@hasna/skills 0.5.4 → 0.5.5

package/bin/worker.js

@@ -20,14 +20,12 @@ var __toESM = (mod, isNodeMode, target) => {
   }
   target = mod != null ? __create(__getProtoOf(mod)) : {};
   const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
-  if (mod && typeof mod === "object" || typeof mod === "function") {
-    for (let key of __getOwnPropNames(mod))
-      if (!__hasOwnProp.call(to, key))
-        __defProp(to, key, {
-          get: __accessProp.bind(mod, key),
-          enumerable: true
-        });
-  }
+  for (let key of __getOwnPropNames(mod))
+    if (!__hasOwnProp.call(to, key))
+      __defProp(to, key, {
+        get: __accessProp.bind(mod, key),
+        enumerable: true
+      });
   if (canCache)
     cache.set(mod, to);
   return to;
@@ -50,7 +48,7 @@ var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = import.meta.require;
 
 // ../../node_modules/.bun/@smithy+types@4.18.0/node_modules/@smithy/types/dist-cjs/index.js
-var require_dist_cjs = __commonJS(function(exports) {
+var require_dist_cjs = __commonJS((exports) => {
   var HttpAuthLocation;
   (function(HttpAuthLocation2) {
     HttpAuthLocation2["HEADER"] = "header";
@@ -141,7 +139,7 @@ var require_dist_cjs = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/transport/index.js
-var require_transport = __commonJS(function(exports) {
+var require_transport = __commonJS((exports) => {
   var { SMITHY_CONTEXT_KEY } = require_dist_cjs();
   var getSmithyContext = (context) => context[SMITHY_CONTEXT_KEY] || (context[SMITHY_CONTEXT_KEY] = {});
   function hasOwn(o, k) {
@@ -314,7 +312,7 @@ var require_transport = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/schema/index.js
-var require_schema = __commonJS(function(exports) {
+var require_schema = __commonJS((exports) => {
   var { getSmithyContext, HttpResponse, toEndpointV1 } = require_transport();
   var deref = (schemaRef) => {
     if (typeof schemaRef === "function") {
@@ -983,7 +981,7 @@ var require_schema = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/client/index.js
-var require_client = __commonJS(function(exports) {
+var require_client = __commonJS((exports) => {
   var { hasOwn } = require_transport();
   var { getSmithyContext, normalizeProvider } = require_transport();
   exports.getSmithyContext = getSmithyContext;
@@ -2063,7 +2061,7 @@ var require_client = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/config/index.js
-var require_config = __commonJS(function(exports) {
+var require_config = __commonJS((exports) => {
   var { homedir } = __require("os");
   var { sep, join } = __require("path");
   var { createHash } = __require("crypto");
@@ -2758,7 +2756,7 @@ var require_config = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/endpoints/index.js
-var require_endpoints = __commonJS(function(exports) {
+var require_endpoints = __commonJS((exports) => {
   var { CONFIG_PREFIX_SEPARATOR, booleanSelector, SelectorType, loadConfig } = require_config();
   var { toEndpointV1, getSmithyContext, normalizeProvider, isValidHostLabel, hasOwn } = require_transport();
   exports.isValidHostLabel = isValidHostLabel;
@@ -3572,7 +3570,7 @@ var require_endpoints = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/serde/index.js
-var require_serde = __commonJS(function(exports) {
+var require_serde = __commonJS((exports) => {
   var { createHmac, createHash, getRandomValues } = __require("crypto");
   var { hasOwn, HttpResponse } = require_transport();
   exports.hasOwn = hasOwn;
@@ -5213,7 +5211,7 @@ ${value}\r
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/checksum/index.js
-var require_checksum = __commonJS(function(exports) {
+var require_checksum = __commonJS((exports) => {
   var { createReadStream } = __require("fs");
   var { Writable } = __require("stream");
   var { toUint8Array, concatBytes } = require_serde();
@@ -5458,7 +5456,7 @@ var require_checksum = __commonJS(function(exports) {
       }
     };
   }
-  var BLOCK = 64;
+  var BLOCK2 = 64;
   var DIGEST_LENGTH = 32;
   var MAX_HASHABLE_LENGTH = 2 ** 53 - 1;
 
@@ -5478,13 +5476,13 @@ var require_checksum = __commonJS(function(exports) {
         this.inner = new Sha256Js;
         this.outer = new Sha256Js;
         const { inner, outer } = this;
-        const pad = new Uint8Array(BLOCK * 2);
-        for (let i = 0;i < BLOCK; ++i) {
+        const pad = new Uint8Array(BLOCK2 * 2);
+        for (let i = 0;i < BLOCK2; ++i) {
           pad[i] = 54 ^ key[i];
-          pad[i + BLOCK] = 92 ^ key[i];
+          pad[i + BLOCK2] = 92 ^ key[i];
         }
-        inner.update(pad.subarray(0, BLOCK));
-        outer.update(pad.subarray(BLOCK));
+        inner.update(pad.subarray(0, BLOCK2));
+        outer.update(pad.subarray(BLOCK2));
       }
     }
     update(data) {
@@ -5505,7 +5503,7 @@ var require_checksum = __commonJS(function(exports) {
       while (byteLength > 0) {
         this.buffer[this.bufferLength++] = chunk[position++];
         byteLength--;
-        if (this.bufferLength === BLOCK) {
+        if (this.bufferLength === BLOCK2) {
           this.hashBuffer();
           this.bufferLength = 0;
         }
@@ -5537,18 +5535,18 @@ var require_checksum = __commonJS(function(exports) {
       const bitsHashed = this.bytesHashed * 8;
       const bufferView = new DataView(buffer.buffer, buffer.byteOffset, buffer.byteLength);
       bufferView.setUint8(bufferLength++, 128);
-      if ((bufferLength - 1) % BLOCK >= BLOCK - 8) {
-        for (let i = bufferLength;i < BLOCK; ++i) {
+      if ((bufferLength - 1) % BLOCK2 >= BLOCK2 - 8) {
+        for (let i = bufferLength;i < BLOCK2; ++i) {
           bufferView.setUint8(i, 0);
         }
         this.hashBufferWith(state, buffer);
         bufferLength = 0;
       }
-      for (let i = bufferLength;i < BLOCK - 8; ++i) {
+      for (let i = bufferLength;i < BLOCK2 - 8; ++i) {
         bufferView.setUint8(i, 0);
       }
-      bufferView.setUint32(BLOCK - 8, Math.floor(bitsHashed / 4294967296), false);
-      bufferView.setUint32(BLOCK - 4, bitsHashed, false);
+      bufferView.setUint32(BLOCK2 - 8, Math.floor(bitsHashed / 4294967296), false);
+      bufferView.setUint32(BLOCK2 - 4, bitsHashed, false);
       this.hashBufferWith(state, buffer);
       const out = new Uint8Array(DIGEST_LENGTH);
       for (let i = 0;i < 8; ++i) {
@@ -5561,16 +5559,16 @@ var require_checksum = __commonJS(function(exports) {
     }
     static normalizeKey(secret) {
       const key = toUint8Array(secret);
-      if (key.byteLength > BLOCK) {
+      if (key.byteLength > BLOCK2) {
         const h = new Sha256Js;
         h.update(key);
         const out = h.digestSync();
-        const padded = new Uint8Array(BLOCK);
+        const padded = new Uint8Array(BLOCK2);
         padded.set(out);
         return padded;
       }
-      if (key.byteLength < BLOCK) {
-        const padded = new Uint8Array(BLOCK);
+      if (key.byteLength < BLOCK2) {
+        const padded = new Uint8Array(BLOCK2);
         padded.set(key);
         return padded;
       }
@@ -5582,7 +5580,7 @@ var require_checksum = __commonJS(function(exports) {
     hashBufferWith(state, buffer) {
       const w = this.w ??= new Int32Array(64);
       let s0 = state[0], s1 = state[1], s2 = state[2], s3 = state[3], s4 = state[4], s5 = state[5], s6 = state[6], s7 = state[7];
-      for (let i = 0;i < BLOCK; ++i) {
+      for (let i = 0;i < BLOCK2; ++i) {
         if (i < 16) {
           w[i] = (buffer[i * 4] & 255) << 24 | (buffer[i * 4 + 1] & 255) << 16 | (buffer[i * 4 + 2] & 255) << 8 | buffer[i * 4 + 3] & 255;
         } else {
@@ -5829,7 +5827,7 @@ var require_checksum = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/event-streams/index.js
-var require_event_streams = __commonJS(function(exports) {
+var require_event_streams = __commonJS((exports) => {
   var { Crc32 } = require_checksum();
   var { hasOwn } = require_transport();
   var { toHex, fromHex, toUtf8, fromUtf8 } = require_serde();
@@ -6721,7 +6719,7 @@ var require_event_streams = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/protocols/index.js
-var require_protocols = __commonJS(function(exports) {
+var require_protocols = __commonJS((exports) => {
   var { Uint8ArrayBlobAdapter, sdkStreamMixin, splitEvery, splitHeader, fromBase64, _parseEpochTimestamp, _parseRfc7231DateTime, _parseRfc3339DateTimeWithOffset, LazyJsonString, NumericValue, toUtf8, fromUtf8, generateIdempotencyToken, toBase64, dateToUtcString, quoteHeader } = require_serde();
   var { HttpRequest, HttpResponse, hasOwn, isValidHostname } = require_transport();
   var { parseQueryString, parseUrl } = require_transport();
@@ -7725,7 +7723,7 @@ var require_protocols = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/retry/index.js
-var require_retry = __commonJS(function(exports) {
+var require_retry = __commonJS((exports) => {
   var { Readable } = __require("stream");
   var { NoOpLogger, normalizeProvider } = require_client();
   var { HttpResponse, HttpRequest } = require_protocols();
@@ -8525,7 +8523,7 @@ var require_retry = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@aws+lambda-invoke-store@0.3.0/node_modules/@aws/lambda-invoke-store/dist-cjs/invoke-store.js
-var require_invoke_store = __commonJS(function(exports) {
+var require_invoke_store = __commonJS((exports) => {
   var PROTECTED_KEYS = {
     REQUEST_ID: Symbol.for("_AWS_LAMBDA_REQUEST_ID"),
     X_RAY_TRACE_ID: Symbol.for("_AWS_LAMBDA_X_RAY_TRACE_ID"),
@@ -8654,7 +8652,7 @@ var require_invoke_store = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/index.js
-var require_dist_cjs2 = __commonJS(function(exports) {
+var require_dist_cjs2 = __commonJS((exports) => {
   var { getSmithyContext, hasOwn } = require_transport();
   exports.getSmithyContext = getSmithyContext;
   var { HttpRequest } = require_protocols();
@@ -8982,7 +8980,7 @@ var require_dist_cjs2 = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/bowser@2.14.1/node_modules/bowser/es5.js
-var require_es5 = __commonJS(function(exports, module) {
+var require_es5 = __commonJS((exports, module) => {
   (function(e, t) {
     typeof exports == "object" && typeof module == "object" ? module.exports = t() : typeof define == "function" && define.amd ? define([], t) : typeof exports == "object" ? exports.bowser = t() : e.bowser = t();
   })(exports, function() {
@@ -9822,7 +9820,7 @@ var require_es5 = __commonJS(function(exports, module) {
 });
 
 // ../../node_modules/.bun/@aws-sdk+core@3.977.9/node_modules/@aws-sdk/core/dist-cjs/submodules/client/index.js
-var require_client2 = __commonJS(function(exports) {
+var require_client2 = __commonJS((exports) => {
   var { Retry, RETRY_MODES } = require_retry();
   var { HttpRequest, parseUrl } = require_protocols();
   var { InvokeStore } = require_invoke_store();
@@ -10760,7 +10758,7 @@ More information can be found at: https://a.co/c895JFp`);
 });
 
 // ../../node_modules/.bun/@aws-sdk+checksums@3.1000.29/node_modules/@aws-sdk/checksums/dist-cjs/submodules/crc/index.js
-var require_crc = __commonJS(function(exports) {
+var require_crc = __commonJS((exports) => {
   var { Crc32, Crc32Js, Crc32Node } = require_checksum();
   exports.Crc32 = Crc32;
   exports.Crc32Js = Crc32Js;
@@ -10917,7 +10915,7 @@ var require_crc = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+signature-v4@5.7.3/node_modules/@smithy/signature-v4/dist-cjs/index.js
-var require_dist_cjs3 = __commonJS(function(exports) {
+var require_dist_cjs3 = __commonJS((exports) => {
   var { hasOwn, fromUtf8, fromHex, toHex, toUint8Array: toUint8Array2, isArrayBuffer: isArrayBuffer2 } = require_serde();
   var { normalizeProvider: normalizeProvider2 } = require_client();
   var { escapeUri, HttpRequest: HttpRequest2 } = require_protocols();
@@ -11469,7 +11467,7 @@ ${toHex(hashedRequest)}`;
 });
 
 // ../../node_modules/.bun/@aws-sdk+signature-v4-multi-region@3.996.46/node_modules/@aws-sdk/signature-v4-multi-region/dist-cjs/index.js
-var require_dist_cjs4 = __commonJS(function(exports) {
+var require_dist_cjs4 = __commonJS((exports) => {
   var { SignatureV4, signatureV4aContainer } = require_dist_cjs3();
   var signatureV4CrtContainer = {
     CrtSignerV4: null
@@ -11601,7 +11599,7 @@ var require_dist_cjs4 = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@aws-sdk+core@3.977.9/node_modules/@aws-sdk/core/dist-cjs/submodules/util/index.js
-var require_util = __commonJS(function(exports) {
+var require_util = __commonJS((exports) => {
   var { buildQueryString } = require_protocols();
   var validate = (str) => typeof str === "string" && str.indexOf("arn:") === 0 && str.split(":").length >= 6;
   var parse = (arn) => {
@@ -11659,7 +11657,7 @@ var require_util = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@smithy+core@3.33.3/node_modules/@smithy/core/dist-cjs/submodules/cbor/index.js
-var require_cbor = __commonJS(function(exports) {
+var require_cbor = __commonJS((exports) => {
   var { nv, NumericValue, calculateBodyLength, generateIdempotencyToken, fromBase64, _parseEpochTimestamp } = require_serde();
   var { hasOwn, getSmithyContext } = require_transport();
   var { HttpRequest: HttpRequest2, collectBody, SerdeContext, RpcProtocol } = require_protocols();
@@ -14109,7 +14107,7 @@ var require_cbor = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@aws-sdk+xml-builder@3.972.40/node_modules/@aws-sdk/xml-builder/dist-cjs/index.js
-var require_dist_cjs5 = __commonJS(function(exports) {
+var require_dist_cjs5 = __commonJS((exports) => {
   var ATTR_ESCAPE_RE = /[&<>"]/g;
   var ATTR_ESCAPE_MAP = {
     "&": "&amp;",
@@ -14477,7 +14475,7 @@ var require_dist_cjs5 = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@aws-sdk+core@3.977.9/node_modules/@aws-sdk/core/dist-cjs/submodules/protocols/index.js
-var require_protocols2 = __commonJS(function(exports) {
+var require_protocols2 = __commonJS((exports) => {
   var { SmithyRpcV2CborProtocol, loadSmithyRpcV2CborErrorCode } = require_cbor();
   var { TypeRegistry, NormalizedSchema, deref } = require_schema();
   var { decorateServiceException, getValueFromTextNode } = require_client();
@@ -17318,7 +17316,7 @@ var require_protocols2 = __commonJS(function(exports) {
 });
 
 // ../../node_modules/.bun/@aws-sdk+core@3.977.9/node_modules/@aws-sdk/core/dist-cjs/submodules/httpAuthSchemes/index.js
-var require_httpAuthSchemes = __commonJS(function(exports) {
+var require_httpAuthSchemes = __commonJS((exports) => {
   var { ProviderError, booleanSelector: booleanSelector2, SelectorType: SelectorType3, loadConfig } = require_config();
   var { setCredentialFeature } = require_client2();
   var { normalizeProvider: normalizeProvider2, memoizeIdentityProvider, isIdentityExpired, doesIdentityRequireRefresh } = require_dist_cjs2();
@@ -17678,13 +17676,13 @@ var init_fromEnv = __esm(() => {
 // ../../node_modules/.bun/@aws-sdk+credential-provider-env@3.972.70/node_modules/@aws-sdk/credential-provider-env/dist-es/index.js
 var exports_dist_es = {};
 __export(exports_dist_es, {
-  ENV_ACCOUNT_ID: () => ENV_ACCOUNT_ID,
-  ENV_CREDENTIAL_SCOPE: () => ENV_CREDENTIAL_SCOPE,
-  ENV_EXPIRATION: () => ENV_EXPIRATION,
-  ENV_KEY: () => ENV_KEY,
-  ENV_SECRET: () => ENV_SECRET,
+  fromEnv: () => fromEnv,
   ENV_SESSION: () => ENV_SESSION,
-  fromEnv: () => fromEnv
+  ENV_SECRET: () => ENV_SECRET,
+  ENV_KEY: () => ENV_KEY,
+  ENV_EXPIRATION: () => ENV_EXPIRATION,
+  ENV_CREDENTIAL_SCOPE: () => ENV_CREDENTIAL_SCOPE,
+  ENV_ACCOUNT_ID: () => ENV_ACCOUNT_ID
 });
 var init_dist_es = __esm(() => {
   init_fromEnv();
@@ -18068,17 +18066,17 @@ var init_fromInstanceMetadata = __esm(() => {
 // ../../node_modules/.bun/@smithy+credential-provider-imds@4.5.2/node_modules/@smithy/credential-provider-imds/dist-es/index.js
 var exports_dist_es2 = {};
 __export(exports_dist_es2, {
-  DEFAULT_MAX_RETRIES: () => DEFAULT_MAX_RETRIES,
-  DEFAULT_TIMEOUT: () => DEFAULT_TIMEOUT,
-  ENV_CMDS_AUTH_TOKEN: () => ENV_CMDS_AUTH_TOKEN,
-  ENV_CMDS_FULL_URI: () => ENV_CMDS_FULL_URI,
-  ENV_CMDS_RELATIVE_URI: () => ENV_CMDS_RELATIVE_URI,
-  Endpoint: () => Endpoint,
-  fromContainerMetadata: () => fromContainerMetadata,
-  fromInstanceMetadata: () => fromInstanceMetadata,
-  getInstanceMetadataEndpoint: () => getInstanceMetadataEndpoint,
+  providerConfigFromInit: () => providerConfigFromInit,
   httpRequest: () => httpRequest,
-  providerConfigFromInit: () => providerConfigFromInit
+  getInstanceMetadataEndpoint: () => getInstanceMetadataEndpoint,
+  fromInstanceMetadata: () => fromInstanceMetadata,
+  fromContainerMetadata: () => fromContainerMetadata,
+  Endpoint: () => Endpoint,
+  ENV_CMDS_RELATIVE_URI: () => ENV_CMDS_RELATIVE_URI,
+  ENV_CMDS_FULL_URI: () => ENV_CMDS_FULL_URI,
+  ENV_CMDS_AUTH_TOKEN: () => ENV_CMDS_AUTH_TOKEN,
+  DEFAULT_TIMEOUT: () => DEFAULT_TIMEOUT,
+  DEFAULT_MAX_RETRIES: () => DEFAULT_MAX_RETRIES
 });
 var init_dist_es2 = __esm(() => {
   init_fromContainerMetadata();
@@ -18089,7 +18087,7 @@ var init_dist_es2 = __esm(() => {
 });
 
 // ../../node_modules/.bun/@smithy+node-http-handler@4.12.1/node_modules/@smithy/node-http-handler/dist-cjs/index.js
-var require_dist_cjs6 = __commonJS(function(exports) {
+var require_dist_cjs6 = __commonJS((exports) => {
   var { hasOwn } = require_serde();
   var { streamCollector } = require_serde();
   exports.streamCollector = streamCollector;
@@ -19096,7 +19094,7 @@ var init_constants = __esm(() => {
 });
 
 // ../../node_modules/.bun/@aws-sdk+nested-clients@3.997.44/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso-oidc/index.js
-var require_sso_oidc = __commonJS(function(exports) {
+var require_sso_oidc = __commonJS((exports) => {
   var { awsEndpointFunctions: awsEndpointFunctions2, emitWarningIfUnsupportedVersion: emitWarningIfUnsupportedVersion$1, createDefaultUserAgentProvider, NODE_APP_ID_CONFIG_OPTIONS, getAwsRegionExtensionConfiguration, resolveAwsRegionExtensionConfiguration, resolveUserAgentConfig, resolveHostHeaderConfig, getUserAgentPlugin, getHostHeaderPlugin, getLoggerPlugin, getRecursionDetectionPlugin } = require_client2();
   var { NoAuthSigner, getHttpAuthSchemeEndpointRuleSetPlugin, DefaultIdentityProviderConfig, getHttpSigningPlugin } = require_dist_cjs2();
   var { normalizeProvider: normalizeProvider3, getSmithyContext: getSmithyContext3, ServiceException, NoOpLogger: NoOpLogger2, emitWarningIfUnsupportedVersion, loadConfigsForDefaultMode, getDefaultExtensionConfiguration, resolveDefaultRuntimeConfig, Client, makeBuilder: makeBuilder2, createAggregatedClient } = require_client();
@@ -20448,8 +20446,8 @@ var init_sso = __esm(() => {
 // ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.14/node_modules/@aws-sdk/credential-provider-sso/dist-es/loadSso.js
 var exports_loadSso = {};
 __export(exports_loadSso, {
-  GetRoleCredentialsCommand: () => $GetRoleCredentialsCommand,
-  SSOClient: () => $SSOClient
+  SSOClient: () => $SSOClient,
+  GetRoleCredentialsCommand: () => $GetRoleCredentialsCommand
 });
 var init_loadSso = __esm(() => {
   init_sso();
@@ -20642,9 +20640,9 @@ var init_fromSSO = __esm(() => {
 // ../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.14/node_modules/@aws-sdk/credential-provider-sso/dist-es/index.js
 var exports_dist_es4 = {};
 __export(exports_dist_es4, {
-  fromSSO: () => fromSSO,
+  validateSsoProfile: () => validateSsoProfile,
   isSsoProfile: () => isSsoProfile,
-  validateSsoProfile: () => validateSsoProfile
+  fromSSO: () => fromSSO
 });
 var init_dist_es5 = __esm(() => {
   init_fromSSO();
@@ -20683,7 +20681,7 @@ var init_resolveCredentialSource = __esm(() => {
 });
 
 // ../../node_modules/.bun/@aws-sdk+nested-clients@3.997.44/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sts/index.js
-var require_sts = __commonJS(function(exports) {
+var require_sts = __commonJS((exports) => {
   var { awsEndpointFunctions: awsEndpointFunctions3, emitWarningIfUnsupportedVersion: emitWarningIfUnsupportedVersion$12, createDefaultUserAgentProvider: createDefaultUserAgentProvider2, NODE_APP_ID_CONFIG_OPTIONS: NODE_APP_ID_CONFIG_OPTIONS2, getAwsRegionExtensionConfiguration: getAwsRegionExtensionConfiguration2, resolveAwsRegionExtensionConfiguration: resolveAwsRegionExtensionConfiguration2, resolveUserAgentConfig: resolveUserAgentConfig2, resolveHostHeaderConfig: resolveHostHeaderConfig2, getUserAgentPlugin: getUserAgentPlugin2, getHostHeaderPlugin: getHostHeaderPlugin2, getLoggerPlugin: getLoggerPlugin2, getRecursionDetectionPlugin: getRecursionDetectionPlugin2, setCredentialFeature: setCredentialFeature5, stsRegionDefaultResolver } = require_client2();
   var { NoAuthSigner: NoAuthSigner2, getHttpAuthSchemeEndpointRuleSetPlugin: getHttpAuthSchemeEndpointRuleSetPlugin2, DefaultIdentityProviderConfig: DefaultIdentityProviderConfig2, getHttpSigningPlugin: getHttpSigningPlugin2 } = require_dist_cjs2();
   var { normalizeProvider: normalizeProvider4, getSmithyContext: getSmithyContext4, ServiceException: ServiceException2, NoOpLogger: NoOpLogger3, emitWarningIfUnsupportedVersion: emitWarningIfUnsupportedVersion2, loadConfigsForDefaultMode: loadConfigsForDefaultMode2, getDefaultExtensionConfiguration: getDefaultExtensionConfiguration2, resolveDefaultRuntimeConfig: resolveDefaultRuntimeConfig2, Client: Client2, makeBuilder: makeBuilder3, createAggregatedClient: createAggregatedClient2 } = require_client();
@@ -21773,7 +21771,7 @@ var init_resolveAssumeRoleCredentials = __esm(() => {
 });
 
 // ../../node_modules/.bun/@aws-sdk+nested-clients@3.997.44/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/signin/index.js
-var require_signin = __commonJS(function(exports) {
+var require_signin = __commonJS((exports) => {
   var { awsEndpointFunctions: awsEndpointFunctions3, emitWarningIfUnsupportedVersion: emitWarningIfUnsupportedVersion$12, createDefaultUserAgentProvider: createDefaultUserAgentProvider2, NODE_APP_ID_CONFIG_OPTIONS: NODE_APP_ID_CONFIG_OPTIONS2, getAwsRegionExtensionConfiguration: getAwsRegionExtensionConfiguration2, resolveAwsRegionExtensionConfiguration: resolveAwsRegionExtensionConfiguration2, resolveUserAgentConfig: resolveUserAgentConfig2, resolveHostHeaderConfig: resolveHostHeaderConfig2, getUserAgentPlugin: getUserAgentPlugin2, getHostHeaderPlugin: getHostHeaderPlugin2, getLoggerPlugin: getLoggerPlugin2, getRecursionDetectionPlugin: getRecursionDetectionPlugin2 } = require_client2();
   var { NoAuthSigner: NoAuthSigner2, getHttpAuthSchemeEndpointRuleSetPlugin: getHttpAuthSchemeEndpointRuleSetPlugin2, DefaultIdentityProviderConfig: DefaultIdentityProviderConfig2, getHttpSigningPlugin: getHttpSigningPlugin2 } = require_dist_cjs2();
   var { normalizeProvider: normalizeProvider4, getSmithyContext: getSmithyContext4, ServiceException: ServiceException2, NoOpLogger: NoOpLogger3, emitWarningIfUnsupportedVersion: emitWarningIfUnsupportedVersion2, loadConfigsForDefaultMode: loadConfigsForDefaultMode2, getDefaultExtensionConfiguration: getDefaultExtensionConfiguration2, resolveDefaultRuntimeConfig: resolveDefaultRuntimeConfig2, Client: Client2, makeBuilder: makeBuilder3, createAggregatedClient: createAggregatedClient2 } = require_client();
@@ -23016,8 +23014,8 @@ var init_fromTokenFile = __esm(() => {
 // ../../node_modules/.bun/@aws-sdk+credential-provider-web-identity@3.972.76/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/index.js
 var exports_dist_es7 = {};
 __export(exports_dist_es7, {
-  fromTokenFile: () => fromTokenFile,
-  fromWebToken: () => fromWebToken
+  fromWebToken: () => fromWebToken,
+  fromTokenFile: () => fromTokenFile
 });
 var init_dist_es8 = __esm(() => {
   init_fromTokenFile();
@@ -23105,7 +23103,7 @@ import { randomUUID as randomUUID4 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.5.4",
+  version: "0.5.5",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -23227,7 +23225,40 @@ var package_default = {
   }
 };
 
+// src/lib/skill-entry-path.ts
+class SkillEntryPaths {
+  files = new Set;
+  directories = new Set;
+  add(path, maxBytes, invalid, limit) {
+    if (path.length > maxBytes)
+      limit();
+    const encoded = new TextEncoder().encode(path);
+    if (encoded.byteLength > maxBytes)
+      limit();
+    if (new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(encoded) !== path)
+      invalid("Invalid UTF-8 entry path");
+    if (!path || /[\\:\x00-\x1f\x7f]/u.test(path))
+      invalid("Unsafe entry path");
+    if (path.split("/").some((segment) => !segment || segment === "." || segment === ".."))
+      invalid("Unsafe entry path segment");
+    const key = path.normalize("NFC").toLowerCase().normalize("NFC");
+    if (this.files.has(key) || this.directories.has(key))
+      invalid("Duplicate or conflicting entry path");
+    const parents = key.split("/");
+    parents.pop();
+    while (parents.length) {
+      const parent = parents.join("/");
+      if (this.files.has(parent))
+        invalid("Conflicting entry file ancestor");
+      this.directories.add(parent);
+      parents.pop();
+    }
+    this.files.add(key);
+  }
+}
+
 // src/lib/skill-bundle.ts
+var BLOCK = 512;
 var ANY_SEGMENT_EXCLUDES = new Set([
   ".git",
   ".ds_store",
@@ -23364,6 +23395,136 @@ var SKILL_BUNDLE_INSPECTION_LIMITS = Object.freeze({
   timeoutMs: 5000
 });
 
+class SkillBundleInspectionError extends Error {
+  code;
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "SkillBundleInspectionError";
+  }
+}
+function invalidBundle(message) {
+  throw new SkillBundleInspectionError("BUNDLE_INVALID", message);
+}
+class BoundedTarReader {
+  limits;
+  check;
+  header = new Uint8Array(BLOCK);
+  headerOffset = 0;
+  pending;
+  bodyOffset = 0;
+  padding = 0;
+  zeroBlocks = 0;
+  entries = [];
+  paths = new SkillEntryPaths;
+  fileBytes = 0;
+  constructor(limits, check) {
+    this.limits = limits;
+    this.check = check;
+  }
+  push(chunk) {
+    let offset = 0;
+    while (offset < chunk.byteLength) {
+      this.check();
+      if (this.pending) {
+        const count = Math.min(this.pending.bytes.byteLength - this.bodyOffset, chunk.byteLength - offset);
+        this.pending.bytes.set(chunk.subarray(offset, offset + count), this.bodyOffset);
+        offset += count;
+        this.bodyOffset += count;
+        if (this.bodyOffset === this.pending.bytes.byteLength) {
+          this.entries.push(this.pending);
+          this.pending = undefined;
+        }
+      } else if (this.padding) {
+        const count = Math.min(this.padding, chunk.byteLength - offset);
+        if (chunk.subarray(offset, offset + count).some((byte) => byte !== 0))
+          invalidBundle("Nonzero tar body padding");
+        offset += count;
+        this.padding -= count;
+      } else {
+        const count = Math.min(BLOCK - this.headerOffset, chunk.byteLength - offset);
+        this.header.set(chunk.subarray(offset, offset + count), this.headerOffset);
+        offset += count;
+        this.headerOffset += count;
+        if (this.headerOffset === BLOCK) {
+          this.readHeader();
+          this.headerOffset = 0;
+        }
+      }
+    }
+  }
+  finish() {
+    this.check();
+    if (this.pending || this.padding || this.headerOffset || this.zeroBlocks < 2)
+      invalidBundle("Truncated tar bundle");
+    return this.entries;
+  }
+  readHeader() {
+    this.check();
+    const h = this.header;
+    if (h.every((byte) => byte === 0)) {
+      this.zeroBlocks++;
+      return;
+    }
+    if (this.zeroBlocks)
+      invalidBundle("Nonzero tar data after terminator");
+    if (this.entries.length >= this.limits.entries)
+      throw new SkillBundleInspectionError("BUNDLE_LIMIT", "Bundle entry limit exceeded");
+    let checksum = 0;
+    for (let i = 0;i < BLOCK; i++)
+      checksum += i >= 148 && i < 156 ? 32 : h[i];
+    if (tarOctal(h.subarray(148, 156)) !== checksum)
+      invalidBundle("Invalid tar header checksum");
+    if (new TextDecoder().decode(h.subarray(257, 265)) !== "ustar\x00" + "00")
+      invalidBundle("Unsupported tar format");
+    if (h[156] !== 48 && h[156] !== 0 || h.subarray(157, 257).some((b) => b !== 0) || h.subarray(345).some((b) => b !== 0))
+      invalidBundle("Unsupported tar entry or path prefix");
+    const mode = tarOctal(h.subarray(100, 108));
+    if (mode > 511)
+      invalidBundle("Unsupported tar permission bits");
+    tarOctal(h.subarray(108, 116));
+    tarOctal(h.subarray(116, 124));
+    tarOctal(h.subarray(136, 148));
+    const size = tarOctal(h.subarray(124, 136));
+    if (size > this.limits.fileBytes || this.fileBytes + size > this.limits.decompressedBytes) {
+      throw new SkillBundleInspectionError("BUNDLE_LIMIT", "Bundle file byte limit exceeded");
+    }
+    const name = h.subarray(0, 100);
+    const end = name.indexOf(0);
+    if (end !== -1 && name.subarray(end).some((b) => b !== 0))
+      invalidBundle("Invalid tar path padding");
+    const raw = end === -1 ? name : name.subarray(0, end);
+    if (raw.byteLength > this.limits.pathBytes)
+      throw new SkillBundleInspectionError("BUNDLE_LIMIT", "Bundle path byte limit exceeded");
+    let path;
+    try {
+      path = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(raw);
+    } catch {
+      return invalidBundle("Invalid UTF-8 bundle path");
+    }
+    this.paths.add(path, this.limits.pathBytes, invalidBundle, () => {
+      throw new SkillBundleInspectionError("BUNDLE_LIMIT", "Bundle path byte limit exceeded");
+    });
+    this.fileBytes += size;
+    this.pending = { path, mode, bytes: new Uint8Array(new ArrayBuffer(size)) };
+    this.bodyOffset = 0;
+    this.padding = (BLOCK - size % BLOCK) % BLOCK;
+    if (!size) {
+      this.entries.push(this.pending);
+      this.pending = undefined;
+    }
+  }
+}
+function tarOctal(field) {
+  const text = new TextDecoder().decode(field);
+  if (!/^[0-7]+[\0 ]*$/.test(text))
+    invalidBundle("Invalid tar octal field");
+  const value = Number.parseInt(text, 8);
+  if (!Number.isSafeInteger(value))
+    invalidBundle("Tar integer is out of range");
+  return value;
+}
+
 // ../../node_modules/.bun/@aws-sdk+checksums@3.1000.29/node_modules/@aws-sdk/checksums/dist-cjs/submodules/flexible-checksums/index.js
 var { setFeature } = require_client2();
 var { HttpRequest } = require_protocols();
@@ -32535,7 +32696,7 @@ var import_node_http_handler2 = __toESM(require_dist_cjs6(), 1);
 var { toUint8Array: toUint8Array2, concatBytes } = require_serde();
 var { createHmac, createHash: createHash2 } = __require("crypto");
 var { Sha256: Sha2562, Sha256Js, Sha256Node } = require_checksum();
-var BLOCK = 64;
+var BLOCK2 = 64;
 var DIGEST_LENGTH = 20;
 var INIT = new Int32Array([1732584193, 4023233417, 2562383102, 271733878, 3285377520]);
 var K2 = new Int32Array([1518500249, 1859775393, 2400959708, 3395469782]);
@@ -32544,7 +32705,7 @@ class Sha1Js {
   digestLength = DIGEST_LENGTH;
   state = Int32Array.from(INIT);
   w;
-  buffer = new Uint8Array(BLOCK);
+  buffer = new Uint8Array(BLOCK2);
   bufferLength = 0;
   bytesHashed = 0;
   finished = false;
@@ -32555,13 +32716,13 @@ class Sha1Js {
       const key = Sha1Js.normalizeKey(secret);
       this.inner = new Sha1Js;
       this.outer = new Sha1Js;
-      const pad = new Uint8Array(BLOCK * 2);
-      for (let i3 = 0;i3 < BLOCK; ++i3) {
+      const pad = new Uint8Array(BLOCK2 * 2);
+      for (let i3 = 0;i3 < BLOCK2; ++i3) {
         pad[i3] = 54 ^ key[i3];
-        pad[i3 + BLOCK] = 92 ^ key[i3];
+        pad[i3 + BLOCK2] = 92 ^ key[i3];
       }
-      this.inner.update(pad.subarray(0, BLOCK));
-      this.outer.update(pad.subarray(BLOCK));
+      this.inner.update(pad.subarray(0, BLOCK2));
+      this.outer.update(pad.subarray(BLOCK2));
     }
   }
   update(data) {
@@ -32576,19 +32737,19 @@ class Sha1Js {
     let { length } = data;
     this.bytesHashed += length;
     if (this.bufferLength > 0) {
-      while (length > 0 && this.bufferLength < BLOCK) {
+      while (length > 0 && this.bufferLength < BLOCK2) {
         this.buffer[this.bufferLength++] = data[pos++];
         --length;
       }
-      if (this.bufferLength === BLOCK) {
+      if (this.bufferLength === BLOCK2) {
         this.hashBuffer(this.buffer, 0);
         this.bufferLength = 0;
       }
     }
-    while (length >= BLOCK) {
+    while (length >= BLOCK2) {
       this.hashBuffer(data, pos);
-      pos += BLOCK;
-      length -= BLOCK;
+      pos += BLOCK2;
+      length -= BLOCK2;
     }
     while (length > 0) {
       this.buffer[this.bufferLength++] = data[pos++];
@@ -32609,7 +32770,7 @@ class Sha1Js {
   }
   reset() {
     this.state = Int32Array.from(INIT);
-    this.buffer = new Uint8Array(BLOCK);
+    this.buffer = new Uint8Array(BLOCK2);
     this.bufferLength = 0;
     this.bytesHashed = 0;
   }
@@ -32620,19 +32781,19 @@ class Sha1Js {
     const bitsHi = this.bytesHashed / 536870912 | 0;
     const bitsLo = this.bytesHashed << 3;
     buffer[bufferLength++] = 128;
-    if (bufferLength > BLOCK - 8) {
-      for (let i3 = bufferLength;i3 < BLOCK; ++i3) {
+    if (bufferLength > BLOCK2 - 8) {
+      for (let i3 = bufferLength;i3 < BLOCK2; ++i3) {
         buffer[i3] = 0;
       }
       this.hashBufferWith(state, buffer, 0);
       bufferLength = 0;
     }
-    for (let i3 = bufferLength;i3 < BLOCK - 8; ++i3) {
+    for (let i3 = bufferLength;i3 < BLOCK2 - 8; ++i3) {
       buffer[i3] = 0;
     }
-    const v2 = new DataView(buffer.buffer, buffer.byteOffset, BLOCK);
-    v2.setUint32(BLOCK - 8, bitsHi, false);
-    v2.setUint32(BLOCK - 4, bitsLo, false);
+    const v2 = new DataView(buffer.buffer, buffer.byteOffset, BLOCK2);
+    v2.setUint32(BLOCK2 - 8, bitsHi, false);
+    v2.setUint32(BLOCK2 - 4, bitsLo, false);
     this.hashBufferWith(state, buffer, 0);
     const out = new Uint8Array(DIGEST_LENGTH);
     out[0] = state[0] >>> 24 & 255;
@@ -32659,15 +32820,15 @@ class Sha1Js {
   }
   static normalizeKey(secret) {
     const key = toUint8Array2(secret);
-    if (key.byteLength > BLOCK) {
+    if (key.byteLength > BLOCK2) {
       const h3 = new Sha1Js;
       h3.update(key);
       const digest = h3.digestSync();
-      const padded2 = new Uint8Array(BLOCK);
+      const padded2 = new Uint8Array(BLOCK2);
       padded2.set(digest);
       return padded2;
     }
-    const padded = new Uint8Array(BLOCK);
+    const padded = new Uint8Array(BLOCK2);
     padded.set(key);
     return padded;
   }
@@ -33967,10 +34128,16 @@ class SqliteSkillsStore {
     const orgId = input.principal.orgId;
     const now = nowIso();
     return this.db.transaction(() => {
-      const previous = this.get("SELECT revision_id, revision_number, bundle_sha256, bundle_byte_size, skill_md, tombstoned_at FROM skills_registry WHERE org_id = ? AND slug = ?", [orgId, input.slug]);
+      const previous = this.get("SELECT revision_id, revision_number, bundle_sha256, bundle_byte_size, skill_md, tombstoned_at, source FROM skills_registry WHERE org_id = ? AND slug = ?", [orgId, input.slug]);
       const previousSha = typeof previous?.bundle_sha256 === "string" ? previous.bundle_sha256 : null;
       const previousRevisionId = typeof previous?.revision_id === "string" && previous.revision_id ? previous.revision_id : null;
       const tombstoned = previous?.tombstoned_at != null;
+      if (input.seedBundledOnly && input.expectedRevisionId && !previous) {
+        throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, null);
+      }
+      if (input.seedBundledOnly && previous && (tombstoned || previous.source !== "bundled")) {
+        throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, previousRevisionId);
+      }
       const carriedSkillMd = typeof input.skillMd === "string" ? input.skillMd : typeof previous?.skill_md === "string" ? previous.skill_md : null;
       if (previous && !tombstoned && input.expectedRevisionId !== previousRevisionId) {
         throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, previousRevisionId);
@@ -34044,8 +34211,9 @@ class SqliteSkillsStore {
            tombstoned_at = NULL,
            tombstone_purge_after = NULL,
            updated_at = excluded.updated_at
-         WHERE skills_registry.tombstoned_at IS NOT NULL
-            OR skills_registry.revision_id = ?
+         WHERE (skills_registry.tombstoned_at IS NOT NULL OR skills_registry.revision_id = ?)
+           AND (? = 0 OR (skills_registry.tombstoned_at IS NULL AND skills_registry.source = 'bundled'
+             AND skills_registry.revision_id = ?))
          RETURNING *`, [
         orgId,
         input.slug,
@@ -34063,6 +34231,8 @@ class SqliteSkillsStore {
         revisionId,
         now,
         now,
+        input.expectedRevisionId ?? NO_REVISION_SENTINEL,
+        input.seedBundledOnly ? 1 : 0,
         input.expectedRevisionId ?? NO_REVISION_SENTINEL
       ]);
       if (!row) {
@@ -35354,6 +35524,12 @@ class MemorySkillsStore {
     const key = skillKey(input.principal.orgId, input.slug);
     const now = nowIso();
     const previous = this.skills.get(key);
+    if (input.seedBundledOnly && input.expectedRevisionId && !previous) {
+      throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, null);
+    }
+    if (input.seedBundledOnly && previous && (previous.tombstonedAt || previous.source !== "bundled")) {
+      throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, previous.revisionId);
+    }
     if (previous && !previous.tombstonedAt && input.expectedRevisionId !== previous.revisionId) {
       throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, previous.revisionId);
     }
@@ -35807,13 +35983,19 @@ class PostgresSkillsStore {
     const orgId = input.principal.orgId;
     return await this.sql.begin(async (tx) => {
       const previousRows = await tx`
-        SELECT revision_id, revision_number, bundle_sha256, bundle_byte_size, skill_md, tombstoned_at
+        SELECT revision_id, revision_number, bundle_sha256, bundle_byte_size, skill_md, tombstoned_at, source
         FROM skills_registry WHERE org_id = ${orgId} AND slug = ${input.slug} LIMIT 1
       `;
       const previous = previousRows[0];
       const previousSha = typeof previous?.bundle_sha256 === "string" ? String(previous.bundle_sha256) : null;
       const previousRevisionId = typeof previous?.revision_id === "string" && previous.revision_id ? String(previous.revision_id) : null;
       const tombstoned = previous?.tombstoned_at != null;
+      if (input.seedBundledOnly && input.expectedRevisionId && !previous) {
+        throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, null);
+      }
+      if (input.seedBundledOnly && previous && (tombstoned || previous.source !== "bundled")) {
+        throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, previousRevisionId);
+      }
       const carriedSkillMd = typeof input.skillMd === "string" ? input.skillMd : typeof previous?.skill_md === "string" ? String(previous.skill_md) : null;
       if (previous && !tombstoned && input.expectedRevisionId !== previousRevisionId) {
         throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, previousRevisionId);
@@ -35854,6 +36036,12 @@ class PostgresSkillsStore {
             body_blob = EXCLUDED.body_blob
         `;
       }
+      if (input.seedBundledOnly) {
+        const seedRows = await tx`SELECT revision_id FROM skills_registry WHERE org_id = ${orgId} AND slug = ${input.slug} FOR UPDATE`;
+        if (input.expectedRevisionId && !seedRows[0]) {
+          throw new SkillRevisionConflictError(input.slug, input.expectedRevisionId, null);
+        }
+      }
       const rows = await tx`
         INSERT INTO skills_registry (org_id, slug, display_name, description, category, tags_json, source, kind, version, skill_md,
                                      bundle_sha256, bundle_byte_size, published_by_user_id, revision_id, revision_number, updated_at)
@@ -35882,8 +36070,11 @@ class PostgresSkillsStore {
           tombstoned_at = NULL,
           tombstone_purge_after = NULL,
           updated_at = EXCLUDED.updated_at
-        WHERE skills_registry.tombstoned_at IS NOT NULL
-           OR skills_registry.revision_id = ${input.expectedRevisionId ?? NO_REVISION_SENTINEL2}
+        WHERE (skills_registry.tombstoned_at IS NOT NULL
+           OR skills_registry.revision_id = ${input.expectedRevisionId ?? NO_REVISION_SENTINEL2})
+          AND (NOT ${Boolean(input.seedBundledOnly)} OR
+            (skills_registry.tombstoned_at IS NULL AND skills_registry.source = 'bundled'
+             AND skills_registry.revision_id = ${input.expectedRevisionId ?? NO_REVISION_SENTINEL2}))
         RETURNING *
       `;
       if (!rows[0]) {