previous?.bundle_sha256 === "string" ? previous.bundle_sha256 : null;
       const previousRevisionId = typeof previous?.revision_id === "string" && previous.revision_id ? previous.revision_id : null;
       const tombstoned = previous?.tombstoned_at != null;
+      if (input.seedBundledOnly && input.expectedRevisionId && !previous) {
+        throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, null);
+      }
+      if (input.seedBundledOnly && previous && (tombstoned || previous.source !== "bundled")) {
+        throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, previousRevisionId);
+      }
       const carriedSkillMd = typeof input.skillMd === "string" ? input.skillMd : typeof previous?.skill_md === "string" ? previous.skill_md : null;
       if (previous && !tombstoned && input.expectedRevisionId !== previousRevisionId) {
         throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, previousRevisionId);
@@ -34387,8 +34555,9 @@ class SqliteSkillsStore {
            tombstoned_at = NULL,
            tombstone_purge_after = NULL,
            updated_at = excluded.updated_at
-         WHERE skills_registry.tombstoned_at IS NOT NULL
-            OR skills_registry.revision_id = ?
+         WHERE (skills_registry.tombstoned_at IS NOT NULL OR skills_registry.revision_id = ?)
+           AND (? = 0 OR (skills_registry.tombstoned_at IS NULL AND skills_registry.source = 'bundled'
+             AND skills_registry.revision_id = ?))
          RETURNING *`, [
         orgId,
         input.slug,
@@ -34406,6 +34575,8 @@ class SqliteSkillsStore {
         revisionId,
         now,
         now,
+        input.expectedRevisionId ?? NO_REVISION_SENTINEL,
+        input.seedBundledOnly ? 1 : 0,
         input.expectedRevisionId ?? NO_REVISION_SENTINEL
       ]);
       if (!row) {
@@ -36713,6 +36884,12 @@ async function storePublishedSkill(store, artifactStorage, principal, parsed, ex
     principal,
     ...expectedRevisionId ? { expectedRevisionId } : {}
   };
+  if (input.seedBundledOnly && expectedRevisionId && !current) {
+    throw new SkillRevisionConflictError(input.slug, expectedRevisionId, null);
+  }
+  if (input.seedBundledOnly && current && (current.tombstonedAt || current.source !== "bundled")) {
+    throw new SkillRevisionConflictError(input.slug, expectedRevisionId, current.revisionId);
+  }
   if (current && !current.tombstonedAt && expectedRevisionId !== current.revisionId) {
     throw new SkillRevisionConflictError(input.slug, expectedRevisionId, current.revisionId);
   }
@@ -36962,6 +37139,15 @@ async function seedBundledCorpus(options) {
         result.skipped.push(slug);
         continue;
       }
+      const current = await options.store.getSkill(options.principal, slug);
+      if (current) {
+        const previousVersion = current.version ? await options.store.getSkillVersion(options.principal, slug, current.version) : null;
+        const provenance = previousVersion?.manifest.provenance;
+        if (current.tombstonedAt || current.source !== "bundled" || provenance?.seededFrom !== "bundled-corpus" || provenance.seededRevisionId !== current.revisionId) {
+          result.skipped.push(slug);
+          continue;
+        }
+      }
       const dir = getSkillPath(slug);
       if (!existsSync11(dir)) {
         result.skipped.push(slug);
@@ -36971,32 +37157,40 @@ async function seedBundledCorpus(options) {
       const packed = packSkillBundle(dir, { maxUnpackedBytes: 50000000 });
       const skillMdPath = join14(dir, "SKILL.md");
       const skillMd = existsSync11(skillMdPath) ? readFileSync11(skillMdPath, "utf-8") : undefined;
-      const current = await options.store.getSkill(options.principal, slug);
+      const content = {
+        slug,
+        displayName: manifest.displayName ?? skill.displayName ?? slug,
+        description: manifest.description ?? skill.description ?? slug,
+        category: manifest.category ?? skill.category ?? "Development Tools",
+        tags: manifest.tags ?? skill.tags ?? [],
+        source: "bundled",
+        kind: manifest.kind ?? "instruction",
+        version: version2,
+        ...skillMd ? { skillMd } : {},
+        bundleSha256: packed.sha256,
+        bundleByteSize: packed.bytes.byteLength
+      };
       const { record } = await storePublishedSkill(options.store, options.artifactStorage, options.principal, {
         input: {
-          slug,
-          displayName: manifest.displayName ?? skill.displayName ?? slug,
-          description: manifest.description ?? skill.description ?? slug,
-          category: manifest.category ?? skill.category ?? "Development Tools",
-          tags: manifest.tags ?? skill.tags ?? [],
-          source: "bundled",
-          kind: manifest.kind ?? "instruction",
-          version: version2,
-          ...skillMd ? { skillMd } : {},
+          ...content,
+          seedBundledOnly: true,
           bundle: { sha256: packed.sha256, byteSize: packed.bytes.byteLength, contentType: "application/gzip", storageKind: "db" },
           versionManifest: {
             files: packed.paths,
             fileCount: packed.fileCount,
             unpackedByteSize: packed.unpackedByteSize,
             bundleSha256: packed.sha256,
-            provenance: { seededFrom: "bundled-corpus", packageVersion: package_default.version }
+            provenance: { seededFrom: "bundled-corpus", packageVersion: package_default.version, seededRevisionId: revisionIdOfRecord(content) }
           }
         },
         bundleBytes: packed.bytes
       }, current?.revisionId);
       result.seeded.push(`${record.slug}@${version2}`);
     } catch (error) {
-      result.failed.push({ slug, error: error.message });
+      if (error instanceof SkillRevisionConflictError)
+        result.skipped.push(slug);
+      else
+        result.failed.push({ slug, error: error.message });
     }
   }
   log(`skills: bundled corpus seed v${version2}: ${result.seeded.length} seeded, ${result.skipped.length} skipped, ${result.failed.length} failed`);
@@ -37206,6 +37400,12 @@ class MemorySkillsStore {
     const key = skillKey(input.principal.orgId, input.slug);
     const now = nowIso();
     const previous = this.skills.get(key);
+    if (input.seedBundledOnly && input.expectedRevisionId && !previous) {
+      throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, null);
+    }
+    if (input.seedBundledOnly && previous && (previous.tombstonedAt || previous.source !== "bundled")) {
+      throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, previous.revisionId);
+    }
     if (previous && !previous.tombstonedAt && input.expectedRevisionId !== previous.revisionId) {
       throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, previous.revisionId);
     }
@@ -37659,13 +37859,19 @@ class PostgresSkillsStore {
     const orgId = input.principal.orgId;
     return await this.sql.begin(async (tx) => {
       const previousRows = await tx`
-        SELECT revision_id, revision_number, bundle_sha256, bundle_byte_size, skill_md, tombstoned_at
+        SELECT revision_id, revision_number, bundle_sha256, bundle_byte_size, skill_md, tombstoned_at, source
         FROM skills_registry WHERE org_id = ${orgId} AND slug = ${input.slug} LIMIT 1
       `;
       const previous = previousRows[0];
       const previousSha = typeof previous?.bundle_sha256 === "string" ? String(previous.bundle_sha256) : null;
       const previousRevisionId = typeof previous?.revision_id === "string" && previous.revision_id ? String(previous.revision_id) : null;
       const tombstoned = previous?.tombstoned_at != null;
+      if (input.seedBundledOnly && input.expectedRevisionId && !previous) {
+        throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, null);
+      }
+      if (input.seedBundledOnly && previous && (tombstoned || previous.source !== "bundled")) {
+        throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, previousRevisionId);
+      }
       const carriedSkillMd = typeof input.skillMd === "string" ? input.skillMd : typeof previous?.skill_md === "string" ? String(previous.skill_md) : null;
       if (previous && !tombstoned && input.expectedRevisionId !== previousRevisionId) {
         throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, previousRevisionId);
@@ -37706,6 +37912,12 @@ class PostgresSkillsStore {
             body_blob = EXCLUDED.body_blob
         `;
       }
+      if (input.seedBundledOnly) {
+        const seedRows = await tx`SELECT revision_id FROM skills_registry WHERE org_id = ${orgId} AND slug = ${input.slug} FOR UPDATE`;
+        if (input.expectedRevisionId && !seedRows[0]) {
+          throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, null);
+        }
+      }
       const rows = await tx`
         INSERT INTO skills_registry (org_id, slug, display_name, description, category, tags_json, source, kind, version, skill_md,
                                      bundle_sha256, bundle_byte_size, published_by_user_id, revision_id, revision_number, updated_at)
@@ -37734,8 +37946,11 @@ class PostgresSkillsStore {
           tombstoned_at = NULL,
           tombstone_purge_after = NULL,
           updated_at = EXCLUDED.updated_at
-        WHERE skills_registry.tombstoned_at IS NOT NULL
-           OR skills_registry.revision_id = ${input.expectedRevisionId ?? NO_REVISION_SENTINEL2}
+        WHERE (skills_registry.tombstoned_at IS NOT NULL
+           OR skills_registry.revision_id = ${input.expectedRevisionId ?? NO_REVISION_SENTINEL2})
+          AND (NOT ${Boolean(input.seedBundledOnly)} OR
+            (skills_registry.tombstoned_at IS NULL AND skills_registry.source = 'bundled'
+             AND skills_registry.revision_id = ${input.expectedRevisionId ?? NO_REVISION_SENTINEL2}))
         RETURNING *
       `;
       if (!rows[0]) {
@@ -38150,6 +38365,15 @@ async function createSkillsFetchHandler(options = {}) {
   }
   return async function fetch(request) {
     const url = new URL(request.url);
+    const versionedAliases = {
+      "/v1/health": "/health",
+      "/v1/auth/whoami": "/api/auth/whoami"
+    };
+    const alias = versionedAliases[url.pathname] ?? (url.pathname === "/v1" || url.pathname.startsWith("/v1/") ? `/api${url.pathname}` : undefined);
+    if (alias) {
+      url.pathname = alias;
+      request = new Request(url, request);
+    }
     const segments = pathSegments(url.pathname);
     try {
       if (request.method === "GET" && url.pathname === "/health") {