@hasna/skills 0.8.10 → 0.8.11

package/bin/mcp.js

@@ -20019,7 +20019,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.8.10",
+    version: "0.8.11",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -20081,10 +20081,11 @@ var init_package = __esm(() => {
       typecheck: "tsc --noEmit",
       "verify:release": "bun run scripts/release-guard.ts",
       "verify:consumer-types": "bun run scripts/consumer-types.ts",
-      prepare: "bun run build:js",
-      prepack: "bun run build && bun run verify:release && bun run verify:consumer-types",
+      prepack: "bun run verify:generated && bun run verify:release && bun run verify:consumer-types",
       prepublishOnly: "bun run verify:producer && bun run typecheck && bun run test",
-      "verify:producer": "bun run scripts/release-dependencies.ts"
+      "verify:producer": "bun run scripts/release-dependencies.ts",
+      "verify:generated": "HASNA_SKILLS_RELEASE_ARTIFACT_TEST=1 bun test src/lib/release-artifacts.test.ts",
+      "verify:consumer-credentials": "bun run scripts/consumer-credentials.ts"
     },
     keywords: [
       "skills",
@@ -20106,7 +20107,6 @@ var init_package = __esm(() => {
     license: "Apache-2.0",
     devDependencies: {
       "@hasna/contracts": "1.1.0",
-      "@hasna/secrets": "0.4.2",
       "@types/bun": "1.3.14",
       "@types/node": "25.2.3",
       "@types/react": "^18.2.0",
@@ -20119,6 +20119,7 @@ var init_package = __esm(() => {
       "@aws-sdk/client-ecs": "^3.1079.0",
       "@aws-sdk/client-s3": "^3.1079.0",
       "@hasna/events": "0.1.18",
+      "@hasna/secrets": "0.4.2",
       "@modelcontextprotocol/sdk": "^1.26.0",
       chalk: "^5.3.0",
       commander: "^12.1.0",
@@ -21107,6 +21108,7 @@ __export(exports_fleet_credentials, {
   SKILLS_API_URL_ENV: () => SKILLS_API_URL_ENV,
   SKILLS_API_KEY_ENV_KEYS: () => SKILLS_API_KEY_ENV_KEYS,
   SKILLS_API_KEY_ENV: () => SKILLS_API_KEY_ENV,
+  REDACTED_VAULT_REFERENCE: () => REDACTED_VAULT_REFERENCE,
   MissingSkillsFleetError: () => MissingSkillsFleetError
 });
 function isCredentialResolutionError(error61) {
@@ -21115,10 +21117,15 @@ function isCredentialResolutionError(error61) {
 function isSkillsFleetCredentialError(error61) {
   return error61 instanceof SkillsFleetCredentialError || typeof error61 === "object" && error61 !== null && error61.name === "SkillsFleetCredentialError";
 }
-function asSkillsFleetCredentialError(error61) {
+function redactVaultReference(message, vaultReference) {
+  if (!vaultReference)
+    return message;
+  return message.split(vaultReference).join(REDACTED_VAULT_REFERENCE);
+}
+function asSkillsFleetCredentialError(error61, vaultReference) {
   if (!isCredentialResolutionError(error61))
     return null;
-  return new SkillsFleetCredentialError(error61.message, "MISSING_API_CREDENTIAL");
+  return new SkillsFleetCredentialError(redactVaultReference(error61.message, vaultReference), "MISSING_API_CREDENTIAL");
 }
 function normalizeSkillsApiOrigin(apiUrl) {
   const url2 = new URL(apiUrl);
@@ -21305,7 +21312,7 @@ async function resolveSkillsConnection(env = process.env, options = {}) {
   try {
     completed = await completePointerCredential(SKILLS_APP, pointer, env);
   } catch (error61) {
-    const translated = asSkillsFleetCredentialError(error61);
+    const translated = asSkillsFleetCredentialError(error61, pointer.pointerVaultKey);
     if (translated)
       throw translated;
     throw error61;
@@ -21361,7 +21368,7 @@ function requireSkillsFleet(action = "This command", env = process.env, options
     return fleet;
   throw new MissingSkillsFleetError(action);
 }
-var SKILLS_APP = "skills", ENV_KEYS, SKILLS_API_URL_ENV_KEYS, SKILLS_API_KEY_ENV_KEYS, SKILLS_API_URL_ENV, SKILLS_API_KEY_ENV, SkillsFleetCredentialError, localNoticePrinted = false, MissingSkillsFleetError;
+var SKILLS_APP = "skills", ENV_KEYS, SKILLS_API_URL_ENV_KEYS, SKILLS_API_KEY_ENV_KEYS, SKILLS_API_URL_ENV, SKILLS_API_KEY_ENV, SkillsFleetCredentialError, REDACTED_VAULT_REFERENCE = "[redacted vault reference]", localNoticePrinted = false, MissingSkillsFleetError;
 var init_fleet_credentials = __esm(() => {
   init_transport();
   init_instance_credentials();
@@ -39490,14 +39497,15 @@ function profileSelectionSnapshot(selections) {
 var MAX_PROFILE_SELECTIONS = 4096, MAX_PROFILE_DOCUMENT_BYTES, MAX_SKILL_SESSION_ID_CHARS = 256, PROFILE_SESSION_ENVELOPE_BYTES, MAX_RESOLVED_PROFILE_BYTES, LEGACY_PROFILE_SELECTIONS = 256, LEGACY_PROFILE_DOCUMENT_BYTES = 1e6;
 var init_profile_limits = __esm(() => {
   MAX_PROFILE_DOCUMENT_BYTES = 8 * 1024 * 1024;
-  PROFILE_SESSION_ENVELOPE_BYTES = MAX_PROFILE_SELECTIONS * 67 + MAX_SKILL_SESSION_ID_CHARS * 6 + 256;
+  PROFILE_SESSION_ENVELOPE_BYTES = MAX_PROFILE_SELECTIONS * 67 + MAX_SKILL_SESSION_ID_CHARS * 12 + 512;
   MAX_RESOLVED_PROFILE_BYTES = MAX_PROFILE_DOCUMENT_BYTES - PROFILE_SESSION_ENVELOPE_BYTES;
 });
 
 // src/lib/selection-cache.ts
 import { createHash as createHash3, randomUUID } from "crypto";
-import { closeSync as closeSync5, constants as constants2, fstatSync as fstatSync5, lstatSync as lstatSync5, mkdirSync as mkdirSync4, openSync as openSync5, readSync as readSync2, renameSync as renameSync2, unlinkSync, writeFileSync as writeFileSync4 } from "fs";
+import { closeSync as closeSync5, constants as constants2, fstatSync as fstatSync5, fsyncSync, lstatSync as lstatSync5, mkdirSync as mkdirSync4, openSync as openSync5, readSync as readSync2, renameSync as renameSync2, unlinkSync, writeFileSync as writeFileSync4 } from "fs";
 import { dirname as dirname5, join as join13, parse as parse6, resolve as resolve3 } from "path";
+import { isDeepStrictEqual } from "util";
 function selectionCacheRoot(options = {}) {
   return resolve3(options.cacheDir ?? join13(getDataDirReadOnly(), "selection-cache"));
 }
@@ -39601,12 +39609,21 @@ function writeSelectionJson(path, value) {
     throw new SkillSelectionError("RECEIPT_TOO_LARGE", "The Skills selection receipt exceeds its size limit.");
   atomicWrite(path, bytes, 384);
 }
-function atomicWrite(path, bytes, mode) {
+function atomicWrite(path, bytes, mode, durable = false) {
   assertRegularPath(path, true);
   const temporary = join13(dirname5(path), `.selection-${randomUUID()}.tmp`);
   try {
-    writeFileSync4(temporary, bytes, { flag: "wx", mode });
+    const fd = openSync5(temporary, constants2.O_WRONLY | constants2.O_CREAT | constants2.O_EXCL | constants2.O_NOFOLLOW, mode);
+    try {
+      writeFileSync4(fd, bytes);
+      if (durable)
+        fsyncSync(fd);
+    } finally {
+      closeSync5(fd);
+    }
     renameSync2(temporary, path);
+    if (durable)
+      syncDirectory(dirname5(path));
   } finally {
     try {
       unlinkSync(temporary);
@@ -39719,16 +39736,130 @@ function sessionReceiptPath(sessionId, options = {}) {
     throw new SkillSelectionError("INVALID_SESSION", `A Skills session id must contain 1\u2013${MAX_SKILL_SESSION_ID_CHARS} characters.`);
   return join13(selectionCacheRoot(options), "sessions", `${hash2(sessionId)}.json`);
 }
-function readSkillSession(sessionId, options = {}) {
-  const receipt = readSelectionJson(sessionReceiptPath(sessionId, options));
-  if (receipt) {
-    validateSelectionReceipt(receipt);
-    const keys = new Set(receipt.profile.selections.map(selectionKey));
-    if (receipt.sessionId !== sessionId || !Array.isArray(receipt.loaded) || receipt.loaded.length > keys.size || new Set(receipt.loaded).size !== receipt.loaded.length || !receipt.loaded.every((key) => keys.has(key))) {
-      throw new SkillSelectionError("INVALID_RECEIPT", "The Skills session receipt is invalid.");
+function skillSessionGeneration(receipt) {
+  return receipt.generation ?? 0;
+}
+function validateSkillSessionBinding(binding) {
+  if (!binding || typeof binding.sessionId !== "string" || !binding.sessionId.trim() || binding.sessionId.length > MAX_SKILL_SESSION_ID_CHARS || !Number.isSafeInteger(binding.generation) || binding.generation < 0 || !/^[a-f0-9]{64}$/.test(binding.receiptSha256)) {
+    throw new SkillSelectionError("INVALID_RECEIPT", "The Skills session receipt contains an invalid parent snapshot binding.");
+  }
+}
+function validateSkillSessionReceipt(receipt, sessionId) {
+  validateSelectionReceipt(receipt);
+  const keys = new Set(receipt.profile.selections.map(selectionKey));
+  if (receipt.sessionId !== sessionId || !Array.isArray(receipt.loaded) || receipt.loaded.length > keys.size || new Set(receipt.loaded).size !== receipt.loaded.length || !receipt.loaded.every((key) => keys.has(key)) || receipt.generation !== undefined && (!Number.isSafeInteger(receipt.generation) || receipt.generation < 1)) {
+    throw new SkillSelectionError("INVALID_RECEIPT", "The Skills session receipt is invalid.");
+  }
+  if (receipt.parent) {
+    validateSkillSessionBinding(receipt.parent);
+    if (receipt.parent.sessionId === sessionId)
+      throw new SkillSelectionError("INVALID_RECEIPT", "A Skills child session cannot name itself as its parent.");
+  }
+}
+function readSkillSessionSnapshotIfExists(sessionId, options = {}) {
+  const path = sessionReceiptPath(sessionId, options), bytes = readRegularFile(path, MAX_PROFILE_DOCUMENT_BYTES);
+  if (!bytes)
+    return null;
+  let receipt;
+  try {
+    receipt = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
+  } catch {
+    throw new SkillSelectionError("INVALID_RECEIPT", "The Skills session receipt is unreadable.");
+  }
+  validateSkillSessionReceipt(receipt, sessionId);
+  const sha256 = sha256Hex(bytes);
+  return { path, bytes, receipt, sha256, sessionId, generation: skillSessionGeneration(receipt), receiptSha256: sha256 };
+}
+function skillSessionSnapshotBinding(snapshot) {
+  return { sessionId: snapshot.sessionId, generation: snapshot.generation, receiptSha256: snapshot.receiptSha256 };
+}
+function withSessionWriteLocks(sessionIds, options, action) {
+  const operationId = randomUUID();
+  const locks = [...new Set(sessionIds)].map((sessionId) => ({ sessionId, path: `${sessionReceiptPath(sessionId, options)}.write-lock` })).sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
+  const owned = [];
+  const assertOwned = () => {
+    for (const lock of owned) {
+      const current = lstatSync5(lock.path, { throwIfNoEntry: false });
+      if (!current?.isFile() || current.dev !== lock.dev || current.ino !== lock.ino) {
+        throw new SkillSelectionError("SESSION_WRITE_LOCK_CHANGED", "A session write lock changed during the operation; no replacement is permitted.");
+      }
+    }
+  };
+  try {
+    for (const lock of locks) {
+      assertRegularPath(lock.path, true);
+      let fd;
+      try {
+        fd = openSync5(lock.path, constants2.O_WRONLY | constants2.O_CREAT | constants2.O_EXCL | constants2.O_NOFOLLOW, 384);
+      } catch (error61) {
+        if (error61.code === "EEXIST")
+          throw new SkillSelectionError("SESSION_WRITE_LOCKED", "Another Skills process owns a required session write lock; retry after it completes. A surviving lock requires explicit recovery review.");
+        throw error61;
+      }
+      const stat = fstatSync5(fd);
+      owned.push({ path: lock.path, fd, dev: stat.dev, ino: stat.ino });
+      writeFileSync4(fd, `${JSON.stringify({ schemaVersion: 1, operationId, sessionId: lock.sessionId, pid: process.pid })}
+`);
+    }
+    return action(assertOwned);
+  } finally {
+    for (const lock of owned.reverse()) {
+      closeSync5(lock.fd);
+      const current = lstatSync5(lock.path, { throwIfNoEntry: false });
+      if (current?.isFile() && current.dev === lock.dev && current.ino === lock.ino)
+        unlinkSync(lock.path);
     }
   }
-  return receipt;
+}
+function sameSnapshot(actual, expected) {
+  return actual === null ? expected === null : expected !== null && actual.sessionId === expected.sessionId && actual.generation === expected.generation && actual.receiptSha256 === expected.receiptSha256;
+}
+function nextSkillSessionGeneration(generation) {
+  if (!Number.isSafeInteger(generation) || generation < 0 || generation >= Number.MAX_SAFE_INTEGER) {
+    throw new SkillSelectionError("SESSION_GENERATION_EXHAUSTED", "The Skills session generation cannot advance safely; preserve the receipt and review recovery before continuing.");
+  }
+  return generation + 1;
+}
+function parentChanged() {
+  throw new SkillSelectionError("SESSION_PARENT_CHANGED", "The parent Skills session changed while the child was resolving; resolve the child again from the current parent pin.");
+}
+function writeSkillSession(receipt, expected, options = {}) {
+  validateSkillSessionReceipt(receipt, receipt.sessionId);
+  if (expected.parent)
+    validateSkillSessionBinding(expected.parent);
+  if (expected.parent?.sessionId === receipt.sessionId)
+    throw new SkillSelectionError("INVALID_RECEIPT", "A Skills child session cannot name itself as its parent.");
+  const lockIds = expected.parent ? [receipt.sessionId, expected.parent.sessionId] : [receipt.sessionId];
+  withSessionWriteLocks(lockIds, options, (assertOwned) => {
+    const current = readSkillSessionSnapshotIfExists(receipt.sessionId, options);
+    if (!sameSnapshot(current, expected.current) || current && !isDeepStrictEqual(current.receipt.profile, receipt.profile)) {
+      throw new SkillSelectionError("SESSION_RECEIPT_CHANGED", "The Skills session receipt changed while context was loading; resolve context again without replacing the current pin.");
+    }
+    let parent = null;
+    if (expected.parent) {
+      parent = readSkillSessionSnapshotIfExists(expected.parent.sessionId, options);
+      if (!sameSnapshot(parent, expected.parent) || !parent || !isDeepStrictEqual(parent.receipt.profile, receipt.profile))
+        parentChanged();
+    }
+    const generation = nextSkillSessionGeneration(current?.generation ?? 0);
+    const next = current ? { ...current.receipt, generation, loaded: [...new Set([...current.receipt.loaded, ...receipt.loaded])] } : { ...receipt, generation, ...expected.parent ? { parent: expected.parent } : {} };
+    assertOwned();
+    if (expected.parent) {
+      parent = readSkillSessionSnapshotIfExists(expected.parent.sessionId, options);
+      if (!sameSnapshot(parent, expected.parent))
+        parentChanged();
+    }
+    writeSelectionJson(sessionReceiptPath(receipt.sessionId, options), next);
+  });
+}
+function syncDirectory(path) {
+  assertRegularPath(path);
+  const fd = openSync5(path, constants2.O_RDONLY | constants2.O_DIRECTORY | constants2.O_NOFOLLOW);
+  try {
+    fsyncSync(fd);
+  } finally {
+    closeSync5(fd);
+  }
 }
 var SkillSelectionError, MAX_CACHED_PROFILE_AGE_MS, SELECTION_LOCK_FILE = "selection.lock.json";
 var init_selection_cache = __esm(() => {
@@ -39748,6 +39879,7 @@ var init_selection_cache = __esm(() => {
 });
 
 // src/lib/agent-policy-limits.ts
+import { basename as basename4, isAbsolute as isAbsolute4, resolve as resolve4 } from "path";
 function object4(value) {
   return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }
@@ -39812,7 +39944,9 @@ function assertAgentPolicyCollections(policy) {
       text(source.path);
       requireBound(source.sha256 === null || typeof source.sha256 === "string" && /^[a-f0-9]{64}$/.test(source.sha256));
       if (source.hashMode !== undefined)
-        requireBound(["bytes", "path-bytes", "claude-plugin-registry"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
+        requireBound(["bytes", "path-bytes", "claude-plugin-registry", "claude-marketplace-registry"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
+      if (source.hashMode === "claude-marketplace-registry")
+        requireBound(agent === "claude" && value.agent === "claude" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute4(source.path) && resolve4(source.path) === source.path && basename4(source.path) === "known_marketplaces.json");
       if (source.hashMode === "claude-plugin-registry") {
         requireBound(agent === "claude");
         const managed = array3(source.managedPlugins, 64);
@@ -47400,7 +47534,7 @@ var init_plugin_projection = __esm(() => {
 });
 
 // src/lib/plugin-projection-store.ts
-import { constants as constants5, closeSync as closeSync8, fchmodSync, fstatSync as fstatSync8, fsyncSync, linkSync, lstatSync as lstatSync8, mkdirSync as mkdirSync6, openSync as openSync8, opendirSync, readSync as readSync4, renameSync as renameSync3, rmdirSync as rmdirSync2, rmSync as rmSync2, unlinkSync as unlinkSync3, writeSync as writeSync2 } from "fs";
+import { constants as constants5, closeSync as closeSync8, fchmodSync, fstatSync as fstatSync8, fsyncSync as fsyncSync2, linkSync, lstatSync as lstatSync8, mkdirSync as mkdirSync6, openSync as openSync8, opendirSync, readSync as readSync4, renameSync as renameSync3, rmdirSync as rmdirSync2, rmSync as rmSync2, unlinkSync as unlinkSync3, writeSync as writeSync2 } from "fs";
 var READ_FLAGS, WRITE_FLAGS;
 var init_plugin_projection_store = __esm(() => {
   init_plugin_projection();
@@ -47452,6 +47586,12 @@ var init_plugin_discovery = __esm(() => {
   init_plugin_projection_store();
 });
 
+// src/lib/claude-marketplace-registry.ts
+var CLAUDE_MARKETPLACE_REGISTRY_LIMITS;
+var init_claude_marketplace_registry = __esm(() => {
+  CLAUDE_MARKETPLACE_REGISTRY_LIMITS = Object.freeze({ bytes: 1024 * 1024, rows: 1024, depth: 32, nodes: 65536, stringCharacters: 16384, pathCharacters: 4096 });
+});
+
 // src/lib/agent-discovery.ts
 var init_agent_discovery = __esm(() => {
   init_agent_policy_limits();
@@ -47461,6 +47601,7 @@ var init_agent_discovery = __esm(() => {
   init_agent_discovery_path_bytes();
   init_plugin_discovery();
   init_plugin_admission();
+  init_claude_marketplace_registry();
   init_agent_discovery_directories();
 });
 
@@ -48024,11 +48165,18 @@ var init_selected_document = __esm(() => {
 
 // src/lib/selection-resolver.ts
 async function resolveSelectionContext(profileId, options = {}) {
-  const session = options.sessionId ? readSkillSession(options.sessionId, options) : null;
-  const parentSession = !session && options.parentSessionId ? readSkillSession(options.parentSessionId, options) : null;
+  const sessionState = options.sessionId ? readSkillSessionSnapshotIfExists(options.sessionId, options) : null;
+  const session = sessionState?.receipt ?? null;
+  const parentState = !session && options.parentSessionId ? readSkillSessionSnapshotIfExists(options.parentSessionId, options) : null;
+  if (!session && options.parentSessionId && !parentState) {
+    throw new SkillSelectionError("SESSION_PARENT_NOT_FOUND", "A child Skills session requires an existing parent receipt so its inherited pin can be bound exactly.");
+  }
+  const parentSession = parentState?.receipt ?? null;
+  const sessionSnapshot = sessionState ? skillSessionSnapshotBinding(sessionState) : null;
+  const parentSnapshot = parentState ? skillSessionSnapshotBinding(parentState) : undefined;
   const project = options.projectDir ? readProjectSelection(options.projectDir) : null;
   if (session && session.profile.profileId !== profileId || parentSession && parentSession.profile.profileId !== profileId || project && project.profile.profileId !== profileId) {
-    throw new SkillSelectionError("PROFILE_LOCK_MISMATCH", "The session or project is pinned to a different Skills profile. Select that profile or explicitly sync the new selection.");
+    throw new SkillSelectionError("PROFILE_LOCK_MISMATCH", "The session or project is pinned to a different Skills profile. Select the pinned profile, or review skills sessions reconcile for an intentional session change and explicit project sync for a project change.");
   }
   if (options.cached) {
     const receipt2 = session ?? parentSession ?? project ?? readSelectionProfile(profileId, options);
@@ -48036,7 +48184,7 @@ async function resolveSelectionContext(profileId, options = {}) {
       throw new SkillSelectionError("CACHED_PROFILE_MISSING", "No verified Skills profile is cached; authenticate and sync it first.");
     assertFreshCachedProfile(receipt2, options);
     assertBinding(receipt2.profile, options);
-    return { receipt: receipt2, session, inheritedLoaded: parentSession?.loaded };
+    return { receipt: receipt2, session, sessionSnapshot, parentSnapshot, inheritedLoaded: parentSession?.loaded };
   }
   const client = options.client ?? await createProfileClient();
   const current = await client.resolveProfile(profileId);
@@ -48049,7 +48197,7 @@ async function resolveSelectionContext(profileId, options = {}) {
     throw new SkillSelectionError("PROFILE_IDENTITY_MISMATCH", "The pinned selection belongs to another Skills authority or workspace.");
   }
   const receipt = locked ?? { schemaVersion: 1, verifiedAt: new Date((options.now ?? Date.now)()).toISOString(), profile: current };
-  return { receipt, session, client, inheritedLoaded: parentSession?.loaded };
+  return { receipt, session, sessionSnapshot, parentSnapshot, client, inheritedLoaded: parentSession?.loaded };
 }
 function assertBinding(profile, options) {
   if (options.authority !== undefined && profile.authority !== options.authority || options.workspaceId !== undefined && profile.workspaceId !== options.workspaceId) {
@@ -48088,7 +48236,7 @@ async function loadSelectedSkill(spec, profileId, options = {}) {
       sessionId: options.sessionId,
       loaded: [...new Set([...context.session?.loaded ?? [], selectionKey(selection)])]
     };
-    writeSelectionJson(sessionReceiptPath(options.sessionId, options), session);
+    writeSkillSession(session, { current: context.sessionSnapshot, parent: context.parentSnapshot }, options);
   }
   return { content, selection, receipt };
 }
@@ -48132,6 +48280,14 @@ var init_skill_context = __esm(() => {
   init_selected_document();
 });
 
+// src/lib/session-reconciliation.ts
+var SESSION_RECONCILIATION_PLAN_TTL_MS;
+var init_session_reconciliation = __esm(() => {
+  init_profile_client();
+  init_selection_cache();
+  SESSION_RECONCILIATION_PLAN_TTL_MS = 5 * 60 * 1000;
+});
+
 // src/cli/commands/context.ts
 function selectedProfileId(explicit) {
   return explicit ?? process.env.HASNA_SKILLS_SELECTION_PROFILE ?? readManagedSkillPolicy()?.profileId ?? "default";
@@ -48142,6 +48298,7 @@ var init_context = __esm(() => {
   init_selection_resolver();
   init_selection_cache();
   init_managed_policy();
+  init_session_reconciliation();
 });
 
 // src/lib/remote-customer-operations.ts
@@ -48153,7 +48310,7 @@ var init_remote_customer_operations = __esm(() => {
     { name: "list_remote_skills", title: "List Remote Skills", parameter: null, mutates: false, invoke: (client) => client.listSkills() },
     { name: "get_billing_status", title: "Get Billing Status", parameter: null, mutates: false, invoke: (client) => client.getBillingStatus() },
     { name: "list_credit_packs", title: "List Credit Packs", parameter: null, mutates: false, invoke: (client) => client.listCreditPacks() },
-    { name: "create_credit_checkout", title: "Create Credit Checkout", parameter: "pack_id", mutates: true, invoke: (client, value) => client.createCreditCheckout(value) },
+    { name: "create_credit_checkout", title: "Create Credit Checkout", parameter: "pack_id", mutates: true, invoke: (client, value, options) => client.createCreditCheckout(value, options) },
     { name: "get_billing_usage", title: "Get Billing Usage", parameter: null, mutates: false, invoke: (client) => client.getUsage() },
     { name: "list_invoices", title: "List Invoices", parameter: null, mutates: false, invoke: (client) => client.listInvoices() },
     { name: "create_billing_checkout", title: "Create Billing Checkout", parameter: null, mutates: true, invoke: (client) => client.createBillingCheckout() },
@@ -48961,13 +49118,13 @@ var init_remote_workspace_leave = __esm(() => {
 
 // src/lib/auth-store.ts
 import { chmodSync, existsSync as existsSync13, mkdirSync as mkdirSync8, readFileSync as readFileSync15, renameSync as renameSync4, statSync as statSync8, unlinkSync as unlinkSync4, writeFileSync as writeFileSync6 } from "fs";
-import { basename as basename4, dirname as dirname6, join as join19 } from "path";
+import { basename as basename5, dirname as dirname6, join as join19 } from "path";
 function getAuthFilePath(env = process.env) {
   return skillsCredentialFilePath(env);
 }
 function getIdentityFilePath(env = process.env) {
   const file2 = skillsCredentialFilePath(env);
-  return join19(dirname6(file2), basename4(file2).replace(/^credentials/, "identity") + ".json");
+  return join19(dirname6(file2), basename5(file2).replace(/^credentials/, "identity") + ".json");
 }
 function getApiUrl(action, env = process.env, options = {}) {
   return requireSkillsApiOrigin(action, env, options);
@@ -49121,6 +49278,35 @@ var init_remote_account = __esm(() => {
   };
 });
 
+// src/lib/remote-credit-checkout.ts
+function creditCheckoutRequestKey(value) {
+  if (value === undefined)
+    return crypto.randomUUID();
+  if (typeof value !== "string" || !creditCheckoutKeyPattern.test(value))
+    throw new Error("Checkout idempotency key must be 8-255 URL-safe characters");
+  return value;
+}
+function creditCheckoutFailure(value, status, key) {
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    return { code: "CREDIT_CHECKOUT_UNCONFIRMED" };
+  const row = value;
+  if (row.requestIdempotencyKey !== undefined && row.requestIdempotencyKey !== key)
+    return { code: "CREDIT_CHECKOUT_UNCONFIRMED" };
+  const code = status === 409 && row.error === "credit checkout in_progress" ? "CREDIT_CHECKOUT_IN_PROGRESS" : status === 409 && row.error === "credit checkout expired" && row.requestIdempotencyKey === key ? "CREDIT_CHECKOUT_EXPIRED" : status === 409 && row.error === "credit checkout fulfilled" && row.requestIdempotencyKey === key ? "CREDIT_CHECKOUT_FULFILLED" : "CREDIT_CHECKOUT_UNCONFIRMED";
+  const delay = row.retryAfterSeconds;
+  return { code, ...code === "CREDIT_CHECKOUT_IN_PROGRESS" || status === 503 && row.error === "credit checkout creation unresolved" ? typeof delay === "number" && Number.isSafeInteger(delay) && delay > 0 && delay <= 3600 ? { retryAfterSeconds: delay } : {} : {} };
+}
+var creditCheckoutKeyPattern, creditCheckoutMessages;
+var init_remote_credit_checkout = __esm(() => {
+  creditCheckoutKeyPattern = /^[A-Za-z0-9._:-]{8,255}$/;
+  creditCheckoutMessages = {
+    CREDIT_CHECKOUT_UNCONFIRMED: "Checkout creation could not be confirmed. Keep the request idempotency key, inspect billing, and use the same key for an explicit retry on the same server, account and pack. No automatic retry was made.",
+    CREDIT_CHECKOUT_IN_PROGRESS: "This checkout is still being created. Wait before explicitly retrying the same server, account and pack with the same request idempotency key. No automatic retry was made.",
+    CREDIT_CHECKOUT_EXPIRED: "This checkout has expired. Inspect billing before deliberately starting a new purchase with a new request idempotency key. Do not retry this checkout automatically.",
+    CREDIT_CHECKOUT_FULFILLED: "This checkout is already fulfilled. Inspect the account balance; do not create another checkout to recover this purchase."
+  };
+});
+
 // src/lib/remote-profile.ts
 function customerNamePatch(input2, field) {
   if (!isRecord4(input2) || Object.keys(input2).length !== 1 || !Object.hasOwn(input2, field))
@@ -49166,10 +49352,10 @@ async function readQuoteUnavailableCode(response) {
   let timer;
   let deadlineExceeded = false;
   const expired = Symbol("quote body deadline");
-  const deadline = new Promise((resolve4) => {
+  const deadline = new Promise((resolve5) => {
     timer = setTimeout(() => {
       deadlineExceeded = true;
-      resolve4(expired);
+      resolve5(expired);
       reader.cancel().catch(() => {});
     }, 1500);
   });
@@ -49284,6 +49470,7 @@ __export(exports_remote_client, {
   RemoteRouteUnsupportedError: () => RemoteRouteUnsupportedError,
   RemoteRequestError: () => RemoteRequestError,
   RemoteQuoteUnavailableError: () => RemoteQuoteUnavailableError,
+  RemoteCreditCheckoutError: () => RemoteCreditCheckoutError,
   RemoteCapabilityUnavailableError: () => RemoteCapabilityUnavailableError
 });
 
@@ -49734,14 +49921,43 @@ class RemoteSkillsClient {
   async listCreditPacks() {
     return parseRemoteCreditPacks(await (await this.requestNewRoute("/api/v1/billing/credits")).json());
   }
-  async createCreditCheckout(packId) {
+  async createCreditCheckout(packId, options = {}) {
+    const requestIdempotencyKey = creditCheckoutRequestKey(options.idempotencyKey);
     const packs = await this.listCreditPacks();
     if (!packs.some((pack) => pack.id === packId))
       throw new Error("Choose a credit pack returned by skills credits packs");
-    return parseRemoteCheckout(await (await this.requestNewRoute("/api/v1/billing/credits", {
-      method: "POST",
-      body: JSON.stringify({ packId })
-    })).json());
+    let response;
+    try {
+      response = await this.request("/api/v1/billing/credits", {
+        method: "POST",
+        body: JSON.stringify({ packId, idempotencyKey: requestIdempotencyKey })
+      });
+    } catch {
+      throw new RemoteCreditCheckoutError("CREDIT_CHECKOUT_UNCONFIRMED", 0, requestIdempotencyKey);
+    }
+    if (response.status === 404 || response.status === 405) {
+      response.body?.cancel().catch(() => {});
+      throw new RemoteRouteUnsupportedError("/api/v1/billing/credits", response.status, this.apiUrl);
+    }
+    let value;
+    try {
+      value = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(await readBoundedResponse(response, 4096)));
+    } catch {
+      throw new RemoteCreditCheckoutError("CREDIT_CHECKOUT_UNCONFIRMED", response.status, requestIdempotencyKey);
+    }
+    if (!response.ok) {
+      const failure = creditCheckoutFailure(value, response.status, requestIdempotencyKey);
+      throw new RemoteCreditCheckoutError(failure.code, response.status, requestIdempotencyKey, failure.retryAfterSeconds);
+    }
+    try {
+      const checkout = parseRemoteCheckout(value);
+      const echo = value.requestIdempotencyKey;
+      if (echo !== undefined && echo !== requestIdempotencyKey)
+        throw new Error("checkout request key changed");
+      return { ...checkout, requestIdempotencyKey };
+    } catch {
+      throw new RemoteCreditCheckoutError("CREDIT_CHECKOUT_UNCONFIRMED", response.status, requestIdempotencyKey);
+    }
   }
   async getUsage() {
     return this.arrayResponse("/api/v1/billing/usage");
@@ -50111,7 +50327,7 @@ async function createRemoteSkillsClient(env = process.env) {
 function createRemoteSkillsClientReadOnly(env = process.env) {
   return createRemoteSkillsClient(env);
 }
-var RemoteRouteUnsupportedError, RemoteRequestError, RemoteQuoteUnavailableError, RemoteWorkspaceMemberError, RemoteWorkspaceSelectionError, RemoteCapabilityUnavailableError, INVALID_SKILL_VERSION_RESPONSE = "Remote skill version payload did not match the expected contract.";
+var RemoteRouteUnsupportedError, RemoteRequestError, RemoteCreditCheckoutError, RemoteQuoteUnavailableError, RemoteWorkspaceMemberError, RemoteWorkspaceSelectionError, RemoteCapabilityUnavailableError, INVALID_SKILL_VERSION_RESPONSE = "Remote skill version payload did not match the expected contract.";
 var init_remote_client = __esm(() => {
   init_remote_recurring();
   init_remote_invitations();
@@ -50123,6 +50339,7 @@ var init_remote_client = __esm(() => {
   init_fleet_credentials();
   init_remote_account();
   init_remote_files();
+  init_remote_credit_checkout();
   init_remote_quote_errors();
   init_remote_permissions();
   RemoteRouteUnsupportedError = class RemoteRouteUnsupportedError extends Error {
@@ -50147,6 +50364,19 @@ var init_remote_client = __esm(() => {
       this.name = "RemoteRequestError";
     }
   };
+  RemoteCreditCheckoutError = class RemoteCreditCheckoutError extends RemoteRequestError {
+    code;
+    requestIdempotencyKey;
+    retryAfterSeconds;
+    constructor(code, status, requestIdempotencyKey, retryAfterSeconds) {
+      super("/api/v1/billing/credits", status);
+      this.code = code;
+      this.requestIdempotencyKey = requestIdempotencyKey;
+      this.retryAfterSeconds = retryAfterSeconds;
+      this.name = "RemoteCreditCheckoutError";
+      this.message = creditCheckoutMessages[code];
+    }
+  };
   RemoteQuoteUnavailableError = class RemoteQuoteUnavailableError extends RemoteRequestError {
     code;
     constructor(path, code) {
@@ -50533,12 +50763,12 @@ class RemotePrivatePublicationsClient {
       previous = view;
       if (!["queued", "verifying"].includes(view.state) || Date.now() >= until)
         return view;
-      await new Promise((resolve4) => {
+      await new Promise((resolve5) => {
         const timer = setTimeout(done, Math.min(1000, until - Date.now()));
         function done() {
           clearTimeout(timer);
           options.signal?.removeEventListener("abort", done);
-          resolve4();
+          resolve5();
         }
         options.signal?.addEventListener("abort", done, { once: true });
       });
@@ -51058,8 +51288,8 @@ var init_recurring_customer = __esm(() => {
 });
 
 // src/lib/recurring-recovery.ts
-import { constants as constants7, closeSync as closeSync10, fsyncSync as fsyncSync2, fstatSync as fstatSync10, lstatSync as lstatSync10, mkdirSync as mkdirSync10, openSync as openSync10, readSync as readSync5, realpathSync as realpathSync4, renameSync as renameSync6, unlinkSync as unlinkSync5, writeFileSync as writeFileSync8 } from "fs";
-import { dirname as dirname7, isAbsolute as isAbsolute4, join as join20, resolve as resolve4 } from "path";
+import { constants as constants7, closeSync as closeSync10, fsyncSync as fsyncSync3, fstatSync as fstatSync10, lstatSync as lstatSync10, mkdirSync as mkdirSync10, openSync as openSync10, readSync as readSync5, realpathSync as realpathSync4, renameSync as renameSync6, unlinkSync as unlinkSync5, writeFileSync as writeFileSync8 } from "fs";
+import { dirname as dirname7, isAbsolute as isAbsolute5, join as join20, resolve as resolve5 } from "path";
 import { randomUUID as randomUUID2 } from "crypto";
 
 class RecoveryOwner {
@@ -51067,7 +51297,7 @@ class RecoveryOwner {
   parents = [];
   constructor(directory) {
     this.directory = directory;
-    if (!isAbsolute4(directory) || resolve4(directory) !== directory || realpathSync4(directory) !== directory)
+    if (!isAbsolute5(directory) || resolve5(directory) !== directory || realpathSync4(directory) !== directory)
       invalid5();
     for (let path = directory;; path = dirname7(path)) {
       const stat2 = lstatSync10(path);
@@ -51122,7 +51352,7 @@ class RecoveryOwner {
     const fd = openSync10(join20(this.directory, name), constants7.O_WRONLY | constants7.O_CREAT | constants7.O_EXCL | constants7.O_NOFOLLOW, 384);
     try {
       writeFileSync8(fd, bytes);
-      fsyncSync2(fd);
+      fsyncSync3(fd);
     } finally {
       closeSync10(fd);
     }
@@ -51133,7 +51363,7 @@ class RecoveryOwner {
     this.assert();
     const fd = openSync10(this.directory, constants7.O_RDONLY | constants7.O_NOFOLLOW);
     try {
-      fsyncSync2(fd);
+      fsyncSync3(fd);
     } finally {
       closeSync10(fd);
     }
@@ -51160,7 +51390,7 @@ class RecoveryOwner {
     const owner = fstatSync10(fd);
     try {
       writeFileSync8(fd, JSON.stringify({ pid: process.pid }));
-      fsyncSync2(fd);
+      fsyncSync3(fd);
       this.sync();
       return await action();
     } finally {
@@ -51202,7 +51432,7 @@ function base(customer, organizationId) {
   };
 }
 function create(directory, intent) {
-  if (!isAbsolute4(directory) || resolve4(directory) !== directory || realpathSync4(dirname7(directory)) !== dirname7(directory))
+  if (!isAbsolute5(directory) || resolve5(directory) !== directory || realpathSync4(dirname7(directory)) !== dirname7(directory))
     invalid5();
   mkdirSync10(directory, { mode: 448 });
   const owner = new RecoveryOwner(directory), checked = intentSchema.parse(intent), intentSha256 = canonicalJsonSha256(checked);
@@ -51365,7 +51595,7 @@ var init_recurring_recovery = __esm(() => {
 });
 
 // src/lib/recurring-surface.ts
-import { isAbsolute as isAbsolute5 } from "path";
+import { isAbsolute as isAbsolute6 } from "path";
 function recurringMcpSchema(action) {
   return action === "activate" ? recurringSurfaceSchemas.activate.extend({ code, confirm: exports_external.literal(true) }) : recurringSurfaceSchemas[action];
 }
@@ -51470,7 +51700,7 @@ var init_recurring_surface = __esm(() => {
   uuid13 = exports_external.string().regex(/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/);
   context = { userId: uuid13.optional(), membershipId: uuid13.optional() };
   page2 = { limit: exports_external.number().int().min(1).max(100).optional(), cursor: exports_external.string().min(1).max(2048).optional() };
-  directory = exports_external.string().max(4096).refine(isAbsolute5, "Use an absolute recovery directory");
+  directory = exports_external.string().max(4096).refine(isAbsolute6, "Use an absolute recovery directory");
   email4 = exports_external.string().trim().toLowerCase().email().max(254);
   code = exports_external.string().regex(/^\d{6}$/);
   recurringSurfaceSchemas = {
@@ -52439,11 +52669,11 @@ var init_mcp_contracts = __esm(() => {
     name: operation.name,
     title: operation.title,
     description: `${operation.title} on the configured server; unavailable capabilities fail explicitly.`,
-    params: operation.parameter ? [operation.parameter] : [],
+    params: operation.parameter ? [operation.parameter, ...operation.name === "create_credit_checkout" ? ["idempotency_key?"] : []] : [],
     category: "execution",
     sideEffects: operation.mutates ? "local-process-or-remote-run" : "none",
     stable: true,
-    inputSchema: objectSchema(operation.parameter ? { [operation.parameter]: stringSchema("Server resource identifier.") } : {}, operation.parameter ? [operation.parameter] : []),
+    inputSchema: objectSchema(operation.parameter ? { [operation.parameter]: stringSchema("Server resource identifier."), ...operation.name === "create_credit_checkout" ? { idempotency_key: { type: "string", pattern: "^[A-Za-z0-9._:-]{8,255}$", description: "Caller-owned key retained before submission; reuse only for explicit recovery of the same server/account/pack." } } : {} } : {}, operation.parameter ? [operation.parameter] : []),
     outputSchema: { oneOf: [objectSchema({}, [], "Server response.", true), { type: "array", items: objectSchema({}, [], "Server record.", true) }] }
   }));
   remoteCustomerContracts.push({
@@ -53535,7 +53765,7 @@ import { closeSync as closeSync11, fstatSync as fstatSync11, openSync as openSyn
 import { O_NOFOLLOW as O_NOFOLLOW3, O_NONBLOCK as O_NONBLOCK3, O_RDONLY as O_RDONLY3 } from "constants";
 import { createRequire as createRequire2 } from "module";
 import { hostname as osHostname2 } from "os";
-import { isAbsolute as isAbsolute6, join as join22 } from "path";
+import { isAbsolute as isAbsolute7, join as join22 } from "path";
 import { createRequire as createRequire22 } from "module";
 function envToken2(name) {
   return name.toUpperCase().replace(/-/g, "_");
@@ -53559,7 +53789,7 @@ function homeDir2(env) {
 }
 function absoluteOverride2(env, key) {
   const value = env[key]?.trim();
-  return value && isAbsolute6(value) ? value : null;
+  return value && isAbsolute7(value) ? value : null;
 }
 function hasnaHomeDir2(env) {
   const override = absoluteOverride2(env, HASNA_HOME_ENV_KEY2);
@@ -54696,7 +54926,7 @@ function createSecretsClientFromEnv(env = process.env, overrides = {}) {
   });
   return new SecretsClient({ ...clientOverrides, baseUrl, apiKey });
 }
-var __esm2 = (fn, res) => () => (fn && (res = fn(fn = 0)), res), CREDENTIAL_PROFILE_ENV_KEY2 = "HASNA_PROFILE", CredentialResolutionError2, CredentialFileUnsafeError2, HASNA_HOME_ENV_KEY2 = "HASNA_HOME", HASNA_CONFIG_HOME_ENV_KEY2 = "HASNA_CONFIG_HOME", KEYCHAIN_STATION_ENV_KEY2 = "HASNA_STATION", HASNA_HOME_DIR2 = ".hasna", CONFIG_SUBDIR2 = "config", CREDENTIALS_FILE2 = "credentials", KEYCHAIN_SECURITY_BIN2 = "/usr/bin/security", KEYCHAIN_SERVICE_PREFIX2 = "hasna.credentials", KEYCHAIN_ITEM_NOT_FOUND_STATUS2 = 44, KEYCHAIN_SPAWN_TIMEOUT_MS2 = 1e4, MAX_CREDENTIAL_FILE_BYTES2, SAFE_APP_SLUG2, SAFE_PROFILE2, ILLEGAL_IN_HEADER_VALUE2, VAULT_POINTER_SHAPE2, CREDENTIAL_SHAPED_KEY2, INSPECT_CUSTOM2, CREDENTIAL_SEAL2, CALLER_SUPPLIED_CREDENTIAL_PROVIDER_SOURCE = "caller-supplied CredentialProvider", AMBIENT_ENVIRONMENT2, SECRETS_PACKAGE_SPECIFIER, requireSecretsSdk2, DEFAULT_FLEET_GATEWAY_ORIGIN2 = "https://api.hasna.com", DEFAULT_AUTHORITY_SOURCE = "default", ASCII_CONTROL_PATTERN2, DNS_LABEL_PATTERN2, ClientTransportConfigurationError2, HasnaHttpError, DEFAULT_RETRY_STATUSES, IDEMPOTENT_METHODS2, AUTHORITY_OVERRIDE_HEADERS2, defaultSleep = (ms) => new Promise((resolve5) => setTimeout(resolve5, ms)), init_transport2, MAX_CREDENTIAL_FILE_BYTES22, INSPECT_CUSTOM22, CREDENTIAL_SEAL22, AMBIENT_ENVIRONMENT22, SECRETS_PACKAGE_SPECIFIER2, requireSecretsSdk22, IDEMPOTENT_METHODS22, AUTHORITY_OVERRIDE_HEADERS22, init_storage, PATHS_RESOLVER_APP_SLUG_RE2, SQLITE_SIDECAR_FILES, LEGACY_SERVICE_FILES, init_data_dir, SecretsTestIsolationError, TEST_ENTRYPOINT_RE, init_test_isolation, init_client, ApiError;
+var __esm2 = (fn, res) => () => (fn && (res = fn(fn = 0)), res), CREDENTIAL_PROFILE_ENV_KEY2 = "HASNA_PROFILE", CredentialResolutionError2, CredentialFileUnsafeError2, HASNA_HOME_ENV_KEY2 = "HASNA_HOME", HASNA_CONFIG_HOME_ENV_KEY2 = "HASNA_CONFIG_HOME", KEYCHAIN_STATION_ENV_KEY2 = "HASNA_STATION", HASNA_HOME_DIR2 = ".hasna", CONFIG_SUBDIR2 = "config", CREDENTIALS_FILE2 = "credentials", KEYCHAIN_SECURITY_BIN2 = "/usr/bin/security", KEYCHAIN_SERVICE_PREFIX2 = "hasna.credentials", KEYCHAIN_ITEM_NOT_FOUND_STATUS2 = 44, KEYCHAIN_SPAWN_TIMEOUT_MS2 = 1e4, MAX_CREDENTIAL_FILE_BYTES2, SAFE_APP_SLUG2, SAFE_PROFILE2, ILLEGAL_IN_HEADER_VALUE2, VAULT_POINTER_SHAPE2, CREDENTIAL_SHAPED_KEY2, INSPECT_CUSTOM2, CREDENTIAL_SEAL2, CALLER_SUPPLIED_CREDENTIAL_PROVIDER_SOURCE = "caller-supplied CredentialProvider", AMBIENT_ENVIRONMENT2, SECRETS_PACKAGE_SPECIFIER, requireSecretsSdk2, DEFAULT_FLEET_GATEWAY_ORIGIN2 = "https://api.hasna.com", DEFAULT_AUTHORITY_SOURCE = "default", ASCII_CONTROL_PATTERN2, DNS_LABEL_PATTERN2, ClientTransportConfigurationError2, HasnaHttpError, DEFAULT_RETRY_STATUSES, IDEMPOTENT_METHODS2, AUTHORITY_OVERRIDE_HEADERS2, defaultSleep = (ms) => new Promise((resolve6) => setTimeout(resolve6, ms)), init_transport2, MAX_CREDENTIAL_FILE_BYTES22, INSPECT_CUSTOM22, CREDENTIAL_SEAL22, AMBIENT_ENVIRONMENT22, SECRETS_PACKAGE_SPECIFIER2, requireSecretsSdk22, IDEMPOTENT_METHODS22, AUTHORITY_OVERRIDE_HEADERS22, init_storage, PATHS_RESOLVER_APP_SLUG_RE2, SQLITE_SIDECAR_FILES, LEGACY_SERVICE_FILES, init_data_dir, SecretsTestIsolationError, TEST_ENTRYPOINT_RE, init_test_isolation, init_client, ApiError;
 var init_sdk = __esm(() => {
   init_transport2 = __esm2(() => {
     CredentialResolutionError2 = class CredentialResolutionError3 extends Error {
@@ -55011,7 +55241,7 @@ var init_execution_grants = __esm(() => {
 });
 
 // src/lib/execution-grant-client.ts
-import { isDeepStrictEqual } from "util";
+import { isDeepStrictEqual as isDeepStrictEqual2 } from "util";
 function id(value) {
   if (!grantIdentifier(value))
     throw new Error("Invalid execution grant profile or revision identifier.");
@@ -55054,7 +55284,7 @@ async function resolveExecutionGrant(input2) {
   if (!grantRecord(value) || Object.keys(value).length !== 3 || !grantIdentifier(value.policyRevision) || !grantIdentifier(value.grantId) || !grantRecord(value.bindings)) {
     throw new SkillSelectionError("INVALID_EXECUTION_GRANT", "The Skills API returned an invalid execution grant.");
   }
-  if (!isDeepStrictEqual(value.bindings.selection, snapshot.selection) || !isDeepStrictEqual(value.bindings.consumer, snapshot.consumer)) {
+  if (!isDeepStrictEqual2(value.bindings.selection, snapshot.selection) || !isDeepStrictEqual2(value.bindings.consumer, snapshot.consumer)) {
     throw new SkillSelectionError("EXECUTION_GRANT_SCOPE_MISMATCH", "The Skills API returned a grant for a different selection or consumer.");
   }
   return value;
@@ -55076,7 +55306,7 @@ __export(exports_selected_run, {
 import { createHash as createHash9 } from "crypto";
 import { spawn } from "child_process";
 import { mkdirSync as mkdirSync12, mkdtempSync as mkdtempSync3, writeFileSync as writeFileSync10, realpathSync as realpathSync6 } from "fs";
-import { dirname as dirname8, join as join23, resolve as resolve5 } from "path";
+import { dirname as dirname8, join as join23, resolve as resolve6 } from "path";
 import { tmpdir, hostname as stationHostname2 } from "os";
 async function resolveSelectedRun(spec, profileId, options = {}) {
   const context2 = await resolveSelectionContext(profileId, options);
@@ -55169,7 +55399,7 @@ async function executeSelectedLocal(selected, options = {}) {
     writeFileSync10(destination, entry.bytes, { flag: "wx", mode: entry.mode & 511 });
   }
   env.SKILLS_INPUT_JSON = input2;
-  env.SKILLS_WORKSPACE_DIR = resolve5(options.cwd ?? process.cwd());
+  env.SKILLS_WORKSPACE_DIR = resolve6(options.cwd ?? process.cwd());
   env.SKILLS_RUN_DIR = runDirectory;
   if (runtime.version) {
     const version2 = await subprocess([executable, ...runtimeName === "bun" ? ["--no-env-file"] : [], "--version"], runDirectory, env, "", Math.min(timeoutMs, 5000));
@@ -56930,11 +57160,11 @@ var init_private_publication_customer = __esm(() => {
 });
 
 // src/lib/private-publication-recovery.ts
-import { constants as constants9, closeSync as closeSync13, fsyncSync as fsyncSync3, fstatSync as fstatSync13, lstatSync as lstatSync11, mkdirSync as mkdirSync16, openSync as openSync13, readSync as readSync7, realpathSync as realpathSync7, renameSync as renameSync7, unlinkSync as unlinkSync6, writeFileSync as writeFileSync13 } from "fs";
-import { dirname as dirname11, isAbsolute as isAbsolute7, join as join28, resolve as resolve6 } from "path";
+import { constants as constants9, closeSync as closeSync13, fsyncSync as fsyncSync4, fstatSync as fstatSync13, lstatSync as lstatSync11, mkdirSync as mkdirSync16, openSync as openSync13, readSync as readSync7, realpathSync as realpathSync7, renameSync as renameSync7, unlinkSync as unlinkSync6, writeFileSync as writeFileSync13 } from "fs";
+import { dirname as dirname11, isAbsolute as isAbsolute8, join as join28, resolve as resolve7 } from "path";
 import { randomUUID as randomUUID3 } from "crypto";
 function safeDirectory(directory2) {
-  if (!isAbsolute7(directory2) || directory2 !== resolve6(directory2) || realpathSync7(directory2) !== directory2)
+  if (!isAbsolute8(directory2) || directory2 !== resolve7(directory2) || realpathSync7(directory2) !== directory2)
     return fail2();
   for (let path = directory2;; path = dirname11(path)) {
     const stat2 = lstatSync11(path);
@@ -56981,7 +57211,7 @@ function writeOwned(directory2, name, bytes) {
   const fd = openSync13(join28(directory2, name), constants9.O_WRONLY | constants9.O_CREAT | constants9.O_EXCL | constants9.O_NOFOLLOW, 384);
   try {
     writeFileSync13(fd, bytes);
-    fsyncSync3(fd);
+    fsyncSync4(fd);
   } finally {
     closeSync13(fd);
   }
@@ -56994,7 +57224,7 @@ function save(directory2, value) {
   renameSync7(join28(directory2, temporary), join28(directory2, "receipt.json"));
   const fd = openSync13(directory2, constants9.O_RDONLY | constants9.O_NOFOLLOW);
   try {
-    fsyncSync3(fd);
+    fsyncSync4(fd);
   } finally {
     closeSync13(fd);
   }
@@ -57015,7 +57245,7 @@ async function locked(directory2, action) {
   try {
     writeFileSync13(fd, JSON.stringify({ pid: process.pid }) + `
 `);
-    fsyncSync3(fd);
+    fsyncSync4(fd);
     return await action();
   } finally {
     closeSync13(fd);
@@ -57072,13 +57302,13 @@ async function preparePrivatePublication(client, sourceDirectory, recoveryDirect
     phase: "prepared",
     intent: null
   };
-  if (!isAbsolute7(recoveryDirectory) || resolve6(recoveryDirectory) !== recoveryDirectory || realpathSync7(dirname11(recoveryDirectory)) !== dirname11(recoveryDirectory))
+  if (!isAbsolute8(recoveryDirectory) || resolve7(recoveryDirectory) !== recoveryDirectory || realpathSync7(dirname11(recoveryDirectory)) !== dirname11(recoveryDirectory))
     return fail2();
   mkdirSync16(recoveryDirectory, { mode: 448 });
   safeDirectory(recoveryDirectory);
   const parent = openSync13(dirname11(recoveryDirectory), constants9.O_RDONLY | constants9.O_NOFOLLOW);
   try {
-    fsyncSync3(parent);
+    fsyncSync4(parent);
   } finally {
     closeSync13(parent);
   }
@@ -57173,10 +57403,10 @@ var init_private_publication_recovery = __esm(() => {
 });
 
 // src/mcp/private-publication-tools.ts
-import { isAbsolute as isAbsolute8 } from "path";
+import { isAbsolute as isAbsolute9 } from "path";
 function registerPrivatePublicationTools(server) {
   const uuid9 = exports_external.string().regex(/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/);
-  const directory2 = exports_external.string().max(4096).refine(isAbsolute8, "Use an absolute local directory");
+  const directory2 = exports_external.string().max(4096).refine(isAbsolute9, "Use an absolute local directory");
   const verification2 = { email: exports_external.string().email().max(254), code: exports_external.string().regex(/^\d{6}$/), userId: uuid9, membershipId: uuid9, recoveryDirectory: directory2 };
   const description = "Manage a private source publication using fresh workspace-bound verification and a host-local recovery directory. Publishing requires explicit UUID current-version comparison and upload consent. Resume reuses immutable saved bytes and intent; an uncertain PUT is finalized for server verification, never uploaded twice. Sessions and signed URLs are not returned or persisted. Private execution is unavailable. Host request history may contain the supplied verification code.";
   const handler = (action) => async (value) => {
@@ -57331,6 +57561,14 @@ function registerRemoteCustomerTools(server) {
     });
   }
   for (const operation of REMOTE_CUSTOMER_OPERATIONS) {
+    if (operation.name === "create_credit_checkout") {
+      server.registerTool(operation.name, {
+        title: operation.title,
+        description: "Create one external checkout link on the selected Skills server. Retain an idempotency_key before calling and reuse it only for explicit recovery on the same server, account and pack. No automatic retries; payment requires customer confirmation.",
+        inputSchema: { pack_id: exports_external.string().min(1), idempotency_key: exports_external.string().regex(/^[A-Za-z0-9._:-]{8,255}$/).optional() }
+      }, ({ pack_id, idempotency_key }) => callRemote((client) => operation.invoke(client, pack_id, { idempotencyKey: idempotency_key })));
+      continue;
+    }
     const inputSchema = {};
     if (operation.parameter)
       inputSchema[operation.parameter] = exports_external.string().min(1);
@@ -57407,6 +57645,15 @@ async function callRemote(action) {
       return mcpError("AUTH_REQUIRED", "Configure a Skills API and sign in with skills auth login");
     return mcpJson(await action(client));
   } catch (error61) {
+    if (error61 instanceof RemoteCreditCheckoutError) {
+      return { ...mcpJson({
+        code: error61.code,
+        message: error61.message,
+        status: error61.status,
+        requestIdempotencyKey: error61.requestIdempotencyKey,
+        ...error61.retryAfterSeconds === undefined ? {} : { retryAfterSeconds: error61.retryAfterSeconds }
+      }), isError: true };
+    }
     if (error61 instanceof RemoteCapabilityUnavailableError) {
       return { ...mcpJson({ code: error61.code, message: error61.message, status: error61.status }), isError: true };
     }
@@ -57871,7 +58118,7 @@ var RequestError, nonJoinedHeaders, validHeaderName, isHttpWhitespace = (code2)
     request2[bodyBufferKey] = buffered;
     return Promise.resolve(buffered);
   }
-  const promise3 = new Promise((resolve7, reject) => {
+  const promise3 = new Promise((resolve8, reject) => {
     const chunks = [];
     let settled = false;
     const finish = (callback) => {
@@ -57893,7 +58140,7 @@ var RequestError, nonJoinedHeaders, validHeaderName, isHttpWhitespace = (code2)
           reject(error61 ?? normalizeAbortError(request2, incoming));
         else {
           request2[bodyBufferKey] = recovered;
-          resolve7(recovered);
+          resolve8(recovered);
         }
       });
       return true;
@@ -57905,7 +58152,7 @@ var RequestError, nonJoinedHeaders, validHeaderName, isHttpWhitespace = (code2)
       finish(() => {
         const buffer = chunks.length === 1 ? chunks[0] : Buffer.concat(chunks);
         request2[bodyBufferKey] = buffer;
-        resolve7(buffer);
+        resolve8(buffer);
       });
     };
     const onError = (error61) => {
@@ -58179,7 +58426,7 @@ var RequestError, nonJoinedHeaders, validHeaderName, isHttpWhitespace = (code2)
         });
         if (!chunk) {
           if (i === 1) {
-            await new Promise((resolve7) => setTimeout(resolve7));
+            await new Promise((resolve8) => setTimeout(resolve8));
             maxReadCount = 3;
             continue;
           }
@@ -59409,9 +59656,9 @@ data:
       const initRequest = messages.find((m) => isInitializeRequest(m));
       const clientProtocolVersion = initRequest ? initRequest.params.protocolVersion : req.headers.get("mcp-protocol-version") ?? DEFAULT_NEGOTIATED_PROTOCOL_VERSION;
       if (this._enableJsonResponse) {
-        return new Promise((resolve7) => {
+        return new Promise((resolve8) => {
           this._streamMapping.set(streamId, {
-            resolveJson: resolve7,
+            resolveJson: resolve8,
             cleanup: () => {
               this._streamMapping.delete(streamId);
             }
@@ -59780,19 +60027,19 @@ async function connectMcpForNode() {
   return { server: server2, transport };
 }
 function readBody(req) {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve8, reject) => {
     const chunks = [];
     req.on("data", (chunk) => chunks.push(Buffer.from(chunk)));
     req.on("end", () => {
       const raw = Buffer.concat(chunks).toString("utf-8");
       if (!raw.trim()) {
-        resolve7(undefined);
+        resolve8(undefined);
         return;
       }
       try {
-        resolve7(JSON.parse(raw));
+        resolve8(JSON.parse(raw));
       } catch {
-        resolve7(undefined);
+        resolve8(undefined);
       }
     });
     req.on("error", reject);
@@ -59834,9 +60081,9 @@ async function startSkillsMcpHttpServer(options = {}) {
       }
     }
   });
-  await new Promise((resolve7, reject) => {
+  await new Promise((resolve8, reject) => {
     httpServer.once("error", reject);
-    httpServer.listen(port, hostname3, () => resolve7());
+    httpServer.listen(port, hostname3, () => resolve8());
   });
   const address = httpServer.address();
   const listenPort = typeof address === "object" && address ? address.port : port;