@hasna/skills 0.8.11 → 0.8.12

package/bin/index.js

@@ -36868,7 +36868,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.8.11",
+    version: "0.8.12",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -43298,7 +43298,9 @@ function assertAgentPolicyCollections(policy) {
       text(source.path);
       requireBound(source.sha256 === null || typeof source.sha256 === "string" && /^[a-f0-9]{64}$/.test(source.sha256));
       if (source.hashMode !== undefined)
-        requireBound(["bytes", "path-bytes", "claude-plugin-registry", "claude-marketplace-registry"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
+        requireBound(["bytes", "path-bytes", "claude-plugin-registry", "claude-marketplace-registry", "claude-settings-v1"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
+      if (source.hashMode === "claude-settings-v1")
+        requireBound(agent === "claude" && value.agent === "claude" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute3(source.path) && resolve5(source.path) === source.path && basename3(source.path) === "settings.json");
       if (source.hashMode === "claude-marketplace-registry")
         requireBound(agent === "claude" && value.agent === "claude" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute3(source.path) && resolve5(source.path) === source.path && basename3(source.path) === "known_marketplaces.json");
       if (source.hashMode === "claude-plugin-registry") {
@@ -54505,10 +54507,232 @@ var init_claude_marketplace_registry = __esm(() => {
   CLAUDE_MARKETPLACE_REGISTRY_LIMITS = Object.freeze({ bytes: 1024 * 1024, rows: 1024, depth: 32, nodes: 65536, stringCharacters: 16384, pathCharacters: 4096 });
 });
 
-// src/lib/agent-discovery.ts
+// src/lib/claude-settings-witness.ts
 import { createHash as createHash12 } from "crypto";
-import { lstatSync as lstatSync16, readFileSync as readFileSync14, readdirSync as readdirSync9, realpathSync as realpathSync4 } from "fs";
-import { dirname as dirname13, isAbsolute as isAbsolute13, join as join28, resolve as resolve14, sep as sep5 } from "path";
+import { closeSync as closeSync10, constants as constants10, fstatSync as fstatSync10, lstatSync as lstatSync16, openSync as openSync10, readSync as readSync8 } from "fs";
+import { basename as basename7, dirname as dirname13, isAbsolute as isAbsolute13, resolve as resolve14 } from "path";
+function need3(value, reason) {
+  if (!value)
+    throw new Error(`Claude settings witness ${reason}`);
+}
+function absolutePath2(value) {
+  need3(typeof value === "string" && value.length > 0 && value.length <= CLAUDE_SETTINGS_WITNESS_LIMITS.pathCharacters && !/[\x00-\x1f\x7f]/.test(value) && isAbsolute13(value) && resolve14(value) === value, "requires a normalized absolute path");
+}
+function parents2(path) {
+  const result2 = [];
+  for (let at2 = dirname13(path);; at2 = dirname13(at2)) {
+    const stat2 = lstatSync16(at2, { bigint: true });
+    need3(stat2.isDirectory() && !stat2.isSymbolicLink(), "path traverses a symlink or non-directory");
+    result2.push([at2, stat2]);
+    if (at2 === dirname13(at2))
+      return result2;
+  }
+}
+function readSettings(path, budget) {
+  absolutePath2(path);
+  need3(basename7(path) === "settings.json", "requires settings.json");
+  need3(Number.isSafeInteger(budget.remaining) && budget.remaining >= 0, "has an invalid byte budget");
+  const ancestors2 = parents2(path), initial2 = lstatSync16(path, { bigint: true });
+  need3(initial2.isFile() && !initial2.isSymbolicLink() && initial2.size <= BigInt(CLAUDE_SETTINGS_WITNESS_LIMITS.bytes), "is not a bounded regular file");
+  need3(initial2.size <= BigInt(budget.remaining), "exceeds its aggregate byte limit");
+  const fd = openSync10(path, constants10.O_RDONLY | constants10.O_NOFOLLOW | constants10.O_NONBLOCK);
+  try {
+    const opened = fstatSync10(fd, { bigint: true });
+    need3(opened.isFile() && sameFile2(initial2, opened), "changed during open");
+    const bytes = Buffer.alloc(Number(opened.size) + 1);
+    let length = 0;
+    while (length < bytes.length) {
+      const count = readSync8(fd, bytes, length, bytes.length - length, null);
+      if (!count)
+        break;
+      length += count;
+    }
+    const after2 = fstatSync10(fd, { bigint: true }), current = lstatSync16(path, { bigint: true });
+    need3(current.isFile() && sameFile2(opened, after2) && sameFile2(after2, current) && BigInt(length) === opened.size, "changed during read");
+    for (const [ancestor, before2] of ancestors2) {
+      const now3 = lstatSync16(ancestor, { bigint: true });
+      need3(now3.isDirectory() && before2.dev === now3.dev && before2.ino === now3.ino && before2.mode === now3.mode, "parent changed during read");
+    }
+    budget.remaining -= length;
+    try {
+      return new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(bytes.subarray(0, length));
+    } catch {
+      throw new Error("Claude settings witness is not strict UTF-8");
+    }
+  } finally {
+    closeSync10(fd);
+  }
+}
+function parse6(text2) {
+  let at2 = 0, nodes = 0;
+  const numberPattern = /-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/y;
+  const space = () => {
+    while (at2 < text2.length && /[\x20\t\r\n]/.test(text2[at2]))
+      at2++;
+  };
+  function string() {
+    need3(text2[at2] === '"', "contains invalid JSON");
+    const start = at2++;
+    while (at2 < text2.length) {
+      const character = text2[at2++];
+      if (character === '"') {
+        let value2;
+        try {
+          value2 = JSON.parse(text2.slice(start, at2));
+        } catch {
+          throw new Error("Claude settings witness contains invalid JSON string");
+        }
+        need3(value2.length <= CLAUDE_SETTINGS_WITNESS_LIMITS.stringCharacters, "exceeds its string limit");
+        return value2;
+      }
+      if (character === "\\")
+        at2++;
+    }
+    throw new Error("Claude settings witness contains an unterminated JSON string");
+  }
+  function value(depth) {
+    need3(depth <= CLAUDE_SETTINGS_WITNESS_LIMITS.depth && ++nodes <= CLAUDE_SETTINGS_WITNESS_LIMITS.nodes, "exceeds its nesting or node limit");
+    space();
+    const character = text2[at2];
+    if (character === '"')
+      return { kind: "string", value: string() };
+    if (character === "{" || character === "[") {
+      at2++;
+      space();
+      const object4 = character === "{", end = object4 ? "}" : "]", entries = [], items = [], keys2 = new Set;
+      if (text2[at2] !== end)
+        while (true) {
+          if (object4) {
+            space();
+            const key = string();
+            need3(!keys2.has(key), "contains a duplicate JSON key");
+            keys2.add(key);
+            space();
+            need3(text2[at2++] === ":", "contains invalid JSON");
+            entries.push([key, value(depth + 1)]);
+          } else
+            items.push(value(depth + 1));
+          space();
+          if (text2[at2] === end)
+            break;
+          need3(text2[at2++] === ",", "contains invalid JSON");
+        }
+      at2++;
+      return object4 ? { kind: "object", entries } : { kind: "array", items };
+    }
+    for (const literal of ["true", "false", "null"])
+      if (text2.startsWith(literal, at2)) {
+        at2 += literal.length;
+        return { kind: "literal", value: literal };
+      }
+    numberPattern.lastIndex = at2;
+    const number = numberPattern.exec(text2);
+    need3(number, "contains invalid JSON");
+    at2 += number[0].length;
+    return { kind: "number", value: number[0] };
+  }
+  const root2 = value(0);
+  space();
+  need3(at2 === text2.length && root2.kind === "object", "requires a JSON object without trailing content");
+  need3(root2.entries.length <= CLAUDE_SETTINGS_WITNESS_LIMITS.rows, "exceeds its settings field limit");
+  return root2;
+}
+function canonical3(value) {
+  if (value.kind === "object")
+    return { kind: "object", entries: value.entries.map(([key, child]) => [key, canonical3(child)]).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0) };
+  if (value.kind === "array")
+    return { kind: "array", items: value.items.map(canonical3) };
+  return value;
+}
+function settingsDigest(text2) {
+  const value = parse6(text2);
+  value.entries = value.entries.filter(([key, child]) => {
+    if (key === "model") {
+      need3(child.kind === "string", "contains an invalid model selection");
+      return !BUILTIN_MODEL_SELECTIONS.has(child.value);
+    }
+    if (BOOLEAN_PREFERENCES.has(key)) {
+      need3(child.kind === "literal" && (child.value === "true" || child.value === "false"), "contains an invalid display preference");
+      return false;
+    }
+    if (Object.hasOwn(ENUM_PREFERENCES, key)) {
+      need3(child.kind === "string" && ENUM_PREFERENCES[key].includes(child.value), "contains an invalid display preference");
+      return false;
+    }
+    return true;
+  });
+  return createHash12("sha256").update("hasna.skills.claude-settings.v1\x00").update(JSON.stringify(canonical3(value))).digest("hex");
+}
+function hashClaudeSettingsReplacement(text2, budget) {
+  need3(typeof text2 === "string", "requires settings text");
+  const bytes = Buffer.byteLength(text2);
+  need3(bytes <= CLAUDE_SETTINGS_WITNESS_LIMITS.bytes && Number.isSafeInteger(budget.remaining) && budget.remaining >= bytes, "exceeds its byte limit");
+  budget.remaining -= bytes;
+  return settingsDigest(text2);
+}
+function captureClaudeSettings(path, budget = { remaining: 256 * 1024 * 1024 }) {
+  return { path, hashMode: "claude-settings-v1", sha256: settingsDigest(readSettings(path, budget)) };
+}
+var CLAUDE_SETTINGS_WITNESS_LIMITS, sameFile2 = (a, b) => a.dev === b.dev && a.ino === b.ino && a.mode === b.mode && a.uid === b.uid && a.gid === b.gid && a.nlink === b.nlink && a.size === b.size && a.mtimeNs === b.mtimeNs && a.ctimeNs === b.ctimeNs, BOOLEAN_PREFERENCES, ENUM_PREFERENCES, BUILTIN_MODEL_SELECTIONS;
+var init_claude_settings_witness = __esm(() => {
+  CLAUDE_SETTINGS_WITNESS_LIMITS = Object.freeze({ bytes: 1024 * 1024, rows: 1024, depth: 32, nodes: 65536, stringCharacters: 16384, pathCharacters: 4096 });
+  BOOLEAN_PREFERENCES = new Set([
+    "autoScrollEnabled",
+    "axScreenReader",
+    "emojiCompletionEnabled",
+    "prefersReducedMotion",
+    "showTurnDuration",
+    "spinnerTipsEnabled",
+    "syntaxHighlightingDisabled",
+    "terminalProgressBarEnabled",
+    "terminalTitleFromRename",
+    "verbose",
+    "wheelScrollAccelerationEnabled"
+  ]);
+  ENUM_PREFERENCES = Object.freeze({
+    editorMode: ["normal", "vim"],
+    tui: ["default", "fullscreen"],
+    viewMode: ["default", "verbose", "focus"]
+  });
+  BUILTIN_MODEL_SELECTIONS = new Set([
+    "default",
+    "best",
+    "fable",
+    "fable[1m]",
+    "sonnet",
+    "sonnet[1m]",
+    "opus",
+    "opus[1m]",
+    "haiku",
+    "opusplan",
+    "claude-fable-5-1",
+    "claude-fable-5",
+    "claude-fable-5[1m]",
+    "claude-opus-5",
+    "claude-sonnet-5",
+    "claude-haiku-4-5-20251001",
+    "claude-opus-4-6",
+    "claude-sonnet-4-5",
+    "claude-sonnet-4-5-20250929",
+    "claude-opus-4-8",
+    "claude-opus-4-8[1m]",
+    "claude-opus-4-7",
+    "claude-sonnet-4-6",
+    "claude-opus-4-5-20251101",
+    "claude-opus-4-5",
+    "claude-haiku-4-5",
+    "claude-fable-5-1[1m]",
+    "claude-opus-5[1m]",
+    "claude-opus-4-7[1m]",
+    "claude-opus-4-6[1m]",
+    "claude-sonnet-4-6[1m]"
+  ]);
+});
+
+// src/lib/agent-discovery.ts
+import { createHash as createHash13 } from "crypto";
+import { lstatSync as lstatSync17, readFileSync as readFileSync14, readdirSync as readdirSync9, realpathSync as realpathSync4 } from "fs";
+import { basename as basename8, dirname as dirname14, isAbsolute as isAbsolute14, join as join28, resolve as resolve15, sep as sep5 } from "path";
 function parseConfig(text2, path, toml = false) {
   try {
     const value = toml ? Bun.TOML.parse(text2) : JSON.parse(text2);
@@ -54520,12 +54744,12 @@ function parseConfig(text2, path, toml = false) {
   }
 }
 function safe4(path) {
-  if (!isAbsolute13(path) || path.includes("\x00"))
+  if (!isAbsolute14(path) || path.includes("\x00"))
     throw new Error("Expected an absolute native discovery path");
-  for (let cursor = path;; cursor = dirname13(cursor)) {
-    if (lstatSync16(cursor, { throwIfNoEntry: false })?.isSymbolicLink())
+  for (let cursor = path;; cursor = dirname14(cursor)) {
+    if (lstatSync17(cursor, { throwIfNoEntry: false })?.isSymbolicLink())
       throw new Error(`Refusing symlink native discovery input: ${cursor}`);
-    if (dirname13(cursor) === cursor)
+    if (dirname14(cursor) === cursor)
       break;
   }
 }
@@ -54533,7 +54757,7 @@ function read2(path, changes) {
   safe4(path);
   if (changes?.has(path))
     return changes.get(path);
-  const stat2 = lstatSync16(path, { throwIfNoEntry: false });
+  const stat2 = lstatSync17(path, { throwIfNoEntry: false });
   if (!stat2)
     return null;
   if (!stat2.isFile() || stat2.size > 16 * 1024 * 1024)
@@ -54541,6 +54765,14 @@ function read2(path, changes) {
   return readFileSync14(path, "utf8");
 }
 function projected(source, changes, budget = discoveryByteBudget()) {
+  if (source.hashMode === "claude-settings-v1") {
+    if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || typeof source.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(source.sha256))
+      throw new Error("Claude settings witnesses require exact typed metadata");
+    const current = captureClaudeSettings(source.path, budget).sha256;
+    if (current !== source.sha256)
+      throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
+    return changes?.has(source.path) ? hashClaudeSettingsReplacement(changes.get(source.path), budget) : current;
+  }
   if (source.hashMode === "claude-marketplace-registry") {
     if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || typeof source.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(source.sha256) || changes?.has(source.path))
       throw new Error("Claude marketplace witnesses require an exact reviewed registry without synthetic changes");
@@ -54598,6 +54830,8 @@ function verifyAgentDiscovery(binding) {
     safe4(root2);
 }
 function assertMarketplaceBinding(binding, source) {
+  if (source.hashMode === "claude-settings-v1" && (binding.agent !== "claude" || binding.method !== "reviewed" || basename8(source.path) !== "settings.json"))
+    throw new Error("Claude settings witnesses require explicit reviewed Claude configuration");
   if (source.hashMode === "claude-marketplace-registry" && (binding.agent !== "claude" || binding.method !== "reviewed"))
     throw new Error("Claude marketplace witnesses require explicit reviewed Claude discovery");
 }
@@ -54608,9 +54842,9 @@ function rebindAgentDiscovery(binding, changes) {
     return { ...source, sha256: projected(source, changes, budget) };
   }) };
 }
-function assertProjectDiscovery(agent, directories, home, canonical3 = resolve14, reviewed) {
+function assertProjectDiscovery(agent, directories, home, canonical4 = resolve15, reviewed) {
   for (const directory of directories) {
-    const isHome = resolve14(directory) === resolve14(home);
+    const isHome = resolve15(directory) === resolve15(home);
     if (agent === "hermes") {
       assertHermesEnvironment(home);
       continue;
@@ -54619,7 +54853,7 @@ function assertProjectDiscovery(agent, directories, home, canonical3 = resolve14
       continue;
     const paths = agent === "claude" ? [...isHome ? [] : [".claude/settings.json"], ".claude/settings.local.json"] : agent === "codex" ? [".codex/config.toml"] : agent === "gemini" ? [".gemini/settings.json"] : agent === "opencode" ? ["opencode.json", "opencode.jsonc", ".opencode/opencode.json", ".opencode/opencode.jsonc"] : [".cursor/hooks.json"];
     for (const suffix of paths) {
-      const path = canonical3(join28(directory, suffix)), raw = read2(path);
+      const path = canonical4(join28(directory, suffix)), raw = read2(path);
       if (raw === null)
         continue;
       if (suffix.endsWith(".jsonc"))
@@ -54632,25 +54866,25 @@ function assertProjectDiscovery(agent, directories, home, canonical3 = resolve14
         const managed = reviewed.sources.flatMap((source) => source.hashMode === "claude-plugin-registry" ? source.managedPlugins ?? [] : []);
         if (exact && projected(exact) === exact.sha256 && managed.length) {
           const bindings = managed.map((item) => readPluginBinding(item.storeRoot, item.bindingId));
-          admittedPlugins = Object.entries(config.enabledPlugins).every(([id, enabled]) => typeof enabled === "boolean" && bindings.some((binding) => binding.target.pluginId === id && binding.target.registrations.some((scope) => scope.scope === "project" && scope.projectPath === canonical3(directory))));
+          admittedPlugins = Object.entries(config.enabledPlugins).every(([id, enabled]) => typeof enabled === "boolean" && bindings.some((binding) => binding.target.pluginId === id && binding.target.registrations.some((scope) => scope.scope === "project" && scope.projectPath === canonical4(directory))));
         }
       }
       if (keys2.some((key) => config[key] !== undefined && !(key === "enabledPlugins" && admittedPlugins)) || config.disableAllHooks === true || config.disableBundledSkills === false || config.hooksConfig?.enabled === false || config.permission?.skill !== undefined || config.permissions?.deny?.some((rule) => typeof rule === "string" && /^Skill(?:\(|$)/.test(rule)))
         throw new Error(`NATIVE_SKILL_DRIFT: higher-precedence project skill or hook configuration requires review: ${path}`);
     }
     if (agent === "claude") {
-      const commands = canonical3(join28(directory, ".claude/commands"));
+      const commands = canonical4(join28(directory, ".claude/commands"));
       safe4(commands);
-      if (lstatSync16(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync9(commands).length)
+      if (lstatSync17(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync9(commands).length)
         throw new Error("NATIVE_SKILL_DRIFT: legacy project command discovery requires a dedicated format adapter");
     }
   }
 }
 function resolveAgentDiscovery(options) {
-  const canonical3 = options.canonical ?? resolve14, home = resolve14(options.home), agent = options.agent;
+  const canonical4 = options.canonical ?? resolve15, home = resolve15(options.home), agent = options.agent;
   const sources = [], roots = new Set, builtinNames = [];
   const witness = (path, format, fields) => {
-    const source = { path: canonical3(path), sha256: null, ...format ? { format, fields } : {} };
+    const source = { path: canonical4(path), sha256: null, ...format ? { format, fields } : {} };
     source.sha256 = projected(source);
     sources.push(source);
     return read2(source.path);
@@ -54678,7 +54912,7 @@ function resolveAgentDiscovery(options) {
         continue;
       if (normalized.startsWith("~") && normalized !== "~" && !normalized.startsWith("~/"))
         unresolved("user-specific tilde expansion requires a separate discovery adapter");
-      const path = normalized === "~" ? home : normalized.startsWith("~/") ? join28(home, normalized.slice(2)) : resolve14(home, ".hermes", normalized);
+      const path = normalized === "~" ? home : normalized.startsWith("~/") ? join28(home, normalized.slice(2)) : resolve15(home, ".hermes", normalized);
       safe4(path);
       roots.add(path);
     }
@@ -54687,21 +54921,21 @@ function resolveAgentDiscovery(options) {
     const executable = Bun.which("gemini");
     if (executable) {
       let packageRoot;
-      for (let directory = dirname13(realpathSync4(executable)), depth = 0;depth < 8; directory = dirname13(directory), depth++) {
+      for (let directory = dirname14(realpathSync4(executable)), depth = 0;depth < 8; directory = dirname14(directory), depth++) {
         const path = join28(directory, "package.json"), raw = read2(path);
         if (raw !== null && parseConfig(raw, path).name === "@google/gemini-cli") {
           packageRoot = directory;
           witness(path);
           break;
         }
-        if (dirname13(directory) === directory)
+        if (dirname14(directory) === directory)
           break;
       }
       if (!packageRoot)
         unresolved("installed Gemini package layout is not recognized");
       const builtinRoot = join28(packageRoot, "bundle/builtin");
       safe4(builtinRoot);
-      if (!lstatSync16(builtinRoot, { throwIfNoEntry: false })?.isDirectory())
+      if (!lstatSync17(builtinRoot, { throwIfNoEntry: false })?.isDirectory())
         unresolved("installed Gemini builtin root is missing");
       for (const name of readdirSync9(builtinRoot).sort()) {
         const text2 = witness(join28(builtinRoot, name, "SKILL.md"));
@@ -54722,12 +54956,14 @@ function resolveAgentDiscovery(options) {
     if (review.sources.some((source) => source.format !== undefined || source.fields !== undefined))
       throw new Error("Explicit discovery reviews require full source-file hashes");
     verifyAgentDiscovery(supplied);
-    if (!review.sources.some((source) => source.path === canonical3(configPath)))
+    if (review.sources.some((source) => source.hashMode === "claude-settings-v1" && source.path !== canonical4(configPath)))
+      throw new Error("Semantic settings witnesses must name the configured Claude configuration source");
+    if (!review.sources.some((source) => source.path === canonical4(configPath)))
       throw new Error("Discovery review must include the agent configuration source");
     return { ...supplied, roots: [...new Set([...roots, ...supplied.roots])].sort(), sources: [...sources, ...review.sources], ...agent === "gemini" ? { builtinNames } : {} };
   }
   function plugin(root2) {
-    root2 = canonical3(root2);
+    root2 = canonical4(root2);
     safe4(root2);
     const manifestPath = join28(root2, agent === "claude" ? ".claude-plugin/plugin.json" : ".codex-plugin/plugin.json");
     const raw = witness(manifestPath);
@@ -54739,7 +54975,7 @@ function resolveAgentDiscovery(options) {
       unresolved("plugin hooks require a separate no-skill-injection review");
     const commands = join28(root2, "commands");
     safe4(commands);
-    if (agent === "claude" && (manifest.commands !== undefined || lstatSync16(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync9(commands).length))
+    if (agent === "claude" && (manifest.commands !== undefined || lstatSync17(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync9(commands).length))
       unresolved("legacy command discovery requires retirement or a dedicated format adapter");
     const rootSkill = witness(join28(root2, "SKILL.md"));
     if (rootSkill !== null)
@@ -54750,18 +54986,18 @@ function resolveAgentDiscovery(options) {
     if (agent === "claude")
       roots.add(join28(root2, "skills"));
     for (const value of declared) {
-      const path = resolve14(root2, value);
+      const path = resolve15(root2, value);
       if (path !== root2 && !path.startsWith(root2 + sep5))
         unresolved("plugin skill path escapes its root");
-      roots.add(path.endsWith(`${sep5}SKILL.md`) ? dirname13(path) : path);
+      roots.add(path.endsWith(`${sep5}SKILL.md`) ? dirname14(path) : path);
     }
   }
   if (agent === "claude") {
     const registrations = witness(join28(home, ".claude/plugins/installed_plugins.json"));
     const installed = registrations === null ? {} : parseConfig(registrations, join28(home, ".claude/plugins/installed_plugins.json")).plugins;
-    const commands = canonical3(join28(home, ".claude/commands"));
+    const commands = canonical4(join28(home, ".claude/commands"));
     safe4(commands);
-    if (lstatSync16(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync9(commands).length)
+    if (lstatSync17(commands, { throwIfNoEntry: false })?.isDirectory() && readdirSync9(commands).length)
       unresolved("legacy home command discovery requires a dedicated format adapter");
     for (const [id, enabled] of Object.entries(config.enabledPlugins ?? {})) {
       if (enabled === false)
@@ -54781,7 +55017,7 @@ function resolveAgentDiscovery(options) {
         unresolved("unsupported plugin enablement");
       const split2 = id.lastIndexOf("@"), name = id.slice(0, split2), marketplace = id.slice(split2 + 1);
       const market = config.marketplaces?.[marketplace] ?? (marketplace === "personal" ? { source_type: "local", source: home } : undefined);
-      if (split2 < 1 || market?.source_type !== "local" || typeof market.source !== "string" || !isAbsolute13(market.source))
+      if (split2 < 1 || market?.source_type !== "local" || typeof market.source !== "string" || !isAbsolute14(market.source))
         unresolved("enabled plugin marketplace is not an explicit local source");
       const catalogText = witness(join28(market.source, ".agents/plugins/marketplace.json"));
       if (catalogText === null)
@@ -54789,7 +55025,7 @@ function resolveAgentDiscovery(options) {
       const catalog = parseConfig(catalogText, join28(market.source, ".agents/plugins/marketplace.json")), matches2 = Array.isArray(catalog.plugins) ? catalog.plugins.filter((item) => item.name === name) : [];
       if (matches2.length !== 1 || matches2[0]?.source?.source !== "local" || typeof matches2[0]?.source?.path !== "string")
         unresolved("plugin catalog source is missing or ambiguous");
-      plugin(resolve14(market.source, matches2[0].source.path));
+      plugin(resolve15(market.source, matches2[0].source.path));
     }
   } else if (agent === "opencode") {
     if (witness(join28(home, ".config/opencode/opencode.jsonc")) !== null || witness(join28(home, ".config/opencode/config.json")) !== null)
@@ -54797,18 +55033,18 @@ function resolveAgentDiscovery(options) {
     if ((config.plugin?.length ?? 0) > 0 || config.skills?.urls?.length)
       unresolved("external plugin or remote skill source");
     for (const path of config.skills?.paths ?? []) {
-      if (typeof path !== "string" || !isAbsolute13(path))
+      if (typeof path !== "string" || !isAbsolute14(path))
         unresolved("relative or malformed added skill root");
       roots.add(path);
     }
     const localPlugins = join28(home, ".config/opencode/plugins");
     safe4(localPlugins);
-    if (lstatSync16(localPlugins, { throwIfNoEntry: false }) && readdirSync9(localPlugins).some((name) => name !== "skills-cli.js"))
+    if (lstatSync17(localPlugins, { throwIfNoEntry: false }) && readdirSync9(localPlugins).some((name) => name !== "skills-cli.js"))
       unresolved("additional local plugin hooks require review");
   } else if (agent === "hermes") {
     for (const directory of [join28(home, ".hermes/plugins"), join28(home, ".hermes/hermes-agent")]) {
       safe4(directory);
-      if (lstatSync16(directory, { throwIfNoEntry: false }))
+      if (lstatSync17(directory, { throwIfNoEntry: false }))
         unresolved("installed runtime/plugin discovery requires reviewed source bindings");
     }
     if (Bun.which("hermes") || Object.keys(config.plugins ?? {}).length)
@@ -54818,11 +55054,11 @@ function resolveAgentDiscovery(options) {
       unresolved("custom extension or skill paths");
     const directory = join28(home, ".gemini/extensions");
     safe4(directory);
-    if (lstatSync16(directory, { throwIfNoEntry: false }))
+    if (lstatSync17(directory, { throwIfNoEntry: false }))
       for (const name of readdirSync9(directory)) {
         const root2 = join28(directory, name);
         safe4(root2);
-        if (!lstatSync16(root2)?.isDirectory())
+        if (!lstatSync17(root2)?.isDirectory())
           continue;
         const raw = witness(join28(root2, "gemini-extension.json"));
         if (raw === null)
@@ -54833,9 +55069,9 @@ function resolveAgentDiscovery(options) {
         roots.add(join28(root2, "skills"));
       }
   }
-  return { agent, roots: [...roots].sort(), sources, method: "automatic", ...agent === "gemini" ? { builtinNames } : {}, ...agent === "hermes" ? { directories: captureDiscoveryDirectories([join28(home, ".hermes/plugins"), join28(home, ".hermes/hermes-agent")].map((path) => canonical3(path))) } : {} };
+  return { agent, roots: [...roots].sort(), sources, method: "automatic", ...agent === "gemini" ? { builtinNames } : {}, ...agent === "hermes" ? { directories: captureDiscoveryDirectories([join28(home, ".hermes/plugins"), join28(home, ".hermes/hermes-agent")].map((path) => canonical4(path))) } : {} };
 }
-var digest = (text2) => createHash12("sha256").update(text2).digest("hex");
+var digest = (text2) => createHash13("sha256").update(text2).digest("hex");
 var init_agent_discovery = __esm(() => {
   init_agent_policy_limits();
   init_agent_hermes();
@@ -54845,6 +55081,7 @@ var init_agent_discovery = __esm(() => {
   init_plugin_discovery();
   init_plugin_admission();
   init_claude_marketplace_registry();
+  init_claude_settings_witness();
   init_agent_discovery_directories();
 });
 
@@ -55006,16 +55243,16 @@ var init_agent_codex = __esm(() => {
 });
 
 // src/lib/agent-integration.ts
-import { createHash as createHash13, randomUUID as randomUUID6 } from "crypto";
-import { existsSync as existsSync15, lstatSync as lstatSync17, statSync as statSync8, mkdirSync as mkdirSync7, readFileSync as readFileSync15, readdirSync as readdirSync10, opendirSync as opendirSync5, readlinkSync as readlinkSync2, realpathSync as realpathSync5, renameSync as renameSync4, rmdirSync as rmdirSync3, writeFileSync as writeFileSync5, unlinkSync as unlinkSync4, chmodSync, openSync as openSync10, closeSync as closeSync10, fsyncSync as fsyncSync3, fstatSync as fstatSync10, readSync as readSync8, constants as constants10, linkSync as linkSync2 } from "fs";
-import { dirname as dirname14, join as join29, resolve as resolve15, relative as relative5, isAbsolute as isAbsolute14, sep as sep6 } from "path";
+import { createHash as createHash14, randomUUID as randomUUID6 } from "crypto";
+import { existsSync as existsSync15, lstatSync as lstatSync18, statSync as statSync8, mkdirSync as mkdirSync7, readFileSync as readFileSync15, readdirSync as readdirSync10, opendirSync as opendirSync5, readlinkSync as readlinkSync2, realpathSync as realpathSync5, renameSync as renameSync4, rmdirSync as rmdirSync3, writeFileSync as writeFileSync5, unlinkSync as unlinkSync4, chmodSync, openSync as openSync11, closeSync as closeSync11, fsyncSync as fsyncSync3, fstatSync as fstatSync11, readSync as readSync9, constants as constants11, linkSync as linkSync2 } from "fs";
+import { dirname as dirname15, join as join29, resolve as resolve16, relative as relative5, isAbsolute as isAbsolute15, sep as sep6 } from "path";
 import { homedir as homedir4 } from "os";
 function assertSafePath(path) {
-  let cursor = resolve15(path);
+  let cursor = resolve16(path);
   while (true) {
-    if (lstatSync17(cursor, { throwIfNoEntry: false })?.isSymbolicLink())
+    if (lstatSync18(cursor, { throwIfNoEntry: false })?.isSymbolicLink())
       throw new Error(`Refusing symlink path: ${cursor}`);
-    const parent = dirname14(cursor);
+    const parent = dirname15(cursor);
     if (parent === cursor)
       return;
     cursor = parent;
@@ -55024,16 +55261,16 @@ function assertSafePath(path) {
 function readRootAlias(home, agent) {
   assertSafePath(home);
   const realHome = realpathSync5(home), alias = join29(realHome, `.${agent}`);
-  const stat2 = lstatSync17(alias, { throwIfNoEntry: false, bigint: true });
+  const stat2 = lstatSync18(alias, { throwIfNoEntry: false, bigint: true });
   if (!stat2?.isSymbolicLink())
     throw new Error(`Agent root alias changed after planning: ${alias}`);
-  const link2 = readlinkSync2(alias), targetPath = resolve15(dirname14(alias), link2);
+  const link2 = readlinkSync2(alias), targetPath = resolve16(dirname15(alias), link2);
   assertSafePath(targetPath);
-  const targetStat = lstatSync17(targetPath, { throwIfNoEntry: false });
+  const targetStat = lstatSync18(targetPath, { throwIfNoEntry: false });
   if (!targetStat?.isDirectory())
     throw new Error(`Agent root alias must target an existing directory: ${alias}`);
   const target = realpathSync5(targetPath), inside = relative5(realHome, target);
-  if (!inside || inside === ".." || inside.startsWith(`..${sep6}`) || isAbsolute14(inside))
+  if (!inside || inside === ".." || inside.startsWith(`..${sep6}`) || isAbsolute15(inside))
     throw new Error(`Agent root alias target must be inside the real home: ${alias}`);
   return { agent, home: realHome, alias, target, link: link2, aliasIdentity: `${stat2.dev}:${stat2.ino}:${stat2.ctimeNs}`, targetIdentity: `${targetStat.dev}:${targetStat.ino}` };
 }
@@ -55042,14 +55279,14 @@ function rootAliases(home, allowed = false) {
     return [];
   const result2 = [];
   for (const agent of ["claude", "codex"])
-    if (lstatSync17(join29(home, `.${agent}`), { throwIfNoEntry: false })?.isSymbolicLink())
+    if (lstatSync18(join29(home, `.${agent}`), { throwIfNoEntry: false })?.isSymbolicLink())
       result2.push(readRootAlias(home, agent));
   if (result2.some((item, index) => result2.slice(index + 1).some((other) => item.target === other.target || item.target.startsWith(other.target + sep6) || other.target.startsWith(item.target + sep6))))
     throw new Error("Agent root alias targets must not overlap");
   return result2;
 }
 function canonicalAgentPath(path, aliases) {
-  const absolute = resolve15(path), binding = aliases.find((item) => absolute === item.alias || absolute.startsWith(item.alias + sep6));
+  const absolute = resolve16(path), binding = aliases.find((item) => absolute === item.alias || absolute.startsWith(item.alias + sep6));
   return binding ? join29(binding.target, relative5(binding.alias, absolute)) : absolute;
 }
 function recheckRootAliases(aliases) {
@@ -55063,35 +55300,35 @@ function recheckRootAliases(aliases) {
 }
 function readNativeBytes(path, maximum = 64 * 1024 * 1024) {
   assertSafePath(path);
-  const before2 = lstatSync17(path);
+  const before2 = lstatSync18(path);
   if (!before2.isFile() || before2.size > maximum)
     throw new Error("Unsupported or oversized native skill file");
-  const descriptor = openSync10(path, constants10.O_RDONLY | constants10.O_NOFOLLOW | constants10.O_NONBLOCK);
+  const descriptor = openSync11(path, constants11.O_RDONLY | constants11.O_NOFOLLOW | constants11.O_NONBLOCK);
   try {
-    const opened = fstatSync10(descriptor);
+    const opened = fstatSync11(descriptor);
     if (!opened.isFile() || opened.dev !== before2.dev || opened.ino !== before2.ino || opened.size !== before2.size)
       throw new Error("Native skill file changed while reading");
     const bytes = Buffer.allocUnsafe(before2.size + 1);
     let length = 0;
     while (length < bytes.length) {
-      const count = readSync8(descriptor, bytes, length, bytes.length - length, null);
+      const count = readSync9(descriptor, bytes, length, bytes.length - length, null);
       if (!count)
         break;
       length += count;
     }
-    const after2 = fstatSync10(descriptor);
+    const after2 = fstatSync11(descriptor);
     if (length !== before2.size || after2.size !== before2.size || after2.mtimeMs !== opened.mtimeMs || after2.ctimeMs !== opened.ctimeMs)
       throw new Error("Native skill file changed while reading");
     return bytes.subarray(0, length);
   } finally {
-    closeSync10(descriptor);
+    closeSync11(descriptor);
   }
 }
 function treeHash(root2) {
-  const hash2 = createHash13("sha256");
+  const hash2 = createHash14("sha256");
   let bytes = 0, files = 0;
   function visit2(path) {
-    const stat2 = lstatSync17(path);
+    const stat2 = lstatSync18(path);
     if (stat2.isSymbolicLink())
       throw new Error(`Refusing symlink in skill: ${path}`);
     const rel = relative5(root2, path);
@@ -55117,11 +55354,11 @@ function treeHash(root2) {
 function projectAncestorDirectories(projects) {
   const directories = new Set;
   for (const project of projects) {
-    for (let path = resolve15(project), depth = 0;; depth++) {
+    for (let path = resolve16(project), depth = 0;; depth++) {
       if (depth >= 100)
         throw new Error("NATIVE_SKILL_DRIFT: project ancestor discovery limit exceeded");
       directories.add(path);
-      const parent = dirname14(path);
+      const parent = dirname15(path);
       if (parent === path)
         break;
       path = parent;
@@ -55148,10 +55385,10 @@ function inventoryNativeSkills(home = homedir4(), options = {}) {
       throw new Error("Native skill discovery metadata limit exceeded");
   }
   function emptySiblingCacheAlias(path, parent) {
-    const link2 = readlinkSync2(path), target = resolve15(parent, link2);
-    if (dirname14(target) !== parent || (isAbsolute14(link2) ? link2 !== target : dirname14(link2) !== "."))
+    const link2 = readlinkSync2(path), target = resolve16(parent, link2);
+    if (dirname15(target) !== parent || (isAbsolute15(link2) ? link2 !== target : dirname15(link2) !== "."))
       return false;
-    if (!lstatSync17(target, { throwIfNoEntry: false })?.isDirectory())
+    if (!lstatSync18(target, { throwIfNoEntry: false })?.isDirectory())
       return false;
     const scan = cacheScans.get(target);
     return Boolean(scan?.complete && !scan.hasSkills && scan.entries <= maxAliasProofEntries);
@@ -55163,7 +55400,7 @@ function inventoryNativeSkills(home = homedir4(), options = {}) {
     assertSafePath(path);
     if (!existsSync15(path))
       return scan;
-    const stat2 = lstatSync17(path);
+    const stat2 = lstatSync18(path);
     if (stat2.isFile())
       return scan;
     if (!stat2.isDirectory())
@@ -55182,7 +55419,7 @@ function inventoryNativeSkills(home = homedir4(), options = {}) {
       }
       const bridge = !vendor && isOwnedCliBridge(path, bridgePaths);
       const rootAlias = aliases.find((item) => path === item.target || path.startsWith(item.target + sep6));
-      entries.push({ agent, path, hash: treeHash(path), managed, vendor, ...agent === "codex" && path.startsWith(canonicalAgentPath(join29(home, ".codex", "skills", ".system"), aliases) + sep6) ? { system: true } : {}, ...bridge ? { bridge: true, bridgeHome: resolve15(home) } : {}, ...rootAlias ? { rootAlias } : {} });
+      entries.push({ agent, path, hash: treeHash(path), managed, vendor, ...agent === "codex" && path.startsWith(canonicalAgentPath(join29(home, ".codex", "skills", ".system"), aliases) + sep6) ? { system: true } : {}, ...bridge ? { bridge: true, bridgeHome: resolve16(home) } : {}, ...rootAlias ? { rootAlias } : {} });
       return scan;
     }
     if (depth > (vendor ? 32 : 3))
@@ -55209,7 +55446,7 @@ function inventoryNativeSkills(home = homedir4(), options = {}) {
       if (isVendor && !options.includeVendor)
         continue;
       const child = join29(path, name);
-      if (isVendor && lstatSync17(child, { throwIfNoEntry: false })?.isSymbolicLink()) {
+      if (isVendor && lstatSync18(child, { throwIfNoEntry: false })?.isSymbolicLink()) {
         const target = statSync8(child, { throwIfNoEntry: false });
         if (target?.isFile() || pluginCache && target?.isDirectory() && emptySiblingCacheAlias(child, path)) {
           scan.entries++;
@@ -55331,7 +55568,7 @@ function configureHooks(config, agent, command, profileId, nativeReady) {
 function disableCodexSkills(text2, skills, aliases, bridgePath) {
   const bundled = disableCodexBundledSkills(text2);
   let result2 = bundled;
-  const bridgeSelector = (entry) => typeof entry.name === "string" && entry.name.trim() === CLI_BRIDGE_NAME || typeof entry.path === "string" && [resolve15(bridgePath), resolve15(join29(bridgePath, "SKILL.md"))].includes(canonicalAgentPath(entry.path, aliases));
+  const bridgeSelector = (entry) => typeof entry.name === "string" && entry.name.trim() === CLI_BRIDGE_NAME || typeof entry.path === "string" && [resolve16(bridgePath), resolve16(join29(bridgePath, "SKILL.md"))].includes(canonicalAgentPath(entry.path, aliases));
   const previousConfig = Bun.TOML.parse(bundled).skills?.config;
   if (previousConfig !== undefined && (!Array.isArray(previousConfig) || previousConfig.some((entry) => !entry || typeof entry !== "object" || entry.path !== undefined && entry.name !== undefined)))
     throw new Error("Codex skill controls require one path or name selector per [[skills.config]] entry; review ambiguous entries before running skills hook install");
@@ -55343,7 +55580,7 @@ function disableCodexSkills(text2, skills, aliases, bridgePath) {
     result2 = result2.replace(CODEX_SKILL_CONFIG_SECTIONS, (section) => {
       const parsed = Bun.TOML.parse(section);
       const declared = parsed.skills?.config?.[0];
-      if (!declared || !(skill.enabled && bridgeSelector(declared)) && !(typeof declared.path === "string" && [resolve15(path), resolve15(skill.path)].includes(canonicalAgentPath(declared.path, aliases))))
+      if (!declared || !(skill.enabled && bridgeSelector(declared)) && !(typeof declared.path === "string" && [resolve16(path), resolve16(skill.path)].includes(canonicalAgentPath(declared.path, aliases))))
         return section;
       found = true;
       return /^\s*enabled\s*=/m.test(section) ? section.replace(/^\s*enabled\s*=.*$/m, `enabled = ${skill.enabled}`) : `${section.trimEnd()}
@@ -55461,7 +55698,7 @@ function planAgentIntegration(options) {
     version: CLI_BRIDGE_VERSION,
     digest: CLI_BRIDGE_DIGEST,
     agents: [...new Set([...priorAgents, ...options.agents])].sort(),
-    home: resolve15(home),
+    home: resolve16(home),
     includeVendor: true,
     ...options.agents.includes("hermes") ? { supervisors: { ...policy.bridge?.supervisors, hermes: { path: join29(dataDir3, "agent-hooks", "hermes.js"), runtime: process.execPath, sha256: sha(renderHermesSupervisor(bindings.get("hermes").command, bindings.get("hermes").profileId)) } } } : {},
     commands: { ...policy.bridge?.commands, ...Object.fromEntries([...bindings].map(([agent, binding]) => [agent, binding.command])) },
@@ -55478,7 +55715,7 @@ function planAgentIntegration(options) {
 }
 function atomicWrite2(path, content) {
   assertSafePath(path);
-  mkdirSync7(dirname14(path), { recursive: true, mode: 448 });
+  mkdirSync7(dirname15(path), { recursive: true, mode: 448 });
   const temporary = `${path}.skills-${randomUUID6()}`;
   try {
     writeFileSync5(temporary, content, { mode: 384, flag: "wx" });
@@ -55491,10 +55728,10 @@ function atomicWrite2(path, content) {
 function applyAgentIntegration(plan) {
   const policyPath = join29(plan.dataDir, "agent-policy.json");
   assertSafePath(policyPath);
-  const currentText = (path) => resolve15(path) === resolve15(policyPath) ? readManagedSkillPolicySnapshot(plan.dataDir)?.text ?? null : readOptional(path);
+  const currentText = (path) => resolve16(path) === resolve16(policyPath) ? readManagedSkillPolicySnapshot(plan.dataDir)?.text ?? null : readOptional(path);
   readManagedSkillPolicySnapshot(plan.dataDir);
   for (const change of plan.changes)
-    if (resolve15(change.path) === resolve15(policyPath))
+    if (resolve16(change.path) === resolve16(policyPath))
       parseManagedSkillPolicy(change.after);
   const aliases = plan.rootAliases ?? [];
   recheckRootAliases(aliases);
@@ -55524,7 +55761,7 @@ function applyAgentIntegration(plan) {
       recheckRootAliases(aliases);
       if (currentText(change.path) !== change.before)
         throw new Error(`Configuration changed after planning: ${change.path}`);
-      for (let directory = dirname14(change.path);!existsSync15(directory); directory = dirname14(directory))
+      for (let directory = dirname15(change.path);!existsSync15(directory); directory = dirname15(directory))
         createdDirectories.add(directory);
       const after2 = change.after;
       atomicWrite2(change.path, after2);
@@ -55564,11 +55801,11 @@ function applyAgentIntegration(plan) {
 }
 function syncArchiveDirectory(path) {
   assertSafePath(path);
-  const descriptor = openSync10(path, constants10.O_RDONLY | constants10.O_DIRECTORY | constants10.O_NOFOLLOW | constants10.O_NONBLOCK);
+  const descriptor = openSync11(path, constants11.O_RDONLY | constants11.O_DIRECTORY | constants11.O_NOFOLLOW | constants11.O_NONBLOCK);
   try {
     fsyncSync3(descriptor);
   } finally {
-    closeSync10(descriptor);
+    closeSync11(descriptor);
   }
 }
 function writeArchiveJournal(path, value) {
@@ -55576,18 +55813,18 @@ function writeArchiveJournal(path, value) {
   const temporary = `${path}.skills-${randomUUID6()}`;
   let descriptor;
   try {
-    descriptor = openSync10(temporary, constants10.O_WRONLY | constants10.O_CREAT | constants10.O_EXCL | constants10.O_NOFOLLOW, 384);
+    descriptor = openSync11(temporary, constants11.O_WRONLY | constants11.O_CREAT | constants11.O_EXCL | constants11.O_NOFOLLOW, 384);
     writeFileSync5(descriptor, `${JSON.stringify(value)}
 `);
     fsyncSync3(descriptor);
-    closeSync10(descriptor);
+    closeSync11(descriptor);
     descriptor = undefined;
     renameSync4(temporary, path);
-    syncArchiveDirectory(dirname14(path));
+    syncArchiveDirectory(dirname15(path));
   } finally {
     if (descriptor !== undefined)
-      closeSync10(descriptor);
-    if (lstatSync17(temporary, { throwIfNoEntry: false }))
+      closeSync11(descriptor);
+    if (lstatSync18(temporary, { throwIfNoEntry: false }))
       unlinkSync4(temporary);
   }
 }
@@ -55620,7 +55857,7 @@ function archiveNativeSkills(inventory, options) {
   const moved = [];
   const verifyArchive = (entry) => {
     assertSafePath(entry.archive);
-    const stat2 = lstatSync17(entry.archive);
+    const stat2 = lstatSync18(entry.archive);
     if (entry.discoveryOnly ? !stat2.isFile() : !stat2.isDirectory())
       throw new Error("Archive type changed");
     if ((entry.discoveryOnly ? sha(readNativeBytes(entry.archive)) : treeHash(entry.archive)) !== entry.hash)
@@ -55628,14 +55865,14 @@ function archiveNativeSkills(inventory, options) {
   };
   assertSafePath(archiveRoot);
   const created = [];
-  for (let path = archiveRoot;!existsSync15(path); path = dirname14(path))
+  for (let path = archiveRoot;!existsSync15(path); path = dirname15(path))
     created.push(path);
   mkdirSync7(archiveRoot, { recursive: true, mode: 448 });
   try {
     for (const directory of created)
       syncArchiveDirectory(directory);
     if (created.length)
-      syncArchiveDirectory(dirname14(created.at(-1)));
+      syncArchiveDirectory(dirname15(created.at(-1)));
     writeArchiveJournal(receiptPath, journal);
     for (const [index, entry] of selected.entries()) {
       recheckRootAliases(aliases);
@@ -55647,7 +55884,7 @@ function archiveNativeSkills(inventory, options) {
       writeArchiveJournal(receiptPath, journal);
       renameSync4(move.source, move.archive);
       moved.push(move);
-      syncArchiveDirectory(dirname14(move.source));
+      syncArchiveDirectory(dirname15(move.source));
       syncArchiveDirectory(archiveRoot);
       verifyArchive(move);
       move.status = "archived";
@@ -55668,7 +55905,7 @@ function archiveNativeSkills(inventory, options) {
         recheckRootAliases(aliases);
         assertSafePath(entry.source);
         assertSafePath(entry.archive);
-        if (lstatSync17(entry.source, { throwIfNoEntry: false })) {
+        if (lstatSync18(entry.source, { throwIfNoEntry: false })) {
           entry.status = "recovery-required";
           entry.conflict = "source-occupied";
           continue;
@@ -55682,10 +55919,10 @@ function archiveNativeSkills(inventory, options) {
         }
         if (entry.discoveryOnly) {
           linkSync2(entry.archive, entry.source);
-          syncArchiveDirectory(dirname14(entry.source));
+          syncArchiveDirectory(dirname15(entry.source));
           unlinkSync4(entry.archive);
         } else {
-          if (lstatSync17(entry.source, { throwIfNoEntry: false })) {
+          if (lstatSync18(entry.source, { throwIfNoEntry: false })) {
             entry.status = "recovery-required";
             entry.conflict = "source-occupied";
             continue;
@@ -55693,7 +55930,7 @@ function archiveNativeSkills(inventory, options) {
           renameSync4(entry.archive, entry.source);
         }
         entry.status = "restored";
-        syncArchiveDirectory(dirname14(entry.source));
+        syncArchiveDirectory(dirname15(entry.source));
         syncArchiveDirectory(archiveRoot);
       } catch {
         entry.status = "recovery-required";
@@ -55713,7 +55950,7 @@ function archiveNativeSkills(inventory, options) {
   return { entries: entries.map(({ status, conflict, ...entry }) => entry), receiptPath, ...aliases.length ? { rootAliases: aliases } : {} };
 }
 function assertManagedAgentBridge(agent, options = {}) {
-  const home = resolve15(options.home ?? homedir4()), dataDir3 = options.dataDir ?? getDataDirReadOnly();
+  const home = resolve16(options.home ?? homedir4()), dataDir3 = options.dataDir ?? getDataDirReadOnly();
   assertSafePath(join29(dataDir3, "agent-policy.json"));
   const snapshot = readManagedSkillPolicySnapshot(dataDir3);
   if (!snapshot)
@@ -55836,7 +56073,7 @@ function assertNativeExportAllowed(dataDir3 = getDataDirReadOnly()) {
   if (requiresCliSkillLoading(dataDir3))
     throw new Error("NATIVE_SKILL_EXPORT_DISABLED: this station loads skills through the Skills CLI; use skills sync --selection-profile <id>");
 }
-var sha = (data) => createHash13("sha256").update(data).digest("hex"), HOOK_EVENTS, ROOTS, SKILLS_LOADING_POLICY = "Skills loading policy: discover skills with `skills list` or `skills search`, and read selected instructions with `skills load <slug>`. Use `skills sync` to refresh the shared profile. The only native skill is the owned skills-cli bridge. Create and edit payload skills in the Skills authoring workspace; do not copy payload instructions into native discovery folders. Context loading does not authorize execution; use `skills run` only when the task calls for running a skill.";
+var sha = (data) => createHash14("sha256").update(data).digest("hex"), HOOK_EVENTS, ROOTS, SKILLS_LOADING_POLICY = "Skills loading policy: discover skills with `skills list` or `skills search`, and read selected instructions with `skills load <slug>`. Use `skills sync` to refresh the shared profile. The only native skill is the owned skills-cli bridge. Create and edit payload skills in the Skills authoring workspace; do not copy payload instructions into native discovery folders. Context loading does not authorize execution; use `skills run` only when the task calls for running a skill.";
 var init_agent_integration = __esm(() => {
   init_config();
   init_managed_policy();
@@ -56004,7 +56241,7 @@ var init_home_migration = __esm(() => {
 import {
   cpSync as cpSync2,
   existsSync as existsSync17,
-  lstatSync as lstatSync18,
+  lstatSync as lstatSync19,
   mkdirSync as mkdirSync9,
   mkdtempSync as mkdtempSync2,
   readFileSync as readFileSync16,
@@ -56015,14 +56252,14 @@ import {
   writeFileSync as writeFileSync7
 } from "fs";
 import { homedir as homedir5 } from "os";
-import { basename as basename7, dirname as dirname15, join as join31 } from "path";
+import { basename as basename9, dirname as dirname16, join as join31 } from "path";
 function isSkillsOwnershipMarker(marker) {
   return typeof marker === "object" && marker !== null && Object.hasOwn(marker, "managedBy") && marker.managedBy === SYNC_MARKER_MANAGED_BY;
 }
 function hasSkillsOwnershipMarker(dir) {
   const path = join31(dir, SYNC_MARKER_FILE);
   try {
-    if (!lstatSync18(path).isFile())
+    if (!lstatSync19(path).isFile())
       return false;
     const marker = JSON.parse(readFileSync16(path, "utf8"));
     return isSkillsOwnershipMarker(marker);
@@ -56247,9 +56484,9 @@ function writeManagedSkillDir(dir, skillMd, options) {
   const action = dirExists ? "update" : "create";
   if (options.dryRun)
     return { action, path: skillMdPath };
-  const parentDir = dirname15(dir);
+  const parentDir = dirname16(dir);
   mkdirSync9(parentDir, { recursive: true });
-  const transactionDir = mkdtempSync2(join31(parentDir, `.hasna-skills-write-${basename7(dir)}-`));
+  const transactionDir = mkdtempSync2(join31(parentDir, `.hasna-skills-write-${basename9(dir)}-`));
   const candidateDir = join31(transactionDir, "candidate");
   const backupDir = join31(transactionDir, "backup");
   const candidateSkillMdPath = join31(candidateDir, "SKILL.md");
@@ -58099,7 +58336,7 @@ var _parse = (_Err) => {
     return result2.value;
   };
   return fn;
-}, parse6, _parseAsync = (_Err) => {
+}, parse7, _parseAsync = (_Err) => {
   const fn = async (schema, value, _ctx, params) => {
     const ctx = _ctx ? { ..._ctx, async: true } : { async: true };
     let result2 = schema._zod.run({ value, issues: [] }, ctx);
@@ -58144,16 +58381,16 @@ var _parse = (_Err) => {
     result2 = await result2;
   return result2.issues.length === 0;
 }, _encode = (_Err) => {
-  const parse7 = _parse(_Err);
+  const parse8 = _parse(_Err);
   const fn = (schema, value, _ctx, _params) => {
     const ctx = _ctx ? { ..._ctx, direction: "backward" } : { direction: "backward" };
-    return parse7(schema, value, ctx, finalizeParams(fn, _params));
+    return parse8(schema, value, ctx, finalizeParams(fn, _params));
   };
   return fn;
 }, encode, _decode = (_Err) => {
-  const parse7 = _parse(_Err);
+  const parse8 = _parse(_Err);
   const fn = (schema, value, _ctx, _params) => {
-    return parse7(schema, value, _ctx, finalizeParams(fn, _params));
+    return parse8(schema, value, _ctx, finalizeParams(fn, _params));
   };
   return fn;
 }, decode, _encodeAsync = (_Err) => {
@@ -58184,7 +58421,7 @@ var init_parse = __esm(() => {
   init_core();
   init_errors();
   init_util();
-  parse6 = /* @__PURE__ */ _parse($ZodRealError);
+  parse7 = /* @__PURE__ */ _parse($ZodRealError);
   parseAsync = /* @__PURE__ */ _parseAsync($ZodRealError);
   safeParse = /* @__PURE__ */ _safeParse($ZodRealError);
   safeParseAsync = /* @__PURE__ */ _safeParseAsync($ZodRealError);
@@ -61109,10 +61346,10 @@ var init_schemas = __esm(() => {
         throw new Error("implement() must be called with a function");
       }
       return Object.defineProperty(function(...args) {
-        const parsedArgs = inst._def.input ? parse6(inst._def.input, args) : args;
+        const parsedArgs = inst._def.input ? parse7(inst._def.input, args) : args;
         const result2 = Reflect.apply(func, this, parsedArgs);
         if (inst._def.output) {
-          return parse6(inst._def.output, result2);
+          return parse7(inst._def.output, result2);
         }
         return result2;
       }, "_zod", { value: inst._zod, enumerable: false });
@@ -72813,7 +73050,7 @@ __export(exports_core2, {
   prettifyError: () => prettifyError,
   parseURLObject: () => parseURLObject,
   parseAsync: () => parseAsync,
-  parse: () => parse6,
+  parse: () => parse7,
   meta: () => meta,
   mergeValues: () => mergeValues,
   memoizer: () => memoizer,
@@ -73203,12 +73440,12 @@ var init_errors2 = __esm(() => {
 });
 
 // node_modules/zod/v4/classic/parse.js
-var parse8, parseAsync2, safeParse2, safeParseAsync2, encode2, decode2, encodeAsync2, decodeAsync2, safeEncode2, safeDecode2, safeEncodeAsync2, safeDecodeAsync2;
+var parse9, parseAsync2, safeParse2, safeParseAsync2, encode2, decode2, encodeAsync2, decodeAsync2, safeEncode2, safeDecode2, safeEncodeAsync2, safeDecodeAsync2;
 var init_parse2 = __esm(() => {
   init_core2();
   init_errors2();
   init_core2();
-  parse8 = /* @__PURE__ */ _parse(ZodRealError);
+  parse9 = /* @__PURE__ */ _parse(ZodRealError);
   parseAsync2 = /* @__PURE__ */ _parseAsync(ZodRealError);
   safeParse2 = /* @__PURE__ */ _safeParse(ZodRealError);
   safeParseAsync2 = /* @__PURE__ */ _safeParseAsync(ZodRealError);
@@ -74009,7 +74246,7 @@ var init_schemas2 = __esm(() => {
       exports_util.own(this, "~standard", value);
     },
     parse: function _parse2(data, params) {
-      return parse8(this, data, params, { callee: _parse2 });
+      return parse9(this, data, params, { callee: _parse2 });
     },
     parseAsync: async function _parseAsync2(data, params) {
       return await parseAsync2(this, data, params, { callee: _parseAsync2 });
@@ -75702,7 +75939,7 @@ __export(exports_external, {
   pipe: () => pipe,
   partialRecord: () => partialRecord,
   parseAsync: () => parseAsync2,
-  parse: () => parse8,
+  parse: () => parse9,
   overwrite: () => _overwrite,
   output: () => output,
   optional: () => optional,
@@ -76183,7 +76420,7 @@ var init_v4 = __esm(() => {
 });
 
 // src/lib/canonical-json.ts
-import { createHash as createHash14 } from "crypto";
+import { createHash as createHash15 } from "crypto";
 function canonicalJson2(value, maximumBytes = 2 * 1024 * 1024) {
   return canonicalJsonAtDepth(value, maximumBytes, 64);
 }
@@ -76227,7 +76464,7 @@ function canonicalJsonAtDepth(value, maximumBytes, maximumDepth) {
   return visit3(value, 0);
 }
 function canonicalJsonSha256(value, maximumBytes) {
-  return createHash14("sha256").update(canonicalJson2(value, maximumBytes)).digest("hex");
+  return createHash15("sha256").update(canonicalJson2(value, maximumBytes)).digest("hex");
 }
 var init_canonical_json = () => {};
 
@@ -76981,13 +77218,13 @@ var init_remote_workspace_leave = __esm(() => {
 
 // src/lib/auth-store.ts
 import { chmodSync as chmodSync2, existsSync as existsSync20, mkdirSync as mkdirSync11, readFileSync as readFileSync19, renameSync as renameSync7, statSync as statSync11, unlinkSync as unlinkSync5, writeFileSync as writeFileSync9 } from "fs";
-import { basename as basename8, dirname as dirname16, join as join34 } from "path";
+import { basename as basename10, dirname as dirname17, join as join34 } from "path";
 function getAuthFilePath(env3 = process.env) {
   return skillsCredentialFilePath(env3);
 }
 function getIdentityFilePath(env3 = process.env) {
   const file2 = skillsCredentialFilePath(env3);
-  return join34(dirname16(file2), basename8(file2).replace(/^credentials/, "identity") + ".json");
+  return join34(dirname17(file2), basename10(file2).replace(/^credentials/, "identity") + ".json");
 }
 function getAuthIdentity(env3 = process.env) {
   return readIdentity(env3);
@@ -77021,7 +77258,7 @@ function getAuthConfig(env3 = process.env, options = {}) {
 }
 function writeCredentialValues(values2, env3 = process.env) {
   const file2 = skillsCredentialFilePath(env3);
-  mkdirSync11(dirname16(file2), { recursive: true, mode: 448 });
+  mkdirSync11(dirname17(file2), { recursive: true, mode: 448 });
   const lines = [];
   const written = new Set;
   if (existsSync20(file2)) {
@@ -77359,10 +77596,10 @@ async function readQuoteUnavailableCode(response) {
   let timer;
   let deadlineExceeded = false;
   const expired = Symbol("quote body deadline");
-  const deadline = new Promise((resolve16) => {
+  const deadline = new Promise((resolve17) => {
     timer = setTimeout(() => {
       deadlineExceeded = true;
-      resolve16(expired);
+      resolve17(expired);
       reader.cancel().catch(() => {});
     }, 1500);
   });
@@ -78424,9 +78661,9 @@ var init_remote_client = __esm(() => {
 });
 
 // src/lib/revision.ts
-import { createHash as createHash15 } from "crypto";
+import { createHash as createHash16 } from "crypto";
 function revisionIdOf(content) {
-  const canonical3 = JSON.stringify({
+  const canonical4 = JSON.stringify({
     slug: content.slug,
     displayName: content.displayName,
     description: content.description,
@@ -78439,7 +78676,7 @@ function revisionIdOf(content) {
     bundleSha256: content.bundleSha256 ?? null,
     bundleByteSize: content.bundleByteSize ?? null
   });
-  return createHash15("sha256").update(canonical3).digest("hex");
+  return createHash16("sha256").update(canonical4).digest("hex");
 }
 var REVISION_ID_PATTERN;
 var init_revision = __esm(() => {
@@ -78469,7 +78706,7 @@ var init_skill_bundles = __esm(() => {
 
 // src/lib/pull.ts
 import { existsSync as existsSync21, mkdirSync as mkdirSync12, mkdtempSync as mkdtempSync3, readFileSync as readFileSync20, renameSync as renameSync8, rmSync as rmSync6, writeFileSync as writeFileSync10 } from "fs";
-import { dirname as dirname17, join as join35 } from "path";
+import { dirname as dirname18, join as join35 } from "path";
 async function pullSkills(options = {}) {
   const client2 = options.client !== undefined ? options.client : await createRemoteSkillsClient();
   if (!client2) {
@@ -78773,7 +79010,7 @@ function installBundleAtomically(name, entries, options = {}, marker = {}) {
   try {
     for (const entry of entries) {
       const destination = join35(staging, entry.path);
-      mkdirSync12(dirname17(destination), { recursive: true });
+      mkdirSync12(dirname18(destination), { recursive: true });
       writeFileSync10(destination, entry.bytes, { mode: entry.mode });
     }
     writePullMarker(staging, {
@@ -78888,8 +79125,8 @@ var init_pull = __esm(() => {
 });
 
 // src/lib/skill-context.ts
-import { createHash as createHash16 } from "crypto";
-import { resolve as resolve16 } from "path";
+import { createHash as createHash17 } from "crypto";
+import { resolve as resolve17 } from "path";
 function words2(value) {
   return new Set(value.toLowerCase().match(/[a-z0-9]+/g) ?? []);
 }
@@ -78924,7 +79161,7 @@ async function buildSkillContext(input2, options = {}) {
   const promptWords = words2(prompt);
   const promptNames = new Set(prompt.toLowerCase().match(/[a-z0-9]+(?:-[a-z0-9]+)*/g) ?? []);
   const loaded = new Set(resolved.session?.loaded ?? []);
-  const paths = [...input2.paths ?? [], ...input2.cwd ? [input2.cwd, resolve16(input2.cwd)] : []];
+  const paths = [...input2.paths ?? [], ...input2.cwd ? [input2.cwd, resolve17(input2.cwd)] : []];
   const candidates = profile.selections.map((selection) => {
     const key = selectionKey(selection);
     if (input2.restore && loaded.has(key))
@@ -78977,7 +79214,7 @@ ${content}`;
 `);
   const receipt = {
     schemaVersion: 1,
-    id: createHash16("sha256").update(JSON.stringify({ profile: profile.profileRevision, sessionId, selections, omitted })).digest("hex"),
+    id: createHash17("sha256").update(JSON.stringify({ profile: profile.profileRevision, sessionId, selections, omitted })).digest("hex"),
     profileId: profile.profileId,
     profileRevision: profile.profileRevision,
     authority: profile.authority,
@@ -78999,7 +79236,7 @@ var init_skill_context = __esm(() => {
 });
 
 // src/lib/session-reconciliation.ts
-import { createHash as createHash17 } from "crypto";
+import { createHash as createHash18 } from "crypto";
 function exactTimestamp(value) {
   const parsed = value === undefined ? Number.NaN : Date.parse(value);
   if (!Number.isFinite(parsed) || new Date(parsed).toISOString() !== value) {
@@ -79092,7 +79329,7 @@ async function reconcileSkillSession(input2, options = {}) {
   const result2 = replaceSkillSession(skillSessionSnapshotBinding(snapshot), replacement, { ...plan, planDigest }, options, () => assertPlanWindow(issuedAt, expiresAt, (options.now ?? Date.now)()));
   return { applied: true, plan, planDigest, ...result2 };
 }
-var SESSION_RECONCILIATION_PLAN_TTL_MS, digest3 = (value) => createHash17("sha256").update(JSON.stringify(value)).digest("hex");
+var SESSION_RECONCILIATION_PLAN_TTL_MS, digest3 = (value) => createHash18("sha256").update(JSON.stringify(value)).digest("hex");
 var init_session_reconciliation = __esm(() => {
   init_profile_client();
   init_selection_cache();
@@ -79108,7 +79345,7 @@ __export(exports_context, {
   parseSkillContextInput: () => parseSkillContextInput,
   contextResolverOptions: () => contextResolverOptions
 });
-import { readSync as readSync9 } from "fs";
+import { readSync as readSync10 } from "fs";
 function selectedProfileId(explicit) {
   return explicit ?? process.env.HASNA_SKILLS_SELECTION_PROFILE ?? readManagedSkillPolicy()?.profileId ?? "default";
 }
@@ -79186,7 +79423,7 @@ async function readContextStdin() {
   let size2 = 0;
   while (true) {
     const chunk2 = Buffer.allocUnsafe(8192);
-    const count = readSync9(0, chunk2, 0, chunk2.length, null);
+    const count = readSync10(0, chunk2, 0, chunk2.length, null);
     if (count === 0)
       break;
     size2 += count;
@@ -79663,12 +79900,12 @@ function handleBrowseError(error61) {
 async function writeJson(value, space) {
   const text3 = `${JSON.stringify(value, null, space)}
 `;
-  await new Promise((resolve17, reject2) => {
+  await new Promise((resolve18, reject2) => {
     process.stdout.write(text3, (error61) => {
       if (error61)
         reject2(error61);
       else
-        resolve17();
+        resolve18();
     });
   });
 }
@@ -80200,7 +80437,7 @@ function handleDiff(name, options) {
   const sourcePath = getSkillPath(bare);
   const canonicalDir = join36(resolveCorpusRoot(), normalized);
   const canonicalSkillMd = join36(canonicalDir, "SKILL.md");
-  const canonical3 = {
+  const canonical4 = {
     present: existsSync22(canonicalSkillMd),
     path: canonicalDir,
     ...existsSync22(canonicalSkillMd) ? { hash: hashSkillMarkdownFile(canonicalSkillMd) } : {},
@@ -80232,7 +80469,7 @@ function handleDiff(name, options) {
         stub = undefined;
       }
     }
-    const diverged = present && canonical3.present && managed && hash3 !== canonical3.hash;
+    const diverged = present && canonical4.present && managed && hash3 !== canonical4.hash;
     homes.push({
       agent,
       path: dir,
@@ -80247,7 +80484,7 @@ function handleDiff(name, options) {
   if (options.json) {
     console.log(JSON.stringify({
       name: bare,
-      canonical: canonical3,
+      canonical: canonical4,
       pinned,
       installedVersion,
       registryVersion,
@@ -80255,10 +80492,10 @@ function handleDiff(name, options) {
       homes
     }, null, 2));
   } else {
-    if (!canonical3.present) {
+    if (!canonical4.present) {
       console.log(source_default.yellow(`${bare}: no canonical corpus entry`));
     } else {
-      console.log(source_default.dim(`${bare} canonical: ${canonical3.hash?.slice(0, 12)}\u2026`));
+      console.log(source_default.dim(`${bare} canonical: ${canonical4.hash?.slice(0, 12)}\u2026`));
     }
     if (pinned) {
       console.log(upToDate ? source_default.green(`\u2713 pin is up to date (${installedVersion})`) : source_default.yellow(`pin metadata differs: ${installedVersion} \u2192 ${registryVersion}`));
@@ -80269,14 +80506,14 @@ function handleDiff(name, options) {
       } else if (!home.managed) {
         console.log(`${source_default.dim("\u2022")} ${home.agent}: ${source_default.yellow("unmarked (adoption candidate)")}`);
       } else if (home.diverged) {
-        const stubNote = home.stub === true ? " (home is a pointer stub; canonical holds content)" : canonical3.stub === true ? " (home holds content; canonical renders a pointer stub \u2014 sync refuses to replace it)" : "";
-        console.log(`${source_default.red("\u2717")} ${home.agent}: ${source_default.red("diverged")} ${source_default.dim(home.hash?.slice(0, 12))} \u2260 ${source_default.dim(canonical3.hash?.slice(0, 12))}${stubNote}`);
+        const stubNote = home.stub === true ? " (home is a pointer stub; canonical holds content)" : canonical4.stub === true ? " (home holds content; canonical renders a pointer stub \u2014 sync refuses to replace it)" : "";
+        console.log(`${source_default.red("\u2717")} ${home.agent}: ${source_default.red("diverged")} ${source_default.dim(home.hash?.slice(0, 12))} \u2260 ${source_default.dim(canonical4.hash?.slice(0, 12))}${stubNote}`);
       } else {
         console.log(`${source_default.green("\u2713")} ${home.agent}: ${source_default.green("matches canonical")}`);
       }
     }
   }
-  if (divergedHomes.length > 0 || homes.length > 0 && !canonical3.present)
+  if (divergedHomes.length > 0 || homes.length > 0 && !canonical4.present)
     process.exitCode = 1;
 }
 var init_introspect = __esm(() => {
@@ -81012,7 +81249,7 @@ var init_init = __esm(() => {
 });
 
 // src/lib/home-adoption.ts
-import { constants as constants11, closeSync as closeSync11, fstatSync as fstatSync11, lstatSync as lstatSync19, openSync as openSync11, readSync as readSync10, existsSync as existsSync24, mkdirSync as mkdirSync13, readdirSync as readdirSync13, readFileSync as readFileSync25, rmSync as rmSync7, statSync as statSync12, writeFileSync as writeFileSync12 } from "fs";
+import { constants as constants12, closeSync as closeSync12, fstatSync as fstatSync12, lstatSync as lstatSync20, openSync as openSync12, readSync as readSync11, existsSync as existsSync24, mkdirSync as mkdirSync13, readdirSync as readdirSync13, readFileSync as readFileSync25, rmSync as rmSync7, statSync as statSync12, writeFileSync as writeFileSync12 } from "fs";
 import { homedir as homedir7 } from "os";
 import { join as join38 } from "path";
 function indexCanonicalCorpus(corpusRoot) {
@@ -81167,25 +81404,25 @@ function adoptUnmarkedHomes(options = {}) {
 function pruneOwnership(dir) {
   let descriptor;
   try {
-    const directory = lstatSync19(dir);
+    const directory = lstatSync20(dir);
     if (!directory.isDirectory())
       return;
-    const markerPath = join38(dir, SYNC_MARKER_FILE), markerPathBefore = lstatSync19(markerPath);
+    const markerPath = join38(dir, SYNC_MARKER_FILE), markerPathBefore = lstatSync20(markerPath);
     if (!markerPathBefore.isFile())
       return;
-    descriptor = openSync11(markerPath, constants11.O_RDONLY | constants11.O_NOFOLLOW | constants11.O_NONBLOCK);
-    const before2 = fstatSync11(descriptor);
+    descriptor = openSync12(markerPath, constants12.O_RDONLY | constants12.O_NOFOLLOW | constants12.O_NONBLOCK);
+    const before2 = fstatSync12(descriptor);
     if (!before2.isFile() || before2.dev !== markerPathBefore.dev || before2.ino !== markerPathBefore.ino || before2.size !== markerPathBefore.size || before2.mtimeMs !== markerPathBefore.mtimeMs || before2.ctimeMs !== markerPathBefore.ctimeMs || before2.size < 1 || before2.size > 65536)
       return;
     const bytes = Buffer.alloc(before2.size + 1);
     let length = 0;
     while (length < bytes.length) {
-      const count = readSync10(descriptor, bytes, length, bytes.length - length, length);
+      const count = readSync11(descriptor, bytes, length, bytes.length - length, length);
       if (!count)
         break;
       length += count;
     }
-    const after2 = fstatSync11(descriptor), current = lstatSync19(dir), markerPathAfter = lstatSync19(markerPath);
+    const after2 = fstatSync12(descriptor), current = lstatSync20(dir), markerPathAfter = lstatSync20(markerPath);
     if (!markerPathAfter.isFile() || markerPathAfter.dev !== before2.dev || markerPathAfter.ino !== before2.ino || markerPathAfter.size !== before2.size || markerPathAfter.mtimeMs !== before2.mtimeMs || markerPathAfter.ctimeMs !== before2.ctimeMs || length !== before2.size || after2.size !== before2.size || after2.mtimeMs !== before2.mtimeMs || after2.ctimeMs !== before2.ctimeMs || !current.isDirectory() || current.dev !== directory.dev || current.ino !== directory.ino)
       return;
     const text3 = bytes.subarray(0, length).toString("utf8"), marker = JSON.parse(text3);
@@ -81196,7 +81433,7 @@ function pruneOwnership(dir) {
     return;
   } finally {
     if (descriptor !== undefined)
-      closeSync11(descriptor);
+      closeSync12(descriptor);
   }
 }
 function pruneStrayHomes(options = {}) {
@@ -81381,7 +81618,7 @@ var init_home_census = __esm(() => {
 });
 
 // src/cli/env-assignment.ts
-import { closeSync as closeSync12, constants as constants12, fstatSync as fstatSync12, ftruncateSync as ftruncateSync2, lstatSync as lstatSync20, openSync as openSync12, readFileSync as readFileSync27, writeSync as writeSync3 } from "fs";
+import { closeSync as closeSync13, constants as constants13, fstatSync as fstatSync13, ftruncateSync as ftruncateSync2, lstatSync as lstatSync21, openSync as openSync13, readFileSync as readFileSync27, writeSync as writeSync3 } from "fs";
 function serializeValue(value) {
   if (controls.test(value))
     throw new EnvAssignmentError("Environment values cannot contain control characters or newlines.");
@@ -81460,7 +81697,7 @@ function setEnvAssignment(path, assignment) {
   try {
     const previous = (() => {
       try {
-        return lstatSync20(path);
+        return lstatSync21(path);
       } catch (error61) {
         if (error61.code === "ENOENT")
           return;
@@ -81469,8 +81706,8 @@ function setEnvAssignment(path, assignment) {
     })();
     if (previous && !previous.isFile())
       throw new EnvAssignmentError("The project .env must be a regular file, not a symlink or special file.");
-    descriptor = openSync12(path, previous ? constants12.O_RDWR | constants12.O_NOFOLLOW | constants12.O_NONBLOCK : constants12.O_WRONLY | constants12.O_CREAT | constants12.O_EXCL | constants12.O_NOFOLLOW, 384);
-    const opened = fstatSync12(descriptor);
+    descriptor = openSync13(path, previous ? constants13.O_RDWR | constants13.O_NOFOLLOW | constants13.O_NONBLOCK : constants13.O_WRONLY | constants13.O_CREAT | constants13.O_EXCL | constants13.O_NOFOLLOW, 384);
+    const opened = fstatSync13(descriptor);
     if (!opened.isFile() || previous && (opened.ino !== previous.ino || opened.dev !== previous.dev)) {
       throw new EnvAssignmentError("The project .env changed while opening it; retry with a regular file.");
     }
@@ -81497,7 +81734,7 @@ function setEnvAssignment(path, assignment) {
     throw new EnvAssignmentError("Cannot safely read or write the project .env file.");
   } finally {
     if (descriptor !== undefined)
-      closeSync12(descriptor);
+      closeSync13(descriptor);
   }
 }
 var INVALID_LAYOUT = "Cannot safely update .env with multiline or unsupported assignments. Use single-line KEY=VALUE entries or edit the file manually.", controls, EnvAssignmentError;
@@ -82006,11 +82243,11 @@ var init_cloud_executions = __esm(() => {
 // node_modules/@hasna/secrets/dist/sdk.js
 import { isIP as isIP3 } from "net";
 import { spawnSync as spawnSync2 } from "child_process";
-import { closeSync as closeSync13, fstatSync as fstatSync13, openSync as openSync13, readFileSync as readFileSync29 } from "fs";
+import { closeSync as closeSync14, fstatSync as fstatSync14, openSync as openSync14, readFileSync as readFileSync29 } from "fs";
 import { O_NOFOLLOW as O_NOFOLLOW3, O_NONBLOCK as O_NONBLOCK3, O_RDONLY as O_RDONLY3 } from "constants";
 import { createRequire as createRequire2 } from "module";
 import { hostname as osHostname2 } from "os";
-import { isAbsolute as isAbsolute15, join as join41 } from "path";
+import { isAbsolute as isAbsolute16, join as join41 } from "path";
 import { createRequire as createRequire22 } from "module";
 function envToken2(name) {
   return name.toUpperCase().replace(/-/g, "_");
@@ -82034,7 +82271,7 @@ function homeDir2(env3) {
 }
 function absoluteOverride2(env3, key) {
   const value = env3[key]?.trim();
-  return value && isAbsolute15(value) ? value : null;
+  return value && isAbsolute16(value) ? value : null;
 }
 function hasnaHomeDir2(env3) {
   const override = absoluteOverride2(env3, HASNA_HOME_ENV_KEY2);
@@ -82111,7 +82348,7 @@ function readAppConfigFile2(path) {
   };
   let fd = -1;
   try {
-    fd = openSync13(path, O_RDONLY3 | O_NOFOLLOW3 | O_NONBLOCK3);
+    fd = openSync14(path, O_RDONLY3 | O_NOFOLLOW3 | O_NONBLOCK3);
   } catch (error61) {
     const code = error61.code;
     if (code === "ENOENT" || code === "ENOTDIR")
@@ -82121,7 +82358,7 @@ function readAppConfigFile2(path) {
     unsafe(`the path could not be opened (${code ?? "unknown error"})`);
   }
   try {
-    const before2 = fstatSync13(fd);
+    const before2 = fstatSync14(fd);
     if (!before2.isFile())
       unsafe("the path is not a regular file");
     if (!configFileModeAllowed2(before2.mode)) {
@@ -82133,14 +82370,14 @@ function readAppConfigFile2(path) {
     if (before2.size > MAX_CREDENTIAL_FILE_BYTES2)
       unsafe("the file exceeds the size limit");
     const bytes = readFileSync29(fd);
-    const after2 = fstatSync13(fd);
+    const after2 = fstatSync14(fd);
     if (!configFileReadsCoherent2(before2, after2)) {
       unsafe("the file changed while being read");
     }
     return parseEnvFile2(bytes.toString("utf8"));
   } finally {
     if (fd !== -1)
-      closeSync13(fd);
+      closeSync14(fd);
   }
 }
 function readCredentialFile2(path, apiKeyKeys) {
@@ -83171,7 +83408,7 @@ function createSecretsClientFromEnv(env3 = process.env, overrides = {}) {
   });
   return new SecretsClient({ ...clientOverrides, baseUrl, apiKey });
 }
-var __esm2 = (fn, res) => () => (fn && (res = fn(fn = 0)), res), CREDENTIAL_PROFILE_ENV_KEY2 = "HASNA_PROFILE", CredentialResolutionError2, CredentialFileUnsafeError2, HASNA_HOME_ENV_KEY2 = "HASNA_HOME", HASNA_CONFIG_HOME_ENV_KEY2 = "HASNA_CONFIG_HOME", KEYCHAIN_STATION_ENV_KEY2 = "HASNA_STATION", HASNA_HOME_DIR2 = ".hasna", CONFIG_SUBDIR2 = "config", CREDENTIALS_FILE2 = "credentials", KEYCHAIN_SECURITY_BIN2 = "/usr/bin/security", KEYCHAIN_SERVICE_PREFIX2 = "hasna.credentials", KEYCHAIN_ITEM_NOT_FOUND_STATUS2 = 44, KEYCHAIN_SPAWN_TIMEOUT_MS2 = 1e4, MAX_CREDENTIAL_FILE_BYTES2, SAFE_APP_SLUG2, SAFE_PROFILE2, ILLEGAL_IN_HEADER_VALUE2, VAULT_POINTER_SHAPE2, CREDENTIAL_SHAPED_KEY2, INSPECT_CUSTOM2, CREDENTIAL_SEAL2, CALLER_SUPPLIED_CREDENTIAL_PROVIDER_SOURCE = "caller-supplied CredentialProvider", AMBIENT_ENVIRONMENT2, SECRETS_PACKAGE_SPECIFIER, requireSecretsSdk2, DEFAULT_FLEET_GATEWAY_ORIGIN2 = "https://api.hasna.com", DEFAULT_AUTHORITY_SOURCE = "default", ASCII_CONTROL_PATTERN2, DNS_LABEL_PATTERN2, ClientTransportConfigurationError2, HasnaHttpError, DEFAULT_RETRY_STATUSES, IDEMPOTENT_METHODS2, AUTHORITY_OVERRIDE_HEADERS2, defaultSleep = (ms) => new Promise((resolve17) => setTimeout(resolve17, ms)), init_transport2, MAX_CREDENTIAL_FILE_BYTES22, INSPECT_CUSTOM22, CREDENTIAL_SEAL22, AMBIENT_ENVIRONMENT22, SECRETS_PACKAGE_SPECIFIER2, requireSecretsSdk22, IDEMPOTENT_METHODS22, AUTHORITY_OVERRIDE_HEADERS22, init_storage, PATHS_RESOLVER_APP_SLUG_RE3, SQLITE_SIDECAR_FILES, LEGACY_SERVICE_FILES, init_data_dir, SecretsTestIsolationError, TEST_ENTRYPOINT_RE, init_test_isolation, init_client, ApiError;
+var __esm2 = (fn, res) => () => (fn && (res = fn(fn = 0)), res), CREDENTIAL_PROFILE_ENV_KEY2 = "HASNA_PROFILE", CredentialResolutionError2, CredentialFileUnsafeError2, HASNA_HOME_ENV_KEY2 = "HASNA_HOME", HASNA_CONFIG_HOME_ENV_KEY2 = "HASNA_CONFIG_HOME", KEYCHAIN_STATION_ENV_KEY2 = "HASNA_STATION", HASNA_HOME_DIR2 = ".hasna", CONFIG_SUBDIR2 = "config", CREDENTIALS_FILE2 = "credentials", KEYCHAIN_SECURITY_BIN2 = "/usr/bin/security", KEYCHAIN_SERVICE_PREFIX2 = "hasna.credentials", KEYCHAIN_ITEM_NOT_FOUND_STATUS2 = 44, KEYCHAIN_SPAWN_TIMEOUT_MS2 = 1e4, MAX_CREDENTIAL_FILE_BYTES2, SAFE_APP_SLUG2, SAFE_PROFILE2, ILLEGAL_IN_HEADER_VALUE2, VAULT_POINTER_SHAPE2, CREDENTIAL_SHAPED_KEY2, INSPECT_CUSTOM2, CREDENTIAL_SEAL2, CALLER_SUPPLIED_CREDENTIAL_PROVIDER_SOURCE = "caller-supplied CredentialProvider", AMBIENT_ENVIRONMENT2, SECRETS_PACKAGE_SPECIFIER, requireSecretsSdk2, DEFAULT_FLEET_GATEWAY_ORIGIN2 = "https://api.hasna.com", DEFAULT_AUTHORITY_SOURCE = "default", ASCII_CONTROL_PATTERN2, DNS_LABEL_PATTERN2, ClientTransportConfigurationError2, HasnaHttpError, DEFAULT_RETRY_STATUSES, IDEMPOTENT_METHODS2, AUTHORITY_OVERRIDE_HEADERS2, defaultSleep = (ms) => new Promise((resolve18) => setTimeout(resolve18, ms)), init_transport2, MAX_CREDENTIAL_FILE_BYTES22, INSPECT_CUSTOM22, CREDENTIAL_SEAL22, AMBIENT_ENVIRONMENT22, SECRETS_PACKAGE_SPECIFIER2, requireSecretsSdk22, IDEMPOTENT_METHODS22, AUTHORITY_OVERRIDE_HEADERS22, init_storage, PATHS_RESOLVER_APP_SLUG_RE3, SQLITE_SIDECAR_FILES, LEGACY_SERVICE_FILES, init_data_dir, SecretsTestIsolationError, TEST_ENTRYPOINT_RE, init_test_isolation, init_client, ApiError;
 var init_sdk = __esm(() => {
   init_transport2 = __esm2(() => {
     CredentialResolutionError2 = class CredentialResolutionError3 extends Error {
@@ -83306,7 +83543,7 @@ var init_sdk = __esm(() => {
 });
 
 // src/lib/execution-secrets.ts
-import { constants as constants13, closeSync as closeSync14, fstatSync as fstatSync14, openSync as openSync14, readSync as readSync11, realpathSync as realpathSync6 } from "fs";
+import { constants as constants14, closeSync as closeSync15, fstatSync as fstatSync15, openSync as openSync15, readSync as readSync12, realpathSync as realpathSync6 } from "fs";
 import { hostname as stationHostname } from "os";
 function selectedSecretBindingsTemplate(scope, names, createClient2 = createSecretsClientFromEnv) {
   let secretsAuthority;
@@ -83350,13 +83587,13 @@ function declaredSecretNames(value) {
 function readSelectedSecretBindings(path) {
   let fd;
   try {
-    fd = openSync14(path, constants13.O_RDONLY | constants13.O_NOFOLLOW | constants13.O_NONBLOCK);
-    const stat2 = fstatSync14(fd);
+    fd = openSync15(path, constants14.O_RDONLY | constants14.O_NOFOLLOW | constants14.O_NONBLOCK);
+    const stat2 = fstatSync15(fd);
     if (!stat2.isFile() || stat2.size > 65536)
       throw new Error;
     const bytes = Buffer.alloc(65537);
     let size2 = 0, count;
-    while ((count = readSync11(fd, bytes, size2, bytes.length - size2, null)) > 0) {
+    while ((count = readSync12(fd, bytes, size2, bytes.length - size2, null)) > 0) {
       size2 += count;
       if (size2 > 65536)
         throw new Error;
@@ -83366,7 +83603,7 @@ function readSelectedSecretBindings(path) {
     return refuse("INVALID_SECRET_BINDINGS", "Secret bindings must be a regular JSON file of at most 64 KiB, containing reference names only.");
   } finally {
     if (fd !== undefined)
-      closeSync14(fd);
+      closeSync15(fd);
   }
 }
 function validateSelectedSecretBindings(value, scope, names) {
@@ -83655,10 +83892,10 @@ __export(exports_selected_run, {
   prepareSelectedSecretBindings: () => prepareSelectedSecretBindings,
   executeSelectedLocal: () => executeSelectedLocal
 });
-import { createHash as createHash18 } from "crypto";
+import { createHash as createHash19 } from "crypto";
 import { spawn as spawn2 } from "child_process";
 import { mkdirSync as mkdirSync14, mkdtempSync as mkdtempSync4, writeFileSync as writeFileSync13, realpathSync as realpathSync7 } from "fs";
-import { dirname as dirname18, join as join42, resolve as resolve17 } from "path";
+import { dirname as dirname19, join as join42, resolve as resolve18 } from "path";
 import { tmpdir, hostname as stationHostname2 } from "os";
 async function resolveSelectedRun(spec, profileId, options = {}) {
   const context = await resolveSelectionContext(profileId, options);
@@ -83747,11 +83984,11 @@ async function executeSelectedLocal(selected, options = {}) {
       throw new SkillSelectionError("INVALID_BUNDLE_PATH", "The execution bundle path exceeds its limit.");
     });
     const destination = join42(runDirectory, entry.path);
-    mkdirSync14(dirname18(destination), { recursive: true, mode: 448 });
+    mkdirSync14(dirname19(destination), { recursive: true, mode: 448 });
     writeFileSync13(destination, entry.bytes, { flag: "wx", mode: entry.mode & 511 });
   }
   env3.SKILLS_INPUT_JSON = input2;
-  env3.SKILLS_WORKSPACE_DIR = resolve17(options.cwd ?? process.cwd());
+  env3.SKILLS_WORKSPACE_DIR = resolve18(options.cwd ?? process.cwd());
   env3.SKILLS_RUN_DIR = runDirectory;
   if (runtime.version) {
     const version2 = await subprocess([executable, ...runtimeName === "bun" ? ["--no-env-file"] : [], "--version"], runDirectory, env3, "", Math.min(timeoutMs, 5000));
@@ -83781,7 +84018,7 @@ async function executeSelectedLocal(selected, options = {}) {
     selection: selection2,
     target: "local",
     runtime: runtimeName,
-    inputDigest: `sha256:${createHash18("sha256").update(input2).digest("hex")}`,
+    inputDigest: `sha256:${createHash19("sha256").update(input2).digest("hex")}`,
     runDirectory,
     ...executionGrant ? { executionGrant } : {},
     ...bindings ? { secretBinding: { schema: bindings.schema, selection: bindings.selection, consumer: bindings.consumer, secretsAuthority: bindings.secretsAuthority, bindings: bindings.bindings } } : {},
@@ -87998,7 +88235,7 @@ var init_runs = __esm(() => {
 });
 
 // src/lib/run-state.ts
-import { createHash as createHash19, randomBytes } from "crypto";
+import { createHash as createHash20, randomBytes } from "crypto";
 import { existsSync as existsSync27, mkdirSync as mkdirSync15, readFileSync as readFileSync30, readdirSync as readdirSync16, statSync as statSync15, writeFileSync as writeFileSync14 } from "fs";
 import { extname, join as join43, relative as relative6 } from "path";
 function createSkillRun(params, targetDir = process.cwd()) {
@@ -88135,7 +88372,7 @@ function collectRunArtifacts(context) {
     artifacts.push({
       path: toProjectRelative(context.targetDir, path),
       mime: mimeForPath(path),
-      sha256: createHash19("sha256").update(bytes).digest("hex"),
+      sha256: createHash20("sha256").update(bytes).digest("hex"),
       sizeBytes: stat2.size
     });
   }
@@ -89138,12 +89375,12 @@ class StdioServerTransport {
     this.onclose?.();
   }
   send(message) {
-    return new Promise((resolve18) => {
+    return new Promise((resolve19) => {
       const json2 = serializeMessage(message);
       if (this._stdout.write(json2)) {
-        resolve18();
+        resolve19();
       } else {
-        this._stdout.once("drain", resolve18);
+        this._stdout.once("drain", resolve19);
       }
     });
   }
@@ -89185,7 +89422,7 @@ var init_schemas3 = __esm(() => {
       own(this, "with", value);
     },
     parse(data, params) {
-      return parse6(this, data, params, { callee: this.parse });
+      return parse7(this, data, params, { callee: this.parse });
     },
     parseAsync(data, params) {
       return parseAsync(this, data, params, { callee: this.parseAsync });
@@ -91329,7 +91566,7 @@ class Protocol {
           return;
         }
         const pollInterval = task2.pollInterval ?? this._options?.defaultTaskPollInterval ?? 1000;
-        await new Promise((resolve18) => setTimeout(resolve18, pollInterval));
+        await new Promise((resolve19) => setTimeout(resolve19, pollInterval));
         options?.signal?.throwIfAborted();
       }
     } catch (error61) {
@@ -91341,7 +91578,7 @@ class Protocol {
   }
   request(request2, resultSchema, options) {
     const { relatedRequestId, resumptionToken, onresumptiontoken, task, relatedTask } = options ?? {};
-    return new Promise((resolve18, reject2) => {
+    return new Promise((resolve19, reject2) => {
       const earlyReject = (error61) => {
         reject2(error61);
       };
@@ -91419,7 +91656,7 @@ class Protocol {
           if (!parseResult.success) {
             reject2(parseResult.error);
           } else {
-            resolve18(parseResult.data);
+            resolve19(parseResult.data);
           }
         } catch (error61) {
           reject2(error61);
@@ -91610,12 +91847,12 @@ class Protocol {
         interval = task.pollInterval;
       }
     } catch {}
-    return new Promise((resolve18, reject2) => {
+    return new Promise((resolve19, reject2) => {
       if (signal.aborted) {
         reject2(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
         return;
       }
-      const timeoutId = setTimeout(resolve18, interval);
+      const timeoutId = setTimeout(resolve19, interval);
       signal.addEventListener("abort", () => {
         clearTimeout(timeoutId);
         reject2(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
@@ -92092,11 +92329,11 @@ var require_codegen = __commonJS((exports) => {
       const rhs = this.rhs === undefined ? "" : ` = ${this.rhs}`;
       return `${varKind} ${this.name}${rhs};` + _n;
     }
-    optimizeNames(names, constants14) {
+    optimizeNames(names, constants15) {
       if (!names[this.name.str])
         return;
       if (this.rhs)
-        this.rhs = optimizeExpr(this.rhs, names, constants14);
+        this.rhs = optimizeExpr(this.rhs, names, constants15);
       return this;
     }
     get names() {
@@ -92114,10 +92351,10 @@ var require_codegen = __commonJS((exports) => {
     render({ _n }) {
       return `${this.lhs} = ${this.rhs};` + _n;
     }
-    optimizeNames(names, constants14) {
+    optimizeNames(names, constants15) {
       if (this.lhs instanceof code_1.Name && !names[this.lhs.str] && !this.sideEffects)
         return;
-      this.rhs = optimizeExpr(this.rhs, names, constants14);
+      this.rhs = optimizeExpr(this.rhs, names, constants15);
       return this;
     }
     get names() {
@@ -92183,8 +92420,8 @@ var require_codegen = __commonJS((exports) => {
     optimizeNodes() {
       return `${this.code}` ? this : undefined;
     }
-    optimizeNames(names, constants14) {
-      this.code = optimizeExpr(this.code, names, constants14);
+    optimizeNames(names, constants15) {
+      this.code = optimizeExpr(this.code, names, constants15);
       return this;
     }
     get names() {
@@ -92214,12 +92451,12 @@ var require_codegen = __commonJS((exports) => {
       }
       return nodes.length > 0 ? this : undefined;
     }
-    optimizeNames(names, constants14) {
+    optimizeNames(names, constants15) {
       const { nodes } = this;
       let i = nodes.length;
       while (i--) {
         const n2 = nodes[i];
-        if (n2.optimizeNames(names, constants14))
+        if (n2.optimizeNames(names, constants15))
           continue;
         subtractNames(names, n2.names);
         nodes.splice(i, 1);
@@ -92276,12 +92513,12 @@ var require_codegen = __commonJS((exports) => {
         return;
       return this;
     }
-    optimizeNames(names, constants14) {
+    optimizeNames(names, constants15) {
       var _a3;
-      this.else = (_a3 = this.else) === null || _a3 === undefined ? undefined : _a3.optimizeNames(names, constants14);
-      if (!(super.optimizeNames(names, constants14) || this.else))
+      this.else = (_a3 = this.else) === null || _a3 === undefined ? undefined : _a3.optimizeNames(names, constants15);
+      if (!(super.optimizeNames(names, constants15) || this.else))
         return;
-      this.condition = optimizeExpr(this.condition, names, constants14);
+      this.condition = optimizeExpr(this.condition, names, constants15);
       return this;
     }
     get names() {
@@ -92306,10 +92543,10 @@ var require_codegen = __commonJS((exports) => {
     render(opts) {
       return `for(${this.iteration})` + super.render(opts);
     }
-    optimizeNames(names, constants14) {
-      if (!super.optimizeNames(names, constants14))
+    optimizeNames(names, constants15) {
+      if (!super.optimizeNames(names, constants15))
         return;
-      this.iteration = optimizeExpr(this.iteration, names, constants14);
+      this.iteration = optimizeExpr(this.iteration, names, constants15);
       return this;
     }
     get names() {
@@ -92347,10 +92584,10 @@ var require_codegen = __commonJS((exports) => {
     render(opts) {
       return `for(${this.varKind} ${this.name} ${this.loop} ${this.iterable})` + super.render(opts);
     }
-    optimizeNames(names, constants14) {
-      if (!super.optimizeNames(names, constants14))
+    optimizeNames(names, constants15) {
+      if (!super.optimizeNames(names, constants15))
         return;
-      this.iterable = optimizeExpr(this.iterable, names, constants14);
+      this.iterable = optimizeExpr(this.iterable, names, constants15);
       return this;
     }
     get names() {
@@ -92395,11 +92632,11 @@ var require_codegen = __commonJS((exports) => {
       (_b = this.finally) === null || _b === undefined || _b.optimizeNodes();
       return this;
     }
-    optimizeNames(names, constants14) {
+    optimizeNames(names, constants15) {
       var _a3, _b;
-      super.optimizeNames(names, constants14);
-      (_a3 = this.catch) === null || _a3 === undefined || _a3.optimizeNames(names, constants14);
-      (_b = this.finally) === null || _b === undefined || _b.optimizeNames(names, constants14);
+      super.optimizeNames(names, constants15);
+      (_a3 = this.catch) === null || _a3 === undefined || _a3.optimizeNames(names, constants15);
+      (_b = this.finally) === null || _b === undefined || _b.optimizeNames(names, constants15);
       return this;
     }
     get names() {
@@ -92673,7 +92910,7 @@ var require_codegen = __commonJS((exports) => {
   function addExprNames(names, from) {
     return from instanceof code_1._CodeOrName ? addNames(names, from.names) : names;
   }
-  function optimizeExpr(expr, names, constants14) {
+  function optimizeExpr(expr, names, constants15) {
     if (expr instanceof code_1.Name)
       return replaceName(expr);
     if (!canOptimize(expr))
@@ -92688,14 +92925,14 @@ var require_codegen = __commonJS((exports) => {
       return items;
     }, []));
     function replaceName(n2) {
-      const c = constants14[n2.str];
+      const c = constants15[n2.str];
       if (c === undefined || names[n2.str] !== 1)
         return n2;
       delete names[n2.str];
       return c;
     }
     function canOptimize(e2) {
-      return e2 instanceof code_1._Code && e2._items.some((c) => c instanceof code_1.Name && names[c.str] === 1 && constants14[c.str] !== undefined);
+      return e2 instanceof code_1._Code && e2._items.some((c) => c instanceof code_1.Name && names[c.str] === 1 && constants15[c.str] !== undefined);
     }
   }
   function subtractNames(names, from) {
@@ -94600,7 +94837,7 @@ var require_compile = __commonJS((exports) => {
     const schOrFunc = root2.refs[ref];
     if (schOrFunc)
       return schOrFunc;
-    let _sch = resolve18.call(this, root2, ref);
+    let _sch = resolve19.call(this, root2, ref);
     if (_sch === undefined) {
       const schema = (_a3 = root2.localRefs) === null || _a3 === undefined ? undefined : _a3[ref];
       const { schemaId } = this.opts;
@@ -94627,7 +94864,7 @@ var require_compile = __commonJS((exports) => {
   function sameSchemaEnv(s1, s2) {
     return s1.schema === s2.schema && s1.root === s2.root && s1.baseId === s2.baseId;
   }
-  function resolve18(root2, ref) {
+  function resolve19(root2, ref) {
     let sch;
     while (typeof (sch = this.refs[ref]) == "string")
       ref = sch;
@@ -95425,11 +95662,11 @@ var require_fast_uri = __commonJS((exports, module) => {
     if (typeof uri === "string") {
       uri = normalizeString(uri, options);
     } else if (typeof uri === "object") {
-      uri = parse11(serialize(uri, options), options);
+      uri = parse12(serialize(uri, options), options);
     }
     return uri;
   }
-  function resolve18(baseURI, relativeURI, options) {
+  function resolve19(baseURI, relativeURI, options) {
     const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
     const {
       parsed: baseParsed,
@@ -95465,8 +95702,8 @@ var require_fast_uri = __commonJS((exports, module) => {
   function resolveComponent(base2, relative7, options, skipNormalization) {
     const target = {};
     if (!skipNormalization) {
-      base2 = parse11(serialize(base2, options), options);
-      relative7 = parse11(serialize(relative7, options), options);
+      base2 = parse12(serialize(base2, options), options);
+      relative7 = parse12(serialize(relative7, options), options);
     }
     options = options || {};
     if (!options.tolerant && relative7.scheme) {
@@ -95766,7 +96003,7 @@ var require_fast_uri = __commonJS((exports, module) => {
     }
     return { parsed, malformedAuthorityOrPort, malformedPercentEncoding, malformedSchemeSpecific, malformedHost, malformedScheme };
   }
-  function parse11(uri, opts) {
+  function parse12(uri, opts) {
     return parseWithStatus(uri, opts).parsed;
   }
   function normalizeString(uri, opts) {
@@ -95799,11 +96036,11 @@ var require_fast_uri = __commonJS((exports, module) => {
   var fastUri = {
     SCHEMES,
     normalize: normalize3,
-    resolve: resolve18,
+    resolve: resolve19,
     resolveComponent,
     equal,
     serialize,
-    parse: parse11
+    parse: parse12
   };
   module.exports = fastUri;
   module.exports.default = fastUri;
@@ -99585,7 +99822,7 @@ class McpServer {
     let task = createTaskResult.task;
     const pollInterval = task.pollInterval ?? 5000;
     while (task.status !== "completed" && task.status !== "failed" && task.status !== "cancelled") {
-      await new Promise((resolve18) => setTimeout(resolve18, pollInterval));
+      await new Promise((resolve19) => setTimeout(resolve19, pollInterval));
       const updatedTask = await extra.taskStore.getTask(taskId);
       if (!updatedTask) {
         throw new McpError(ErrorCode.InternalError, `Task ${taskId} not found during polling`);
@@ -100272,7 +100509,7 @@ var init_remote_invitation_recovery = __esm(() => {
 });
 
 // src/lib/remote-private-publications.ts
-import { createHash as createHash20 } from "crypto";
+import { createHash as createHash21 } from "crypto";
 function checkedPublicationDeclaration(value) {
   if (!exact(value, ["idempotencyKey", "version", "expectedCurrentVersionId", "manifestText", "archiveSha256", "archiveByteSize"]) || !publicationUuid(value.idempotencyKey) || !(value.expectedCurrentVersionId === null || publicationUuid(value.expectedCurrentVersionId)) || typeof value.version !== "string" || !value.version || value.version.length > 128 || /[\p{Cc}\p{Cs}]/u.test(value.version) || typeof value.manifestText !== "string" || Buffer.byteLength(value.manifestText) > 16384 || !hash3(value.archiveSha256) || !Number.isSafeInteger(value.archiveByteSize) || Number(value.archiveByteSize) < 1 || Number(value.archiveByteSize) > PRIVATE_PUBLICATION_MAX_BYTES)
     return bad();
@@ -100517,12 +100754,12 @@ class RemotePrivatePublicationsClient {
       previous = view;
       if (!["queued", "verifying"].includes(view.state) || Date.now() >= until)
         return view;
-      await new Promise((resolve18) => {
+      await new Promise((resolve19) => {
         const timer = setTimeout(done, Math.min(1000, until - Date.now()));
         function done() {
           clearTimeout(timer);
           options.signal?.removeEventListener("abort", done);
-          resolve18();
+          resolve19();
         }
         options.signal?.addEventListener("abort", done, { once: true });
       });
@@ -100533,7 +100770,7 @@ var PRIVATE_PUBLICATION_MAX_BYTES, failures2, PrivatePublicationError, bad = ()
   throw new PrivatePublicationError("INVALID_PUBLICATION_INPUT", "Invalid publication input or recovery data.");
 }, invalid5 = () => {
   throw new PrivatePublicationError("INVALID_PUBLICATION_RESPONSE", "The server returned an invalid publication result.");
-}, publicationUuid = (v) => typeof v === "string" && /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(v), hash3 = (v) => typeof v === "string" && /^[a-f0-9]{64}$/.test(v), record10 = (v) => !!v && typeof v === "object" && !Array.isArray(v), exact = (v, keys3) => record10(v) && Object.keys(v).sort().join(",") === keys3.sort().join(","), date6 = (v) => typeof v === "string" && /^\d{4}-\d\d-\d\dT[0-9:.]+(?:Z|[+-](?:[01]\d|2[0-3]):[0-5]\d)$/.test(v) && Number.isFinite(Date.parse(v)), publicationSha256 = (bytes) => createHash20("sha256").update(bytes).digest("hex");
+}, publicationUuid = (v) => typeof v === "string" && /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(v), hash3 = (v) => typeof v === "string" && /^[a-f0-9]{64}$/.test(v), record10 = (v) => !!v && typeof v === "object" && !Array.isArray(v), exact = (v, keys3) => record10(v) && Object.keys(v).sort().join(",") === keys3.sort().join(","), date6 = (v) => typeof v === "string" && /^\d{4}-\d\d-\d\dT[0-9:.]+(?:Z|[+-](?:[01]\d|2[0-3]):[0-5]\d)$/.test(v) && Number.isFinite(Date.parse(v)), publicationSha256 = (bytes) => createHash21("sha256").update(bytes).digest("hex");
 var init_remote_private_publications = __esm(() => {
   init_fleet_credentials();
   init_remote_workspace_selection();
@@ -100810,11 +101047,11 @@ var init_remote_auth = __esm(() => {
 });
 
 // src/lib/workspace-profile.ts
-import { constants as constants14, closeSync as closeSync15, fstatSync as fstatSync15, lstatSync as lstatSync21, mkdirSync as mkdirSync16, mkdtempSync as mkdtempSync5, openSync as openSync15, readFileSync as readFileSync31, renameSync as renameSync9, rmSync as rmSync8, writeFileSync as writeFileSync15 } from "fs";
-import { dirname as dirname19, join as join44 } from "path";
+import { constants as constants15, closeSync as closeSync16, fstatSync as fstatSync16, lstatSync as lstatSync22, mkdirSync as mkdirSync16, mkdtempSync as mkdtempSync5, openSync as openSync16, readFileSync as readFileSync31, renameSync as renameSync9, rmSync as rmSync8, writeFileSync as writeFileSync15 } from "fs";
+import { dirname as dirname20, join as join44 } from "path";
 function stat2(path) {
   try {
-    return lstatSync21(path);
+    return lstatSync22(path);
   } catch (error61) {
     if (error61.code === "ENOENT")
       return null;
@@ -100824,14 +101061,14 @@ function stat2(path) {
 function safeText(file2) {
   if (stat2(file2) === null)
     return null;
-  const fd = openSync15(file2, constants14.O_RDONLY | constants14.O_NOFOLLOW | constants14.O_NONBLOCK);
+  const fd = openSync16(file2, constants15.O_RDONLY | constants15.O_NOFOLLOW | constants15.O_NONBLOCK);
   try {
-    const s = fstatSync15(fd);
+    const s = fstatSync16(fd);
     if (!s.isFile() || s.size > 65536 || ![256, 384].includes(s.mode & 4095) || process.getuid && s.uid !== process.getuid())
       return fail2("The selected profile must use bounded owner-only regular files.");
     return readFileSync31(fd, "utf8");
   } finally {
-    closeSync15(fd);
+    closeSync16(fd);
   }
 }
 function checkIdentityMetadata(file2, identity4) {
@@ -100896,18 +101133,18 @@ async function prepareWorkspaceEnrollment(membershipId, source = process.env) {
 `);
   if (Buffer.byteLength(credentialBody("x".repeat(8192)), "utf8") > 65536)
     return fail2("The selected profile has insufficient space for a bounded credential. Reduce its unrelated configuration before signing in.");
-  const parents2 = [];
-  for (let path = dirname19(file2);; path = dirname19(path)) {
+  const parents3 = [];
+  for (let path = dirname20(file2);; path = dirname20(path)) {
     const before2 = stat2(path);
     if (before2 && (!before2.isDirectory() || before2.isSymbolicLink()))
       return fail2("The profile directory must not be a symbolic link.");
-    parents2.push([path, before2]);
-    if (path === dirname19(path))
+    parents3.push([path, before2]);
+    if (path === dirname20(path))
       break;
   }
   const unchanged2 = () => {
     unchangedFiles();
-    for (const [path, before2] of parents2) {
+    for (const [path, before2] of parents3) {
       const now3 = stat2(path);
       if (!before2 ? now3 !== null : !now3 || !now3.isDirectory() || before2.dev !== now3.dev || before2.ino !== now3.ino)
         changed();
@@ -100961,14 +101198,14 @@ async function prepareWorkspaceEnrollment(membershipId, source = process.env) {
           return fail2("The new profile exceeds the credential reader size limit.");
         const identity4 = JSON.stringify({ email: verified.user.email, userId: verified.user.id, orgId: verified.organization.id, orgSlug: verified.organization.slug, apiUrl: origin }, null, 2) + `
 `;
-        mkdirSync16(dirname19(file2), { recursive: true, mode: 448 });
-        const temp = mkdtempSync5(join44(dirname19(file2), ".workspace-login-"));
+        mkdirSync16(dirname20(file2), { recursive: true, mode: 448 });
+        const temp = mkdtempSync5(join44(dirname20(file2), ".workspace-login-"));
         let identityInstalled = false;
         try {
           writeFileSync15(join44(temp, "credentials"), body, { mode: 384, flag: "wx" });
           writeFileSync15(join44(temp, "identity"), identity4, { mode: 384, flag: "wx" });
           unchangedFiles();
-          for (const [path, before2] of parents2) {
+          for (const [path, before2] of parents3) {
             const now3 = stat2(path);
             if (!now3 || !now3.isDirectory() || now3.isSymbolicLink() || before2 && (before2.dev !== now3.dev || before2.ino !== now3.ino))
               changed();
@@ -101178,8 +101415,8 @@ var init_recurring_customer = __esm(() => {
 });
 
 // src/lib/recurring-recovery.ts
-import { constants as constants15, closeSync as closeSync16, fsyncSync as fsyncSync4, fstatSync as fstatSync16, lstatSync as lstatSync22, mkdirSync as mkdirSync17, openSync as openSync16, readSync as readSync12, realpathSync as realpathSync8, renameSync as renameSync10, unlinkSync as unlinkSync6, writeFileSync as writeFileSync16 } from "fs";
-import { dirname as dirname20, isAbsolute as isAbsolute16, join as join45, resolve as resolve18 } from "path";
+import { constants as constants16, closeSync as closeSync17, fsyncSync as fsyncSync4, fstatSync as fstatSync17, lstatSync as lstatSync23, mkdirSync as mkdirSync17, openSync as openSync17, readSync as readSync13, realpathSync as realpathSync8, renameSync as renameSync10, unlinkSync as unlinkSync6, writeFileSync as writeFileSync16 } from "fs";
+import { dirname as dirname21, isAbsolute as isAbsolute17, join as join45, resolve as resolve19 } from "path";
 import { randomUUID as randomUUID7 } from "crypto";
 
 class RecoveryOwner {
@@ -101187,14 +101424,14 @@ class RecoveryOwner {
   parents = [];
   constructor(directory) {
     this.directory = directory;
-    if (!isAbsolute16(directory) || resolve18(directory) !== directory || realpathSync8(directory) !== directory)
+    if (!isAbsolute17(directory) || resolve19(directory) !== directory || realpathSync8(directory) !== directory)
       invalid6();
-    for (let path = directory;; path = dirname20(path)) {
-      const stat3 = lstatSync22(path);
+    for (let path = directory;; path = dirname21(path)) {
+      const stat3 = lstatSync23(path);
       if (!stat3.isDirectory() || stat3.isSymbolicLink())
         invalid6();
       this.parents.push({ path, dev: stat3.dev, ino: stat3.ino });
-      if (path === dirname20(path))
+      if (path === dirname21(path))
         break;
     }
     this.assert();
@@ -101203,59 +101440,59 @@ class RecoveryOwner {
     if (realpathSync8(this.directory) !== this.directory)
       invalid6();
     for (const prior of this.parents) {
-      const now3 = lstatSync22(prior.path);
+      const now3 = lstatSync23(prior.path);
       if (!now3.isDirectory() || now3.isSymbolicLink() || now3.dev !== prior.dev || now3.ino !== prior.ino)
         invalid6();
     }
-    const own2 = lstatSync22(this.directory);
+    const own2 = lstatSync23(this.directory);
     if ((own2.mode & 511) !== 448 || (own2.mode & 3584) !== 0 || process.getuid && own2.uid !== process.getuid())
       invalid6();
   }
   read(name) {
     this.assert();
-    const fd = openSync16(join45(this.directory, name), constants15.O_RDONLY | constants15.O_NOFOLLOW | constants15.O_NONBLOCK);
+    const fd = openSync17(join45(this.directory, name), constants16.O_RDONLY | constants16.O_NOFOLLOW | constants16.O_NONBLOCK);
     try {
-      const before2 = fstatSync16(fd);
+      const before2 = fstatSync17(fd);
       if (!before2.isFile() || before2.nlink !== 1 || (before2.mode & 4095) !== 384 || before2.size < 1 || before2.size > 8192 || process.getuid && before2.uid !== process.getuid())
         invalid6();
       const bytes = Buffer.alloc(before2.size + 1);
       let size2 = 0;
       while (size2 < bytes.length) {
-        const n2 = readSync12(fd, bytes, size2, bytes.length - size2, size2);
+        const n2 = readSync13(fd, bytes, size2, bytes.length - size2, size2);
         if (!n2)
           break;
         size2 += n2;
       }
-      const after2 = fstatSync16(fd), path = lstatSync22(join45(this.directory, name));
+      const after2 = fstatSync17(fd), path = lstatSync23(join45(this.directory, name));
       if (size2 !== before2.size || after2.size !== before2.size || before2.mtimeMs !== after2.mtimeMs || before2.ctimeMs !== after2.ctimeMs || path.dev !== before2.dev || path.ino !== before2.ino || !path.isFile() || path.isSymbolicLink())
         invalid6();
       this.assert();
       return new TextDecoder("utf-8", { fatal: true }).decode(bytes.subarray(0, size2));
     } finally {
-      closeSync16(fd);
+      closeSync17(fd);
     }
   }
   write(name, value) {
     this.assert();
     const bytes = canonicalJson2(value, 8192) + `
 `;
-    const fd = openSync16(join45(this.directory, name), constants15.O_WRONLY | constants15.O_CREAT | constants15.O_EXCL | constants15.O_NOFOLLOW, 384);
+    const fd = openSync17(join45(this.directory, name), constants16.O_WRONLY | constants16.O_CREAT | constants16.O_EXCL | constants16.O_NOFOLLOW, 384);
     try {
       writeFileSync16(fd, bytes);
       fsyncSync4(fd);
     } finally {
-      closeSync16(fd);
+      closeSync17(fd);
     }
     this.assert();
     this.sync();
   }
   sync() {
     this.assert();
-    const fd = openSync16(this.directory, constants15.O_RDONLY | constants15.O_NOFOLLOW);
+    const fd = openSync17(this.directory, constants16.O_RDONLY | constants16.O_NOFOLLOW);
     try {
       fsyncSync4(fd);
     } finally {
-      closeSync16(fd);
+      closeSync17(fd);
     }
   }
   saveState(state, expected) {
@@ -101273,20 +101510,20 @@ class RecoveryOwner {
     this.assert();
     let fd;
     try {
-      fd = openSync16(join45(this.directory, "operation.lock"), constants15.O_WRONLY | constants15.O_CREAT | constants15.O_EXCL | constants15.O_NOFOLLOW, 384);
+      fd = openSync17(join45(this.directory, "operation.lock"), constants16.O_WRONLY | constants16.O_CREAT | constants16.O_EXCL | constants16.O_NOFOLLOW, 384);
     } catch {
       throw new RecurringCustomerError("RECURRING_RECOVERY_BUSY", "Recovery is locked. Confirm the original process has stopped before explicitly reconciling the retained lock; no request was retried.");
     }
-    const owner2 = fstatSync16(fd);
+    const owner2 = fstatSync17(fd);
     try {
       writeFileSync16(fd, JSON.stringify({ pid: process.pid }));
       fsyncSync4(fd);
       this.sync();
       return await action();
     } finally {
-      closeSync16(fd);
+      closeSync17(fd);
       this.assert();
-      const now3 = lstatSync22(join45(this.directory, "operation.lock"));
+      const now3 = lstatSync23(join45(this.directory, "operation.lock"));
       if (owner2.dev !== now3.dev || owner2.ino !== now3.ino || !now3.isFile() || now3.isSymbolicLink())
         invalid6();
       unlinkSync6(join45(this.directory, "operation.lock"));
@@ -101322,7 +101559,7 @@ function base2(customer, organizationId) {
   };
 }
 function create3(directory, intent) {
-  if (!isAbsolute16(directory) || resolve18(directory) !== directory || realpathSync8(dirname20(directory)) !== dirname20(directory))
+  if (!isAbsolute17(directory) || resolve19(directory) !== directory || realpathSync8(dirname21(directory)) !== dirname21(directory))
     invalid6();
   mkdirSync17(directory, { mode: 448 });
   const owner2 = new RecoveryOwner(directory), checked = intentSchema.parse(intent), intentSha256 = canonicalJsonSha256(checked);
@@ -101485,7 +101722,7 @@ var init_recurring_recovery = __esm(() => {
 });
 
 // src/lib/recurring-surface.ts
-import { isAbsolute as isAbsolute17 } from "path";
+import { isAbsolute as isAbsolute18 } from "path";
 function recurringMcpSchema(action) {
   return action === "activate" ? recurringSurfaceSchemas.activate.extend({ code, confirm: exports_external.literal(true) }) : recurringSurfaceSchemas[action];
 }
@@ -101590,7 +101827,7 @@ var init_recurring_surface = __esm(() => {
   uuid13 = exports_external.string().regex(/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/);
   context = { userId: uuid13.optional(), membershipId: uuid13.optional() };
   page2 = { limit: exports_external.number().int().min(1).max(100).optional(), cursor: exports_external.string().min(1).max(2048).optional() };
-  directory = exports_external.string().max(4096).refine(isAbsolute17, "Use an absolute recovery directory");
+  directory = exports_external.string().max(4096).refine(isAbsolute18, "Use an absolute recovery directory");
   email4 = exports_external.string().trim().toLowerCase().email().max(254);
   code = exports_external.string().regex(/^\d{6}$/);
   recurringSurfaceSchemas = {
@@ -103496,14 +103733,14 @@ var init_operation_tools = __esm(() => {
 
 // src/lib/feedback.ts
 import { appendFileSync as appendFileSync2, existsSync as existsSync29, mkdirSync as mkdirSync18 } from "fs";
-import { dirname as dirname21, join as join47 } from "path";
+import { dirname as dirname22, join as join47 } from "path";
 import { Database } from "bun:sqlite";
 function getFeedbackDbPath() {
   return join47(getDataDir(), "skills.db");
 }
 function getFeedbackDb() {
   const dbPath = getFeedbackDbPath();
-  const dir = dirname21(dbPath);
+  const dir = dirname22(dbPath);
   if (!existsSync29(dir))
     mkdirSync18(dir, { recursive: true });
   const db = new Database(dbPath);
@@ -103532,7 +103769,7 @@ function saveFeedback(input2) {
   const category = input2.category ?? "general";
   if (isApiMode()) {
     const path = join47(getDataDir(), "feedback.jsonl");
-    const dir = dirname21(path);
+    const dir = dirname22(path);
     if (!existsSync29(dir))
       mkdirSync18(dir, { recursive: true });
     appendFileSync2(path, JSON.stringify({ message, category, email: input2.email ?? null, agent: input2.agent ?? null, version: input2.version ?? null, createdAt: new Date().toISOString() }) + `
@@ -104010,7 +104247,7 @@ var init_schedule_tools = __esm(() => {
 });
 
 // src/lib/native-storage.ts
-import { createHash as createHash21, createHmac as createHmac3 } from "crypto";
+import { createHash as createHash22, createHmac as createHmac3 } from "crypto";
 import {
   existsSync as existsSync31,
   mkdirSync as mkdirSync20,
@@ -104019,7 +104256,7 @@ import {
   statSync as statSync17,
   writeFileSync as writeFileSync18
 } from "fs";
-import { dirname as dirname22, join as join49, normalize as normalize3, relative as relative7, sep as sep7 } from "path";
+import { dirname as dirname23, join as join49, normalize as normalize3, relative as relative7, sep as sep7 } from "path";
 function resolveSkillsNativeStorageConfig(env3 = process.env) {
   assertNoRetiredModeEnvVars(env3, {
     app: SKILLS_ENV_NAMESPACE,
@@ -104087,7 +104324,7 @@ function exportSkillsLocalSnapshot(targetDir = process.cwd(), options = {}) {
       files.push({
         path: relativePath,
         sizeBytes: bytes.byteLength,
-        sha256: createHash21("sha256").update(bytes).digest("hex"),
+        sha256: createHash22("sha256").update(bytes).digest("hex"),
         ...options.includeFileContents ? { contentBase64: Buffer.from(bytes).toString("base64") } : {}
       });
     }
@@ -104379,20 +104616,20 @@ var init_private_publication_customer = __esm(() => {
 });
 
 // src/lib/private-publication-recovery.ts
-import { constants as constants16, closeSync as closeSync17, fsyncSync as fsyncSync5, fstatSync as fstatSync17, lstatSync as lstatSync23, mkdirSync as mkdirSync21, openSync as openSync17, readSync as readSync13, realpathSync as realpathSync9, renameSync as renameSync11, unlinkSync as unlinkSync7, writeFileSync as writeFileSync19 } from "fs";
-import { dirname as dirname23, isAbsolute as isAbsolute18, join as join50, resolve as resolve19 } from "path";
+import { constants as constants17, closeSync as closeSync18, fsyncSync as fsyncSync5, fstatSync as fstatSync18, lstatSync as lstatSync24, mkdirSync as mkdirSync21, openSync as openSync18, readSync as readSync14, realpathSync as realpathSync9, renameSync as renameSync11, unlinkSync as unlinkSync7, writeFileSync as writeFileSync19 } from "fs";
+import { dirname as dirname24, isAbsolute as isAbsolute19, join as join50, resolve as resolve20 } from "path";
 import { randomUUID as randomUUID8 } from "crypto";
 function safeDirectory(directory2) {
-  if (!isAbsolute18(directory2) || directory2 !== resolve19(directory2) || realpathSync9(directory2) !== directory2)
+  if (!isAbsolute19(directory2) || directory2 !== resolve20(directory2) || realpathSync9(directory2) !== directory2)
     return fail3();
-  for (let path = directory2;; path = dirname23(path)) {
-    const stat3 = lstatSync23(path);
+  for (let path = directory2;; path = dirname24(path)) {
+    const stat3 = lstatSync24(path);
     if (!stat3.isDirectory() || stat3.isSymbolicLink())
       return fail3();
-    if (path === dirname23(path))
+    if (path === dirname24(path))
       break;
   }
-  const own2 = lstatSync23(directory2);
+  const own2 = lstatSync24(directory2);
   if ((own2.mode & 63) !== 0 || process.getuid && own2.uid !== process.getuid())
     return fail3();
   return { dev: own2.dev, ino: own2.ino };
@@ -104404,35 +104641,35 @@ function unchangedDirectory(directory2, identity4) {
 }
 function readOwned(directory2, name, max2) {
   const identity4 = safeDirectory(directory2), file2 = join50(directory2, name);
-  const fd = openSync17(file2, constants16.O_RDONLY | constants16.O_NOFOLLOW);
+  const fd = openSync18(file2, constants17.O_RDONLY | constants17.O_NOFOLLOW);
   try {
-    const stat3 = fstatSync17(fd);
+    const stat3 = fstatSync18(fd);
     if (!stat3.isFile() || stat3.nlink !== 1 || stat3.size > max2 || stat3.size < 1 || (stat3.mode & 63) !== 0 || process.getuid && stat3.uid !== process.getuid())
       return fail3();
     const buffer = Buffer.alloc(Math.min(max2, stat3.size) + 1);
     let length = 0;
     while (length < buffer.length) {
-      const count = readSync13(fd, buffer, length, buffer.length - length, length);
+      const count = readSync14(fd, buffer, length, buffer.length - length, length);
       if (count === 0)
         break;
       length += count;
     }
-    const bytes = buffer.subarray(0, length), after2 = fstatSync17(fd);
+    const bytes = buffer.subarray(0, length), after2 = fstatSync18(fd);
     unchangedDirectory(directory2, identity4);
     if (bytes.length !== stat3.size || stat3.size !== after2.size || stat3.mtimeMs !== after2.mtimeMs || stat3.ctimeMs !== after2.ctimeMs)
       return fail3();
     return bytes;
   } finally {
-    closeSync17(fd);
+    closeSync18(fd);
   }
 }
 function writeOwned(directory2, name, bytes) {
-  const fd = openSync17(join50(directory2, name), constants16.O_WRONLY | constants16.O_CREAT | constants16.O_EXCL | constants16.O_NOFOLLOW, 384);
+  const fd = openSync18(join50(directory2, name), constants17.O_WRONLY | constants17.O_CREAT | constants17.O_EXCL | constants17.O_NOFOLLOW, 384);
   try {
     writeFileSync19(fd, bytes);
     fsyncSync5(fd);
   } finally {
-    closeSync17(fd);
+    closeSync18(fd);
   }
 }
 function save(directory2, value) {
@@ -104441,11 +104678,11 @@ function save(directory2, value) {
 `);
   unchangedDirectory(directory2, identity4);
   renameSync11(join50(directory2, temporary), join50(directory2, "receipt.json"));
-  const fd = openSync17(directory2, constants16.O_RDONLY | constants16.O_NOFOLLOW);
+  const fd = openSync18(directory2, constants17.O_RDONLY | constants17.O_NOFOLLOW);
   try {
     fsyncSync5(fd);
   } finally {
-    closeSync17(fd);
+    closeSync18(fd);
   }
 }
 function bind2(client2, receipt) {
@@ -104456,20 +104693,20 @@ async function locked(directory2, action) {
   const identity4 = safeDirectory(directory2), file2 = join50(directory2, "operation.lock");
   let fd;
   try {
-    fd = openSync17(file2, constants16.O_WRONLY | constants16.O_CREAT | constants16.O_EXCL | constants16.O_NOFOLLOW, 384);
+    fd = openSync18(file2, constants17.O_WRONLY | constants17.O_CREAT | constants17.O_EXCL | constants17.O_NOFOLLOW, 384);
   } catch {
     throw new PrivatePublicationError("PUBLICATION_RECOVERY_BUSY", "Another operation holds this recovery directory. If it crashed, confirm that process has stopped before explicitly removing operation.lock and resuming.");
   }
-  const lock = fstatSync17(fd);
+  const lock = fstatSync18(fd);
   try {
     writeFileSync19(fd, JSON.stringify({ pid: process.pid }) + `
 `);
     fsyncSync5(fd);
     return await action();
   } finally {
-    closeSync17(fd);
+    closeSync18(fd);
     unchangedDirectory(directory2, identity4);
-    const now3 = lstatSync23(file2);
+    const now3 = lstatSync24(file2);
     if (now3.dev !== lock.dev || now3.ino !== lock.ino || !now3.isFile() || now3.isSymbolicLink())
       fail3();
     unlinkSync7(file2);
@@ -104521,15 +104758,15 @@ async function preparePrivatePublication(client2, sourceDirectory, recoveryDirec
     phase: "prepared",
     intent: null
   };
-  if (!isAbsolute18(recoveryDirectory) || resolve19(recoveryDirectory) !== recoveryDirectory || realpathSync9(dirname23(recoveryDirectory)) !== dirname23(recoveryDirectory))
+  if (!isAbsolute19(recoveryDirectory) || resolve20(recoveryDirectory) !== recoveryDirectory || realpathSync9(dirname24(recoveryDirectory)) !== dirname24(recoveryDirectory))
     return fail3();
   mkdirSync21(recoveryDirectory, { mode: 448 });
   safeDirectory(recoveryDirectory);
-  const parent = openSync17(dirname23(recoveryDirectory), constants16.O_RDONLY | constants16.O_NOFOLLOW);
+  const parent = openSync18(dirname24(recoveryDirectory), constants17.O_RDONLY | constants17.O_NOFOLLOW);
   try {
     fsyncSync5(parent);
   } finally {
-    closeSync17(parent);
+    closeSync18(parent);
   }
   writeOwned(recoveryDirectory, "bundle.tgz", packed.bytes);
   save(recoveryDirectory, receipt);
@@ -104622,10 +104859,10 @@ var init_private_publication_recovery = __esm(() => {
 });
 
 // src/mcp/private-publication-tools.ts
-import { isAbsolute as isAbsolute19 } from "path";
+import { isAbsolute as isAbsolute20 } from "path";
 function registerPrivatePublicationTools(server) {
   const uuid9 = exports_external.string().regex(/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/);
-  const directory2 = exports_external.string().max(4096).refine(isAbsolute19, "Use an absolute local directory");
+  const directory2 = exports_external.string().max(4096).refine(isAbsolute20, "Use an absolute local directory");
   const verification2 = { email: exports_external.string().email().max(254), code: exports_external.string().regex(/^\d{6}$/), userId: uuid9, membershipId: uuid9, recoveryDirectory: directory2 };
   const description = "Manage a private source publication using fresh workspace-bound verification and a host-local recovery directory. Publishing requires explicit UUID current-version comparison and upload consent. Resume reuses immutable saved bytes and intent; an uncertain PUT is finalized for server verification, never uploaded twice. Sessions and signed URLs are not returned or persisted. Private execution is unavailable. Host request history may contain the supplied verification code.";
   const handler = (action) => async (value) => {
@@ -104985,7 +105222,7 @@ var init_mcp2 = __esm(() => {
 // src/cli/commands/runtime-mcp.ts
 import { existsSync as existsSync32, mkdirSync as mkdirSync22, readFileSync as readFileSync34, writeFileSync as writeFileSync20 } from "fs";
 import { homedir as homedir9 } from "os";
-import { dirname as dirname24, join as join51 } from "path";
+import { dirname as dirname25, join as join51 } from "path";
 async function handleMcp(options) {
   if (options.register) {
     let agents;
@@ -105159,7 +105396,7 @@ function writeJsonObject(path, data) {
 `);
 }
 function writeTextFile(path, content) {
-  mkdirSync22(dirname24(path), { recursive: true });
+  mkdirSync22(dirname25(path), { recursive: true });
   writeFileSync20(path, content.endsWith(`
 `) ? content : `${content}
 `);
@@ -105269,9 +105506,9 @@ var exports_runtime = {};
 __export(exports_runtime, {
   registerRuntime: () => registerRuntime
 });
-import { createHash as createHash22, randomUUID as randomUUID9 } from "crypto";
-import { lstatSync as lstatSync24, mkdirSync as mkdirSync23, readFileSync as readFileSync35, realpathSync as realpathSync10, writeFileSync as writeFileSync21 } from "fs";
-import { basename as basename9, isAbsolute as isAbsolute20, join as join52 } from "path";
+import { createHash as createHash23, randomUUID as randomUUID9 } from "crypto";
+import { lstatSync as lstatSync25, mkdirSync as mkdirSync23, readFileSync as readFileSync35, realpathSync as realpathSync10, writeFileSync as writeFileSync21 } from "fs";
+import { basename as basename11, isAbsolute as isAbsolute21, join as join52 } from "path";
 import { createInterface } from "readline";
 function registerRuntime(parent) {
   parent.command("run").argument("<skill>", "Skill name").argument("[args...]", "Arguments to pass to the skill; use -- to end Skills options").allowUnknownOption(true).passThroughOptions(true).option("--json", "Output result as JSON", false).option("--remote", "Run on the configured server, using its catalog and quote", false).option("--target <target>", "Execution target: local or cloud").option("--secret-bindings <path>", "Reviewed, exact-selection local execution vault bindings (JSON file)").option("--secret-bindings-template", "Print a scoped bindings template without resolving secrets or running the skill", false).option("--input <json>", "Structured cloud execution input").option("--skill-version <version>", "Exact selected skill version").option("--selection-profile <id>", "Selected Skills profile").option("--session <id>", "Pinned Skills session").option("--cached", "Use the explicit verified selected cache", false).option("--yes", "Approve the server's quoted credit cost for this run", false).option("--idempotency-key <key>", "Reuse this key when retrying the same remote submission").option("--file <path>", "Attach a local input file to a remote run (repeatable)", (value, prior) => [...prior, value], []).option("--wait", "Poll remote runs until a terminal status", false).option("--poll-interval-ms <ms>", "Remote polling interval in milliseconds", "1000").option("--poll-timeout-ms <ms>", "Maximum time to wait for a remote run", "300000").description("Run a skill directly").action(async (name, args2, options, command) => {
@@ -105301,7 +105538,7 @@ function registerRuntime(parent) {
       if (!expected)
         throw new Error("Cloud artifact not found");
       const bytes = await client2.download(id2, name);
-      if (bytes.length !== expected.byteSize || createHash22("sha256").update(bytes).digest("hex") !== expected.sha256)
+      if (bytes.length !== expected.byteSize || createHash23("sha256").update(bytes).digest("hex") !== expected.sha256)
         throw new Error("Cloud artifact integrity verification failed");
       writeFileSync21(options.output, bytes, { flag: "wx", mode: 384 });
       console.log(JSON.stringify({ path: options.output, sha256: expected.sha256, byteSize: bytes.length }));
@@ -105389,7 +105626,7 @@ Updating ${name}...
 async function readUpdatedVersion(bunExecutable) {
   const output2 = await readUpdateCommand([bunExecutable, "pm", "bin", "-g"]);
   const globalBin = output2.replace(/\r?\n$/, "");
-  if (!globalBin || !isAbsolute20(globalBin) || /[\r\n\0]/.test(globalBin))
+  if (!globalBin || !isAbsolute21(globalBin) || /[\r\n\0]/.test(globalBin))
     throw new Error("Update bin discovery failed");
   const installed = Bun.which("skills", { PATH: globalBin, cwd: globalBin });
   const selected = Bun.which("skills");
@@ -105525,14 +105762,14 @@ function requireHttpUrl(value) {
 }
 function promptLine(question) {
   const rl = createInterface({ input: process.stdin, output: process.stdout });
-  return new Promise((resolve20) => {
+  return new Promise((resolve21) => {
     let settled = false;
     const finish = (answer) => {
       if (settled)
         return;
       settled = true;
       rl.close();
-      resolve20(answer);
+      resolve21(answer);
     };
     rl.once("SIGINT", () => finish(null));
     rl.once("close", () => finish(null));
@@ -105709,10 +105946,10 @@ async function handleRun(name, args2, options, separatorBeforeSkill) {
     try {
       parsePollingOptions(options);
       inputFiles = (options.file ?? []).map((path) => {
-        const info = lstatSync24(path);
+        const info = lstatSync25(path);
         if (!info.isFile() || info.size > 20 * 1024 * 1024)
           throw new Error("Input must be a regular file no larger than 20 MiB");
-        return { name: basename9(path), bytes: new Uint8Array(readFileSync35(path)) };
+        return { name: basename11(path), bytes: new Uint8Array(readFileSync35(path)) };
       });
       describeRemoteFiles(inputFiles);
       client2 = new RemoteSkillsClient(routing.apiKey, routing.apiOrigin);
@@ -106139,7 +106376,7 @@ function ensureSafeExportParent(root2, relativePath) {
     if (part)
       parent = join52(parent, part);
     try {
-      if (!lstatSync24(parent).isDirectory() || lstatSync24(parent).isSymbolicLink())
+      if (!lstatSync25(parent).isDirectory() || lstatSync25(parent).isSymbolicLink())
         throw new Error("Unsafe artifact directory");
     } catch (error61) {
       if (error61.code !== "ENOENT")
@@ -106177,7 +106414,7 @@ async function pollRemoteRun(client2, runId2, options) {
     const remaining = deadline - Date.now();
     if (remaining <= 0)
       break;
-    await new Promise((resolve20) => setTimeout(resolve20, Math.min(options.intervalMs, remaining)));
+    await new Promise((resolve21) => setTimeout(resolve21, Math.min(options.intervalMs, remaining)));
   }
   return {
     run: current ?? { id: runId2, status: "queued" },
@@ -106369,7 +106606,7 @@ async function readCode() {
 function promptCode() {
   const { stdin, stderr: output2 } = process;
   const { isRaw: wasRaw, readableFlowing: wasFlowing } = stdin;
-  return new Promise((resolve20) => {
+  return new Promise((resolve21) => {
     let value = "", settled = false;
     const finish = (answer) => {
       if (settled)
@@ -106386,7 +106623,7 @@ function promptCode() {
 `);
       if (answer === null)
         process.exitCode = 130;
-      resolve20(answer);
+      resolve21(answer);
     };
     const cancel = () => finish(null);
     const keypress = (text3, key) => {
@@ -106431,37 +106668,37 @@ var exports_recurring = {};
 __export(exports_recurring, {
   registerRecurringCommands: () => registerRecurringCommands
 });
-import { constants as constants17, closeSync as closeSync18, fstatSync as fstatSync18, lstatSync as lstatSync25, openSync as openSync18, readSync as readSync14 } from "fs";
+import { constants as constants18, closeSync as closeSync19, fstatSync as fstatSync19, lstatSync as lstatSync26, openSync as openSync19, readSync as readSync15 } from "fs";
 import { createInterface as createInterface2 } from "readline";
 function readRequest(path) {
-  const fd = openSync18(path, constants17.O_RDONLY | constants17.O_NOFOLLOW | constants17.O_NONBLOCK);
+  const fd = openSync19(path, constants18.O_RDONLY | constants18.O_NOFOLLOW | constants18.O_NONBLOCK);
   try {
-    const before2 = fstatSync18(fd);
+    const before2 = fstatSync19(fd);
     if (!before2.isFile() || before2.size > 1048576 || before2.size < 1)
       throw new RecurringInputError;
     const bytes = Buffer.alloc(before2.size + 1);
     let length = 0;
     while (length < bytes.length) {
-      const n2 = readSync14(fd, bytes, length, bytes.length - length, length);
+      const n2 = readSync15(fd, bytes, length, bytes.length - length, length);
       if (!n2)
         break;
       length += n2;
     }
-    const after2 = fstatSync18(fd), current = lstatSync25(path);
+    const after2 = fstatSync19(fd), current = lstatSync26(path);
     if (length !== before2.size || after2.size !== before2.size || before2.mtimeMs !== after2.mtimeMs || before2.ctimeMs !== after2.ctimeMs || current.dev !== before2.dev || current.ino !== before2.ino || !current.isFile() || current.isSymbolicLink())
       throw new RecurringInputError;
     return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes.subarray(0, length)));
   } catch {
     throw new RecurringInputError;
   } finally {
-    closeSync18(fd);
+    closeSync19(fd);
   }
 }
 async function acceptAtTerminal(draft) {
-  await new Promise((resolve20, reject2) => process.stderr.write(`${jsonText(draft)}
+  await new Promise((resolve21, reject2) => process.stderr.write(`${jsonText(draft)}
 This grants an additional recurring budget. Each occurrence reprices within the approved ceilings. Revocation prevents new authority; an already-authorized attempt may finish, and cancellation is separate.
-`, (error61) => error61 ? reject2(error61) : resolve20()));
-  return new Promise((resolve20) => {
+`, (error61) => error61 ? reject2(error61) : resolve21()));
+  return new Promise((resolve21) => {
     const rl = createInterface2({ input: process.stdin, output: process.stderr });
     let settled = false;
     const finish = (accepted) => {
@@ -106472,7 +106709,7 @@ This grants an additional recurring budget. Each occurrence reprices within the
       rl.close();
       if (!accepted)
         process.exitCode = 130;
-      resolve20(accepted);
+      resolve21(accepted);
     };
     const timer = setTimeout(() => finish(false), 5 * 60 * 1000);
     rl.once("SIGINT", () => finish(false));
@@ -106880,7 +107117,7 @@ var init_portable_snapshot_filter = __esm(() => {
 });
 
 // src/lib/station-snapshot.ts
-import { createHash as createHash23 } from "crypto";
+import { createHash as createHash24 } from "crypto";
 import {
   copyFileSync,
   mkdirSync as mkdirSync24,
@@ -106888,14 +107125,14 @@ import {
   statSync as statSync19,
   writeFileSync as writeFileSync22
 } from "fs";
-import { dirname as dirname26, isAbsolute as isAbsolute21, relative as relative8, resolve as resolve20, sep as sep9 } from "path";
+import { dirname as dirname27, isAbsolute as isAbsolute22, relative as relative8, resolve as resolve21, sep as sep9 } from "path";
 function validateStationId(stationId) {
   if (!/^[a-z0-9-]+$/.test(stationId)) {
     throw new StationSnapshotError("INVALID_STATION", `station id must be a slug, got: ${stationId}`);
   }
 }
 function sha256File(filePath) {
-  return createHash23("sha256").update(readFileSync36(filePath)).digest("hex");
+  return createHash24("sha256").update(readFileSync36(filePath)).digest("hex");
 }
 function scanHome(definition, homesRoot) {
   const homePath = homePathFor(definition, homesRoot);
@@ -106966,7 +107203,7 @@ function humanHomes(scanned) {
   }));
 }
 function writeStationSnapshot(options) {
-  const repoRoot = resolve20(options.repoRoot ?? process.cwd());
+  const repoRoot = resolve21(options.repoRoot ?? process.cwd());
   const { scanned, plans, totalBytes } = planStationSnapshot(options);
   const manifestFiles = plans.map((plan) => ({
     relativePath: plan.source.relativePath,
@@ -106992,9 +107229,9 @@ function writeStationSnapshot(options) {
   const conflicts = [];
   const untouched = [];
   for (const plan of plans) {
-    const destination = resolve20(repoRoot, plan.destination);
+    const destination = resolve21(repoRoot, plan.destination);
     const destinationRelative = relative8(repoRoot, destination);
-    if (destinationRelative.startsWith("..") || destinationRelative.startsWith(sep9) || isAbsolute21(destinationRelative)) {
+    if (destinationRelative.startsWith("..") || destinationRelative.startsWith(sep9) || isAbsolute22(destinationRelative)) {
       throw new StationSnapshotError("DESTINATION_ESCAPE", `destination escapes repo root: ${plan.destination}`);
     }
     let existingDigest = null;
@@ -107015,8 +107252,8 @@ function writeStationSnapshot(options) {
   }
   let written = 0;
   for (const plan of untouched) {
-    const destination = resolve20(repoRoot, plan.destination);
-    mkdirSync24(dirname26(destination), { recursive: true });
+    const destination = resolve21(repoRoot, plan.destination);
+    mkdirSync24(dirname27(destination), { recursive: true });
     copyFileSync(plan.source.fullPath, destination);
     written += 1;
   }
@@ -107034,8 +107271,8 @@ function writeStationSnapshot(options) {
     },
     files: manifestFiles
   };
-  const manifestPath = resolve20(repoRoot, "resources", options.stationId, "skills", "sync-manifest.json");
-  mkdirSync24(dirname26(manifestPath), { recursive: true });
+  const manifestPath = resolve21(repoRoot, "resources", options.stationId, "skills", "sync-manifest.json");
+  mkdirSync24(dirname27(manifestPath), { recursive: true });
   writeFileSync22(manifestPath, `${JSON.stringify(manifest, null, 2)}
 `);
   return {
@@ -107469,10 +107706,10 @@ var init_create_sync_config = __esm(() => {
 // src/lib/codex-hook-rpc.ts
 import { execFile, spawn as spawn3 } from "child_process";
 import { realpathSync as realpathSync11, statSync as statSync20 } from "fs";
-import { isAbsolute as isAbsolute22 } from "path";
+import { isAbsolute as isAbsolute23 } from "path";
 import { promisify } from "util";
 async function connectCodexHookRpc(options) {
-  const found = isAbsolute22(options.command) ? options.command : Bun.which(options.command, { PATH: process.env.PATH });
+  const found = isAbsolute23(options.command) ? options.command : Bun.which(options.command, { PATH: process.env.PATH });
   if (!found)
     throw new Error("CODEX_HOOK_TRUST_NATIVE_UNAVAILABLE: install Codex or pass --codex-command");
   const binary = realpathSync11(found), stat3 = statSync20(binary);
@@ -107558,13 +107795,13 @@ async function connectCodexHookRpc(options) {
     request(method2, params) {
       if (stopped)
         return Promise.reject(new Error("CODEX_HOOK_TRUST_NATIVE_RPC_CLOSED"));
-      return new Promise((resolve21, reject2) => {
+      return new Promise((resolve22, reject2) => {
         const id2 = nextId++;
         const timer = setTimeout(() => {
           fail4();
           child.kill();
         }, 20000);
-        pending.set(id2, { resolve: resolve21, reject: reject2, timer });
+        pending.set(id2, { resolve: resolve22, reject: reject2, timer });
         child.stdin.write(JSON.stringify({ id: id2, method: method2, params }) + `
 `);
       });
@@ -107574,14 +107811,14 @@ async function connectCodexHookRpc(options) {
       child.stdin.end();
       if (child.exitCode !== null || child.signalCode !== null)
         return;
-      await new Promise((resolve21) => {
+      await new Promise((resolve22) => {
         const timer = setTimeout(() => {
           child.kill();
-          resolve21();
+          resolve22();
         }, 1000);
         child.once("exit", () => {
           clearTimeout(timer);
-          resolve21();
+          resolve22();
         });
       });
     }
@@ -107688,59 +107925,59 @@ var fail4 = () => new Error('CODEX_HOOK_TRUST_UNSUPPORTED_LAYOUT: preserve and c
 var init_codex_hook_trust_layout = () => {};
 
 // src/lib/codex-hook-trust-files.ts
-import { closeSync as closeSync19, constants as constants18, fstatSync as fstatSync19, fsyncSync as fsyncSync6, lstatSync as lstatSync26, openSync as openSync19, readSync as readSync15, writeFileSync as writeFileSync23 } from "fs";
-import { createHash as createHash24 } from "crypto";
-import { dirname as dirname27 } from "path";
-function need3(value, code2) {
+import { closeSync as closeSync20, constants as constants19, fstatSync as fstatSync20, fsyncSync as fsyncSync6, lstatSync as lstatSync27, openSync as openSync20, readSync as readSync16, writeFileSync as writeFileSync23 } from "fs";
+import { createHash as createHash25 } from "crypto";
+import { dirname as dirname28 } from "path";
+function need4(value, code2) {
   if (!value)
     throw new Error(`CODEX_HOOK_TRUST_${code2}`);
 }
 function safeParents(file2) {
-  for (let p = dirname27(file2);; p = dirname27(p)) {
-    const s = lstatSync26(p);
-    need3(s.isDirectory() && !s.isSymbolicLink(), "UNSAFE_PARENT");
-    need3((s.mode & 18) === 0 || s.uid === 0 && (s.mode & 512) !== 0, "UNSAFE_PARENT");
-    if (dirname27(p) === p)
+  for (let p = dirname28(file2);; p = dirname28(p)) {
+    const s = lstatSync27(p);
+    need4(s.isDirectory() && !s.isSymbolicLink(), "UNSAFE_PARENT");
+    need4((s.mode & 18) === 0 || s.uid === 0 && (s.mode & 512) !== 0, "UNSAFE_PARENT");
+    if (dirname28(p) === p)
       break;
   }
 }
 function snapshot(file2, privateFile = false, options = {}) {
   const readOnlyPackage = options.readOnlyPackage === true && !privateFile;
   safeParents(file2);
-  const initial2 = lstatSync26(file2, { bigint: true });
-  need3(initial2.isFile() && initial2.uid === BigInt(process.getuid()) && (initial2.nlink === 1n || readOnlyPackage && initial2.nlink > 1n) && (initial2.mode & 0o022n) === 0n && (!privateFile || (initial2.mode & 0o777n) === 0o600n), "UNSAFE_FILE");
-  need3(initial2.size <= 8n * 1024n * 1024n, "FILE_BOUND");
-  const fd = openSync19(file2, constants18.O_RDONLY | constants18.O_NOFOLLOW | constants18.O_NONBLOCK);
+  const initial2 = lstatSync27(file2, { bigint: true });
+  need4(initial2.isFile() && initial2.uid === BigInt(process.getuid()) && (initial2.nlink === 1n || readOnlyPackage && initial2.nlink > 1n) && (initial2.mode & 0o022n) === 0n && (!privateFile || (initial2.mode & 0o777n) === 0o600n), "UNSAFE_FILE");
+  need4(initial2.size <= 8n * 1024n * 1024n, "FILE_BOUND");
+  const fd = openSync20(file2, constants19.O_RDONLY | constants19.O_NOFOLLOW | constants19.O_NONBLOCK);
   try {
-    const before2 = fstatSync19(fd, { bigint: true });
-    need3(sameStat(initial2, before2), "INPUT_CHANGED");
+    const before2 = fstatSync20(fd, { bigint: true });
+    need4(sameStat(initial2, before2), "INPUT_CHANGED");
     const bytes = Buffer.alloc(Number(before2.size) + 1);
     let length = 0;
     while (length < bytes.length) {
-      const n2 = readSync15(fd, bytes, length, bytes.length - length, null);
+      const n2 = readSync16(fd, bytes, length, bytes.length - length, null);
       if (!n2)
         break;
       length += n2;
     }
-    need3(length === Number(before2.size) && sameStat(before2, fstatSync19(fd, { bigint: true })) && sameStat(before2, lstatSync26(file2, { bigint: true })), "INPUT_CHANGED");
+    need4(length === Number(before2.size) && sameStat(before2, fstatSync20(fd, { bigint: true })) && sameStat(before2, lstatSync27(file2, { bigint: true })), "INPUT_CHANGED");
     const content = bytes.subarray(0, length), text3 = new TextDecoder("utf-8", { fatal: true }).decode(content);
-    return { file: file2, privateFile, readOnlyPackage, text: text3, bytes: content, stat: before2, sha256: createHash24("sha256").update(content).digest("hex") };
+    return { file: file2, privateFile, readOnlyPackage, text: text3, bytes: content, stat: before2, sha256: createHash25("sha256").update(content).digest("hex") };
   } finally {
-    closeSync19(fd);
+    closeSync20(fd);
   }
 }
 function unchanged2(before2) {
   const after2 = snapshot(before2.file, before2.privateFile, before2.readOnlyPackage ? { readOnlyPackage: true } : {});
-  need3(sameStat(before2.stat, after2.stat) && after2.sha256 === before2.sha256, "INPUT_CHANGED");
+  need4(sameStat(before2.stat, after2.stat) && after2.sha256 === before2.sha256, "INPUT_CHANGED");
 }
 function save2(file2, content) {
   safeParents(file2);
-  const fd = openSync19(file2, constants18.O_WRONLY | constants18.O_CREAT | constants18.O_EXCL | constants18.O_NOFOLLOW, 384);
+  const fd = openSync20(file2, constants19.O_WRONLY | constants19.O_CREAT | constants19.O_EXCL | constants19.O_NOFOLLOW, 384);
   try {
     writeFileSync23(fd, content);
     fsyncSync6(fd);
   } finally {
-    closeSync19(fd);
+    closeSync20(fd);
   }
 }
 var sameStat = (a, b) => ["dev", "ino", "uid", "nlink", "mode", "size", "mtimeNs", "ctimeNs"].every((key) => a[key] === b[key]);
@@ -107748,26 +107985,26 @@ var init_codex_hook_trust_files = () => {};
 
 // src/lib/codex-hook-trust-identity.ts
 import { realpathSync as realpathSync12 } from "fs";
-import { dirname as dirname28, isAbsolute as isAbsolute23, join as join55 } from "path";
+import { dirname as dirname29, isAbsolute as isAbsolute24, join as join55 } from "path";
 function bindSkillsCli(command, reviewed) {
   const normal = Bun.which("skills", { PATH: process.env.PATH });
-  need3(normal, "SKILLS_COMMAND_UNAVAILABLE");
+  need4(normal, "SKILLS_COMMAND_UNAVAILABLE");
   const resolved = realpathSync12(normal);
-  const bound = isAbsolute23(command) ? command : command === "skills" ? normal : undefined;
-  need3(bound && realpathSync12(bound) === resolved, "SKILLS_COMMAND_MISMATCH");
+  const bound = isAbsolute24(command) ? command : command === "skills" ? normal : undefined;
+  need4(bound && realpathSync12(bound) === resolved, "SKILLS_COMMAND_MISMATCH");
   const entrypoint = reviewed?.path ?? process.argv[1];
-  need3(entrypoint && realpathSync12(entrypoint) === resolved, "SKILLS_ENTRYPOINT_MISMATCH");
+  need4(entrypoint && realpathSync12(entrypoint) === resolved, "SKILLS_ENTRYPOINT_MISMATCH");
   const cli = snapshot(resolved, false, { readOnlyPackage: true });
-  const manifest = snapshot(join55(dirname28(dirname28(resolved)), "package.json"), false, { readOnlyPackage: true });
+  const manifest = snapshot(join55(dirname29(dirname29(resolved)), "package.json"), false, { readOnlyPackage: true });
   const pkg = JSON.parse(manifest.text);
-  need3(pkg.name === "@hasna/skills" && /^\d+\.\d+\.\d+$/.test(pkg.version) && pkg.bin?.skills === "bin/index.js" && resolved === join55(dirname28(manifest.file), "bin/index.js"), "SKILLS_PACKAGE_MISMATCH");
+  need4(pkg.name === "@hasna/skills" && /^\d+\.\d+\.\d+$/.test(pkg.version) && pkg.bin?.skills === "bin/index.js" && resolved === join55(dirname29(manifest.file), "bin/index.js"), "SKILLS_PACKAGE_MISMATCH");
   if (reviewed)
-    need3(/^[a-f0-9]{64}$/.test(reviewed.sha256) && reviewed.sha256 === cli.sha256 && reviewed.version === pkg.version, "SKILLS_RELEASE_MISMATCH");
-  need3((cli.stat.mode & 0o100n) !== 0n, "SKILLS_COMMAND_NOT_EXECUTABLE");
+    need4(/^[a-f0-9]{64}$/.test(reviewed.sha256) && reviewed.sha256 === cli.sha256 && reviewed.version === pkg.version, "SKILLS_RELEASE_MISMATCH");
+  need4((cli.stat.mode & 0o100n) !== 0n, "SKILLS_COMMAND_NOT_EXECUTABLE");
   return {
     receipt: { path: resolved, version: pkg.version, sha256: cli.sha256, manifestSha256: manifest.sha256 },
     recheck() {
-      need3(Bun.which("skills", { PATH: process.env.PATH }) === normal && realpathSync12(normal) === resolved && realpathSync12(bound) === resolved && realpathSync12(entrypoint) === resolved, "SKILLS_COMMAND_CHANGED");
+      need4(Bun.which("skills", { PATH: process.env.PATH }) === normal && realpathSync12(normal) === resolved && realpathSync12(bound) === resolved && realpathSync12(entrypoint) === resolved, "SKILLS_COMMAND_CHANGED");
       unchanged2(cli);
       unchanged2(manifest);
     }
@@ -107778,15 +108015,15 @@ var init_codex_hook_trust_identity = __esm(() => {
 });
 
 // src/lib/agent-codex-trust.ts
-import { lstatSync as lstatSync27, mkdirSync as mkdirSync25, readdirSync as readdirSync20 } from "fs";
-import { createHash as createHash25, randomUUID as randomUUID10 } from "crypto";
-import { join as join56, resolve as resolve21 } from "path";
+import { lstatSync as lstatSync28, mkdirSync as mkdirSync25, readdirSync as readdirSync20 } from "fs";
+import { createHash as createHash26, randomUUID as randomUUID10 } from "crypto";
+import { join as join56, resolve as resolve22 } from "path";
 import { homedir as homedir11 } from "os";
 import { isDeepStrictEqual as isDeepStrictEqual6 } from "util";
 async function enrollCodexNativeHooks(options = {}, connect = connectCodexHookRpc) {
   let rpc, journal;
   try {
-    const home = resolve21(options.home ?? homedir11()), dataDir3 = resolve21(options.dataDir ?? getDataDirReadOnly());
+    const home = resolve22(options.home ?? homedir11()), dataDir3 = resolve22(options.dataDir ?? getDataDirReadOnly());
     assertManagedAgentBridge("codex", { home, dataDir: dataDir3, projectDir: home });
     const policyFile = snapshot(join56(dataDir3, "agent-policy.json"), true), policy = parseManagedSkillPolicy(policyFile.text);
     const binding = policy.bridge, alias = binding.rootAliases?.find((item) => item.agent === "codex");
@@ -107797,35 +108034,35 @@ async function enrollCodexNativeHooks(options = {}, connect = connectCodexHookRp
     for (const [event, [nativeEvent, label]] of Object.entries(eventNames)) {
       const command = renderAgentHookCommand(binding.commands.codex, "codex", binding.profiles.codex, event);
       const groups = declarations[event];
-      need3(Array.isArray(groups), "DECLARATION_CHANGED");
+      need4(Array.isArray(groups), "DECLARATION_CHANGED");
       const matches2 = groups.flatMap((group, gi) => (group.hooks ?? []).flatMap((entry, hi) => entry.command === command ? [{ group, entry, gi, hi }] : []));
-      need3(matches2.length === 1 && isDeepStrictEqual6(matches2[0].group, { hooks: [{ type: "command", command, timeout: 15 }] }), "DECLARATION_CHANGED");
+      need4(matches2.length === 1 && isDeepStrictEqual6(matches2[0].group, { hooks: [{ type: "command", command, timeout: 15 }] }), "DECLARATION_CHANGED");
       expected.push({ event: nativeEvent, key: `${join56(home, ".codex/hooks.json")}:${label}:${matches2[0].gi}:${matches2[0].hi}`, command });
     }
     codexTrustTextWitness(configFile.text, expected.map((h) => h.key));
     rpc = await connect({ command: options.codexCommand ?? "codex", home, codexHome });
-    need3(SUPPORTED_CODEX_HOOK_VERSIONS.includes(rpc.version), "NATIVE_UNSUPPORTED_VERSION");
+    need4(SUPPORTED_CODEX_HOOK_VERSIONS.includes(rpc.version), "NATIVE_UNSUPPORTED_VERSION");
     const list2 = async () => {
       const response = await rpc.request("hooks/list", { cwds: [home] });
-      need3(Array.isArray(response?.data) && response.data.length === 1 && response.data[0].cwd === home && Array.isArray(response.data[0].hooks) && response.data[0].hooks.length <= 1e4 && !response.data[0].errors?.length && !response.data[0].warnings?.length, "NATIVE_DISCOVERY_REFUSED");
+      need4(Array.isArray(response?.data) && response.data.length === 1 && response.data[0].cwd === home && Array.isArray(response.data[0].hooks) && response.data[0].hooks.length <= 1e4 && !response.data[0].errors?.length && !response.data[0].warnings?.length, "NATIVE_DISCOVERY_REFUSED");
       return response.data[0].hooks;
     };
     const admit = (hooks) => expected.map((wanted) => {
       const canonicalKey = wanted.key.replace(join56(home, ".codex/hooks.json"), hooksPath);
       const matches2 = hooks.filter((h2) => h2.key === wanted.key || h2.key === canonicalKey);
-      need3(matches2.length === 1, "AMBIGUOUS_IDENTITY");
+      need4(matches2.length === 1, "AMBIGUOUS_IDENTITY");
       const h = matches2[0];
-      need3(h.eventName === wanted.event && h.handlerType === "command" && h.command === wanted.command && h.matcher === null && h.timeoutSec === 15 && h.async === false && h.statusMessage === null && h.additionalContextLimit === null && [hooksPath, join56(home, ".codex/hooks.json")].includes(h.sourcePath) && h.source === "user" && h.pluginId === null && h.isManaged === false && /^sha256:[a-f0-9]{64}$/.test(h.currentHash) && typeof h.enabled === "boolean", "NATIVE_IDENTITY_CHANGED");
-      need3(hooks.filter((other) => other.command === wanted.command).length === 1, "AMBIGUOUS_IDENTITY");
-      need3(["trusted", "untrusted", "modified"].includes(h.trustStatus), "UNKNOWN_TRUST_STATUS");
+      need4(h.eventName === wanted.event && h.handlerType === "command" && h.command === wanted.command && h.matcher === null && h.timeoutSec === 15 && h.async === false && h.statusMessage === null && h.additionalContextLimit === null && [hooksPath, join56(home, ".codex/hooks.json")].includes(h.sourcePath) && h.source === "user" && h.pluginId === null && h.isManaged === false && /^sha256:[a-f0-9]{64}$/.test(h.currentHash) && typeof h.enabled === "boolean", "NATIVE_IDENTITY_CHANGED");
+      need4(hooks.filter((other) => other.command === wanted.command).length === 1, "AMBIGUOUS_IDENTITY");
+      need4(["trusted", "untrusted", "modified"].includes(h.trustStatus), "UNKNOWN_TRUST_STATUS");
       return { key: h.key, event: wanted.event, command: wanted.command, handlerType: h.handlerType, timeoutSec: h.timeoutSec, sourcePath: h.sourcePath, currentHash: h.currentHash, enabled: h.enabled, trustStatus: h.trustStatus };
     });
     const discovered = await list2(), admitted = admit(discovered);
     const config2 = await rpc.request("config/read", { includeLayers: true, cwd: home });
     const layers = config2?.layers?.filter((layer) => layer.name?.type === "user" && layer.name.file === configPath && !layer.name.profile);
-    need3(layers?.length === 1 && /^sha256:[a-f0-9]{64}$/.test(layers[0].version) && !layers[0].disabledReason && isDeepStrictEqual6(layers[0].config, original), "NATIVE_CONFIG_MISMATCH");
-    need3(config2.config && config2.config.features?.hooks !== false, "NATIVE_HOOKS_DISABLED");
-    need3(config2.layers.slice(0, config2.layers.indexOf(layers[0])).every((layer) => layer.config?.hooks === undefined && layer.config?.features?.hooks === undefined), "NATIVE_CONFIG_OVERRIDDEN");
+    need4(layers?.length === 1 && /^sha256:[a-f0-9]{64}$/.test(layers[0].version) && !layers[0].disabledReason && isDeepStrictEqual6(layers[0].config, original), "NATIVE_CONFIG_MISMATCH");
+    need4(config2.config && config2.config.features?.hooks !== false, "NATIVE_HOOKS_DISABLED");
+    need4(config2.layers.slice(0, config2.layers.indexOf(layers[0])).every((layer) => layer.config?.hooks === undefined && layer.config?.features?.hooks === undefined), "NATIVE_CONFIG_OVERRIDDEN");
     const keys3 = admitted.map((h) => h.key), planned = admitted.filter((h) => !h.enabled || h.trustStatus !== "trusted");
     const preservationText = codexTrustTextWitness(configFile.text, keys3);
     const checkInputs = () => {
@@ -107836,19 +108073,19 @@ async function enrollCodexNativeHooks(options = {}, connect = connectCodexHookRp
       unchanged2(configFile);
     };
     checkInputs();
-    const planDigest = createHash25("sha256").update(json2({ version: 1, home, configPath, configSha256: configFile.sha256, configVersion: layers[0].version, policySha256: policyFile.sha256, hooksSha256: hooksFile.sha256, skillsCli: skillsCli.receipt, nativeVersion: rpc.version, declarations: expected, admitted })).digest("hex");
+    const planDigest = createHash26("sha256").update(json2({ version: 1, home, configPath, configSha256: configFile.sha256, configVersion: layers[0].version, policySha256: policyFile.sha256, hooksSha256: hooksFile.sha256, skillsCli: skillsCli.receipt, nativeVersion: rpc.version, declarations: expected, admitted })).digest("hex");
     const baseReceipt = { planDigest, skillsCli: skillsCli.receipt, nativeVersion: rpc.version, ownedNativeProcessId: rpc.processId, agent: "codex", applied: false, planned, nativeEligible: planned.length === 0, transport: "owned-stdio-process", existingSessionsReloaded: false, nativeExecutionVerified: false };
     if (options.apply)
-      need3(options.reviewedPlanDigest === planDigest, "PLAN_CHANGED: run the dry-run again and pass its reviewed --plan-digest with --apply");
+      need4(options.reviewedPlanDigest === planDigest, "PLAN_CHANGED: run the dry-run again and pass its reviewed --plan-digest with --apply");
     const parent = join56(dataDir3, "native-hook-trust");
-    const st = lstatSync27(parent, { throwIfNoEntry: false });
+    const st = lstatSync28(parent, { throwIfNoEntry: false });
     if (st) {
-      need3(st.isDirectory() && !st.isSymbolicLink() && st.uid === process.getuid() && (st.mode & 511) === 448, "UNSAFE_JOURNAL");
+      need4(st.isDirectory() && !st.isSymbolicLink() && st.uid === process.getuid() && (st.mode & 511) === 448, "UNSAFE_JOURNAL");
       const priorJournals = readdirSync20(parent);
-      need3(priorJournals.length < 1000, "JOURNAL_BOUND");
+      need4(priorJournals.length < 1000, "JOURNAL_BOUND");
       for (const name of priorJournals) {
-        need3(/^[a-f0-9-]{36}$/.test(name), "UNSAFE_JOURNAL");
-        need3(lstatSync27(join56(parent, name, "receipt.json"), { throwIfNoEntry: false })?.isFile(), "RECONCILE_REQUIRED: inspect the incomplete private journal before applying again");
+        need4(/^[a-f0-9-]{36}$/.test(name), "UNSAFE_JOURNAL");
+        need4(lstatSync28(join56(parent, name, "receipt.json"), { throwIfNoEntry: false })?.isFile(), "RECONCILE_REQUIRED: inspect the incomplete private journal before applying again");
       }
     }
     if (!options.apply || !planned.length)
@@ -107861,7 +108098,7 @@ async function enrollCodexNativeHooks(options = {}, connect = connectCodexHookRp
     save2(join56(journal, "hooks.before.json"), hooksFile.bytes);
     save2(join56(journal, "policy.before.json"), policyFile.bytes);
     save2(join56(journal, "intent.json"), json2({ version: 1, planDigest, skillsCli: skillsCli.receipt, nativeVersion: rpc.version, configPath, beforeSha256: configFile.sha256, hooksSha256: hooksFile.sha256, policySha256: policyFile.sha256, expectedVersion: layers[0].version, hooks: planned }));
-    need3(isDeepStrictEqual6(admit(await list2()), admitted), "NATIVE_DISCOVERY_CHANGED");
+    need4(isDeepStrictEqual6(admit(await list2()), admitted), "NATIVE_DISCOVERY_CHANGED");
     checkInputs();
     let result2;
     try {
@@ -107869,19 +108106,19 @@ async function enrollCodexNativeHooks(options = {}, connect = connectCodexHookRp
     } catch {
       throw new Error("CODEX_HOOK_TRUST_NATIVE_WRITE_FAILED: reconcile the private journal before retrying");
     }
-    need3(result2?.status === "ok" && result2.filePath === configPath && /^sha256:[a-f0-9]{64}$/.test(result2.version), "NATIVE_WRITE_OVERRIDDEN");
+    need4(result2?.status === "ok" && result2.filePath === configPath && /^sha256:[a-f0-9]{64}$/.test(result2.version), "NATIVE_WRITE_OVERRIDDEN");
     const after2 = snapshot(configPath, true), expectedConfig = structuredClone(original);
     expectedConfig.hooks ??= {};
     expectedConfig.hooks.state ??= {};
     for (const h of planned)
       expectedConfig.hooks.state[h.key] = { ...expectedConfig.hooks.state[h.key], enabled: true, trusted_hash: h.currentHash };
-    need3(isDeepStrictEqual6(structure(after2.text), expectedConfig) && codexTrustTextWitness(after2.text, keys3) === preservationText, "PRESERVATION_FAILED");
+    need4(isDeepStrictEqual6(structure(after2.text), expectedConfig) && codexTrustTextWitness(after2.text, keys3) === preservationText, "PRESERVATION_FAILED");
     unchanged2(policyFile);
     unchanged2(hooksFile);
     assertManagedAgentBridge("codex", { home, dataDir: dataDir3, projectDir: home });
     const current = await list2(), confirmed = admit(current);
-    need3(confirmed.every((h) => h.enabled && h.trustStatus === "trusted") && isDeepStrictEqual6(confirmed.map((h) => [h.key, h.currentHash]), admitted.map((h) => [h.key, h.currentHash])), "NATIVE_NOT_ELIGIBLE");
-    need3(isDeepStrictEqual6(current.filter((h) => !keys3.includes(h.key)), discovered.filter((h) => !keys3.includes(h.key))), "UNRELATED_HOOK_CHANGED");
+    need4(confirmed.every((h) => h.enabled && h.trustStatus === "trusted") && isDeepStrictEqual6(confirmed.map((h) => [h.key, h.currentHash]), admitted.map((h) => [h.key, h.currentHash])), "NATIVE_NOT_ELIGIBLE");
+    need4(isDeepStrictEqual6(current.filter((h) => !keys3.includes(h.key)), discovered.filter((h) => !keys3.includes(h.key))), "UNRELATED_HOOK_CHANGED");
     unchanged2(after2);
     unchanged2(hooksFile);
     unchanged2(policyFile);
@@ -107996,7 +108233,7 @@ __export(exports_agent_integration, {
   registerAgentIntegration: () => registerAgentIntegration
 });
 import { readFileSync as readFileSync37 } from "fs";
-import { isAbsolute as isAbsolute24 } from "path";
+import { isAbsolute as isAbsolute25 } from "path";
 function pinnedHookProfile(input3, configuredProfile) {
   try {
     const parsed = parseSkillContextInput(JSON.stringify(input3));
@@ -108114,12 +108351,12 @@ function registerAgentIntegration(parent) {
       input3.hook_event_name = event;
       const projects = [process.cwd()];
       if (input3.cwd !== undefined) {
-        if (typeof input3.cwd !== "string" || !isAbsolute24(input3.cwd) || input3.cwd.includes("\x00"))
+        if (typeof input3.cwd !== "string" || !isAbsolute25(input3.cwd) || input3.cwd.includes("\x00"))
           throw new Error("Invalid native hook working directory");
         projects.push(input3.cwd);
       }
       if (options.agent === "cursor") {
-        if (!Array.isArray(input3.workspace_roots) || input3.workspace_roots.length > 32 || input3.workspace_roots.some((path) => typeof path !== "string" || !isAbsolute24(path) || path.includes("\x00")))
+        if (!Array.isArray(input3.workspace_roots) || input3.workspace_roots.length > 32 || input3.workspace_roots.some((path) => typeof path !== "string" || !isAbsolute25(path) || path.includes("\x00")))
           throw new Error("Invalid Cursor workspace roots");
         projects.push(...input3.workspace_roots);
         input3.cwd ??= input3.workspace_roots[0] ?? process.cwd();
@@ -108357,17 +108594,17 @@ var exports_profiles = {};
 __export(exports_profiles, {
   registerProfiles: () => registerProfiles
 });
-import { closeSync as closeSync20, constants as constants19, fstatSync as fstatSync20, openSync as openSync20, readSync as readSync16, writeFileSync as writeFileSync24 } from "fs";
+import { closeSync as closeSync21, constants as constants20, fstatSync as fstatSync21, openSync as openSync21, readSync as readSync17, writeFileSync as writeFileSync24 } from "fs";
 function readProfileInput(path) {
-  const fd = openSync20(path, constants19.O_RDONLY | constants19.O_NONBLOCK);
+  const fd = openSync21(path, constants20.O_RDONLY | constants20.O_NONBLOCK);
   try {
-    const stat3 = fstatSync20(fd);
+    const stat3 = fstatSync21(fd);
     if (!stat3.isFile() || stat3.size > MAX_PROFILE_DOCUMENT_BYTES)
       throw new Error("Profile input exceeds the size limit or is not a regular file");
     const bytes = Buffer.alloc(MAX_PROFILE_DOCUMENT_BYTES + 1);
     let size2 = 0;
     while (size2 < bytes.length) {
-      const read3 = readSync16(fd, bytes, size2, bytes.length - size2, null);
+      const read3 = readSync17(fd, bytes, size2, bytes.length - size2, null);
       if (!read3)
         break;
       size2 += read3;
@@ -108376,7 +108613,7 @@ function readProfileInput(path) {
       throw new Error("Profile input exceeds the size limit");
     return new TextDecoder("utf-8", { fatal: true }).decode(bytes.subarray(0, size2));
   } finally {
-    closeSync20(fd);
+    closeSync21(fd);
   }
 }
 function registerProfiles(parent) {
@@ -108427,23 +108664,23 @@ __export(exports_grants, {
   registerGrants: () => registerGrants
 });
 import {
-  constants as constants20,
-  closeSync as closeSync21,
-  fstatSync as fstatSync21,
-  openSync as openSync21,
-  readSync as readSync17,
+  constants as constants21,
+  closeSync as closeSync23,
+  fstatSync as fstatSync23,
+  openSync as openSync23,
+  readSync as readSync18,
   writeFileSync as writeFileSync25
 } from "fs";
 function readInput(path) {
-  const fd = openSync21(path, constants20.O_RDONLY | constants20.O_NONBLOCK);
+  const fd = openSync23(path, constants21.O_RDONLY | constants21.O_NONBLOCK);
   try {
-    const stat3 = fstatSync21(fd);
+    const stat3 = fstatSync23(fd);
     if (!stat3.isFile() || stat3.size > MAX_EXECUTION_GRANT_BYTES)
       throw new Error("Grant input must be a regular file within the policy size limit.");
     const bytes = Buffer.alloc(MAX_EXECUTION_GRANT_BYTES + 1);
     let size2 = 0;
     while (size2 < bytes.length) {
-      const count = readSync17(fd, bytes, size2, bytes.length - size2, null);
+      const count = readSync18(fd, bytes, size2, bytes.length - size2, null);
       if (!count)
         break;
       size2 += count;
@@ -108456,7 +108693,7 @@ function readInput(path) {
       throw new Error("Grant input must be a JSON document containing a grants array.");
     }
   } finally {
-    closeSync21(fd);
+    closeSync23(fd);
   }
 }
 function registerGrants(parent) {
@@ -108492,7 +108729,7 @@ var init_grants = __esm(() => {
 });
 
 // src/lib/station-hydrate.ts
-import { createHash as createHash26 } from "crypto";
+import { createHash as createHash27 } from "crypto";
 import {
   copyFileSync as copyFileSync2,
   mkdirSync as mkdirSync26,
@@ -108501,7 +108738,7 @@ import {
   statSync as statSync21,
   writeFileSync as writeFileSync26
 } from "fs";
-import { dirname as dirname29, join as join57, resolve as resolve22, sep as sep10 } from "path";
+import { dirname as dirname30, join as join57, resolve as resolve23, sep as sep10 } from "path";
 function fail5(code2, message, detail = []) {
   throw new StationSnapshotError(code2, message, detail);
 }
@@ -108695,12 +108932,12 @@ function skillSha256(skill) {
     return sha256File(skill.files[0].winner.fullPath);
   }
   const joined = skill.files.map((file2) => sha256File(file2.winner.fullPath));
-  return createHash26("sha256").update(joined.sort().join(`
+  return createHash27("sha256").update(joined.sort().join(`
 `)).digest("hex");
 }
 function writeStationHydration(options) {
-  const repoRoot = resolve22(options.repoRoot ?? process.cwd());
-  const cacheRoot = resolve22(options.cacheRoot ?? resolveCorpusRoot());
+  const repoRoot = resolve23(options.repoRoot ?? process.cwd());
+  const cacheRoot = resolve23(options.cacheRoot ?? resolveCorpusRoot());
   const plan = planStationHydration(options.stationId, repoRoot);
   const resultSkills = plan.winners.map((skill) => ({
     ident: skill.ident,
@@ -108754,7 +108991,7 @@ function writeStationHydration(options) {
   }
   let written = 0;
   for (const entry of toWrite) {
-    mkdirSync26(dirname29(entry.destination), { recursive: true });
+    mkdirSync26(dirname30(entry.destination), { recursive: true });
     copyFileSync2(entry.fullPath, entry.destination);
     written += 1;
   }
@@ -108775,8 +109012,8 @@ function writeStationHydration(options) {
     },
     skills: resultSkills
   };
-  const hydrationManifestPath = join57(dirname29(cacheRoot), `hydration-${options.stationId}.json`);
-  mkdirSync26(dirname29(hydrationManifestPath), { recursive: true });
+  const hydrationManifestPath = join57(dirname30(cacheRoot), `hydration-${options.stationId}.json`);
+  mkdirSync26(dirname30(hydrationManifestPath), { recursive: true });
   writeFileSync26(hydrationManifestPath, `${JSON.stringify(hydration, null, 2)}
 `);
   return {
@@ -108852,10 +109089,10 @@ var init_hydrate = __esm(() => {
 });
 
 // src/lib/prepare-skill.ts
-import { createHash as createHash27, randomUUID as randomUUID11 } from "crypto";
-import { chmodSync as chmodSync3, existsSync as existsSync34, lstatSync as lstatSync28, mkdirSync as mkdirSync27, mkdtempSync as mkdtempSync6, readFileSync as readFileSync39, readdirSync as readdirSync22, renameSync as renameSync12, rmSync as rmSync9, writeFileSync as writeFileSync27 } from "fs";
+import { createHash as createHash28, randomUUID as randomUUID11 } from "crypto";
+import { chmodSync as chmodSync3, existsSync as existsSync34, lstatSync as lstatSync29, mkdirSync as mkdirSync27, mkdtempSync as mkdtempSync6, readFileSync as readFileSync39, readdirSync as readdirSync22, renameSync as renameSync12, rmSync as rmSync9, writeFileSync as writeFileSync27 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
-import { dirname as dirname30, isAbsolute as isAbsolute25, join as join58, relative as relative9, resolve as resolve23, sep as sep11 } from "path";
+import { dirname as dirname31, isAbsolute as isAbsolute26, join as join58, relative as relative9, resolve as resolve24, sep as sep11 } from "path";
 function prepareSkill(name, options) {
   const normalized = normalizePortableSkillName(name);
   if (!new RegExp(SEMVER_PATTERN).test(options.version))
@@ -108900,7 +109137,7 @@ function prepareSkill(name, options) {
       mkdirSync27(join58(staging, directory2), { recursive: true });
     for (const file2 of before2.files) {
       const destination = join58(staging, file2.path);
-      mkdirSync27(dirname30(destination), { recursive: true });
+      mkdirSync27(dirname31(destination), { recursive: true });
       writeFileSync27(destination, file2.bytes, { mode: file2.mode });
     }
     const stagedManifest = join58(staging, "skill.json");
@@ -108960,8 +109197,8 @@ function validateRuntimeEntrypoint(candidate2, root2) {
   const entry = candidate2.runtime.entrypoint;
   if (typeof entry !== "string")
     return;
-  const target = resolve23(root2, entry), rel = relative9(root2, target);
-  if (isAbsolute25(entry) || /^[a-zA-Z]:/.test(entry) || entry.includes("\\") || !rel || rel === ".." || rel.startsWith(`..${sep11}`) || isAbsolute25(rel) || !existsSync34(target) || !lstatSync28(target).isFile()) {
+  const target = resolve24(root2, entry), rel = relative9(root2, target);
+  if (isAbsolute26(entry) || /^[a-zA-Z]:/.test(entry) || entry.includes("\\") || !rel || rel === ".." || rel.startsWith(`..${sep11}`) || isAbsolute26(rel) || !existsSync34(target) || !lstatSync29(target).isFile()) {
     throw new Error("Executable runtime.entrypoint must name an existing regular file inside the skill directory.");
   }
 }
@@ -109033,11 +109270,11 @@ function compareVersions(left, right) {
   return 0;
 }
 function snapshot2(root2) {
-  const rootStat = lstatSync28(root2);
+  const rootStat = lstatSync29(root2);
   if (rootStat.isSymbolicLink() || !rootStat.isDirectory())
     throw new Error("Skill root must be a real directory, not a symlink.");
   const files = [], directories = [];
-  const hash4 = createHash27("sha256").update(`${rootStat.dev}:${rootStat.ino}\x00`);
+  const hash4 = createHash28("sha256").update(`${rootStat.dev}:${rootStat.ino}\x00`);
   let count = 0, bytes = 0;
   const walk2 = (relative10) => {
     for (const name of readdirSync22(join58(root2, relative10)).sort()) {
@@ -109046,7 +109283,7 @@ function snapshot2(root2) {
       const path = relative10 ? `${relative10}/${name}` : name;
       if (++count > 20000)
         throw new Error("Skill exceeds the preparation entry limit (20000).");
-      const absolute = join58(root2, path), stat3 = lstatSync28(absolute);
+      const absolute = join58(root2, path), stat3 = lstatSync29(absolute);
       if (stat3.isSymbolicLink())
         throw new Error(`Skill contains a symlink: ${path}. No files were changed.`);
       if (stat3.isDirectory() && name === "node_modules")
@@ -109461,7 +109698,7 @@ var init_schedule = __esm(() => {
 
 // src/lib/registry-sync.ts
 import { mkdirSync as mkdirSync28, writeFileSync as writeFileSync28 } from "fs";
-import { dirname as dirname31, relative as relative10 } from "path";
+import { dirname as dirname32, relative as relative10 } from "path";
 function createRegistrySyncArtifact(options = {}) {
   const profile = options.profile ?? "all";
   const includeDocs = options.includeDocs ?? true;
@@ -109518,7 +109755,7 @@ function createRegistrySyncArtifact(options = {}) {
   };
 }
 function writeRegistrySyncArtifact(path, artifact) {
-  mkdirSync28(dirname31(path), { recursive: true });
+  mkdirSync28(dirname32(path), { recursive: true });
   writeFileSync28(path, `${JSON.stringify(artifact, null, 2)}
 `);
 }
@@ -109551,12 +109788,12 @@ function registerRegistry(parent) {
 async function writeJson2(value, space) {
   const text3 = `${JSON.stringify(value, null, space)}
 `;
-  await new Promise((resolve24, reject2) => {
+  await new Promise((resolve25, reject2) => {
     process.stdout.write(text3, (error61) => {
       if (error61)
         reject2(error61);
       else
-        resolve24();
+        resolve25();
     });
   });
 }
@@ -110013,7 +110250,7 @@ var exports_private_publications = {};
 __export(exports_private_publications, {
   registerPrivatePublications: () => registerPrivatePublications
 });
-import { resolve as resolve24 } from "path";
+import { resolve as resolve25 } from "path";
 function verifyOptions(options, action) {
   if (options.userId === undefined !== (options.membershipId === undefined) || options.userId !== undefined && (!publicationUuid(options.userId) || !publicationUuid(options.membershipId)))
     throw new PrivatePublicationError("PUBLICATION_CONTEXT_REQUIRED", "Provide both observed --user-id and --membership-id UUIDs.");
@@ -110058,9 +110295,9 @@ function registerPrivatePublications(parent) {
         if (code2 === null)
           return;
         const context2 = options.userId ? { userId: options.userId, membershipId: options.membershipId } : undefined;
-        const client2 = await privatePublicationSession(options.email, code2, context2), directory2 = resolve24(options.recoveryDir);
+        const client2 = await privatePublicationSession(options.email, code2, context2), directory2 = resolve25(options.recoveryDir);
         if (action === "publish")
-          await preparePrivatePublication(client2, resolve24(args2[0]), directory2, { skillId: options.skillId, expectedCurrentVersionId: options.expectedCurrentVersion ?? null, idempotencyKey: options.idempotencyKey });
+          await preparePrivatePublication(client2, resolve25(args2[0]), directory2, { skillId: options.skillId, expectedCurrentVersionId: options.expectedCurrentVersion ?? null, idempotencyKey: options.idempotencyKey });
         const result2 = action === "publish" || action === "resume" ? await continuePrivatePublication(client2, directory2, { confirm: true, waitMs: Number(options.waitSeconds) * 1000 }) : await inspectPrivatePublication(client2, directory2, action === "cancel");
         print2(result2, options.json);
       } catch (error61) {
@@ -110161,7 +110398,7 @@ __export(exports_auth, {
 import { createInterface as createInterface3 } from "readline";
 function prompt(question) {
   const rl = createInterface3({ input: process.stdin, output: process.stdout });
-  return new Promise((resolve25) => {
+  return new Promise((resolve26) => {
     let settled = false;
     const finish = (answer) => {
       if (settled)
@@ -110170,7 +110407,7 @@ function prompt(question) {
       rl.close();
       if (answer === null)
         process.exitCode = 130;
-      resolve25(answer);
+      resolve26(answer);
     };
     rl.once("SIGINT", () => finish(null));
     rl.once("close", () => finish(null));
@@ -110278,7 +110515,7 @@ function printWhoami(payload) {
     console.log(source_default.dim("(offline \u2014 showing cached info)"));
 }
 function sleep(ms) {
-  return new Promise((resolve25) => setTimeout(resolve25, ms));
+  return new Promise((resolve26) => setTimeout(resolve26, ms));
 }
 function browserCommand(url2) {
   if (process.platform === "darwin")
@@ -110780,7 +111017,7 @@ function promptInvitationProof(kind) {
   const label = kind === "token" ? "invitation token" : "recovery code";
   const character = kind === "token" ? /^[A-Za-z0-9_-]$/ : /^\d$/;
   const { stdin, stderr: output2 } = process, wasRaw = stdin.isRaw, wasFlowing = stdin.readableFlowing;
-  return new Promise((resolve25) => {
+  return new Promise((resolve26) => {
     let value = "", settled = false, overflow = false;
     const finish = (answer) => {
       if (settled)
@@ -110797,7 +111034,7 @@ function promptInvitationProof(kind) {
 `);
       if (answer === null)
         process.exitCode = 130;
-      resolve25(answer);
+      resolve26(answer);
     };
     const cancel = () => finish(null);
     const keypress = (text3, key) => {