@hasna/skills 0.8.2 → 0.8.3

package/bin/worker.js

@@ -76164,11 +76164,11 @@ var init_dist_es9 = __esm(() => {
 });
 
 // src/server/worker.ts
-import { randomUUID as randomUUID5 } from "crypto";
+import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.8.2",
+  version: "0.8.3",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -87454,11 +87454,82 @@ function looksLikeSqlitePath(value) {
   return SQLITE_EXTENSIONS.some((extension) => value.toLowerCase().endsWith(extension));
 }
 
+// src/server/execution-grant-store.ts
+import { randomUUID } from "crypto";
+function next(p2, id, grants, expected) {
+  return {
+    schema: "hasna.skills-execution-grants.v1",
+    profileId: id,
+    workspaceId: p2.orgId,
+    revision: randomUUID(),
+    previousRevision: expected,
+    updatedAt: new Date().toISOString(),
+    actorId: p2.userId,
+    grants: structuredClone(grants)
+  };
+}
+function document(row) {
+  return row ? typeof row.document_json === "string" ? JSON.parse(row.document_json) : structuredClone(row.document_json) : null;
+}
+
+class MemoryExecutionGrantStore {
+  current = new Map;
+  history = new Map;
+  async get(p2, id, revision) {
+    return structuredClone((revision ? this.history.get(JSON.stringify([p2.orgId, id, revision])) : this.current.get(JSON.stringify([p2.orgId, id]))) ?? null);
+  }
+  async save(p2, id, grants, expected) {
+    const key = JSON.stringify([p2.orgId, id]);
+    if ((this.current.get(key)?.revision ?? null) !== expected)
+      return null;
+    const value = next(p2, id, grants, expected);
+    this.current.set(key, value);
+    this.history.set(JSON.stringify([p2.orgId, id, value.revision]), value);
+    return structuredClone(value);
+  }
+}
+
+class SqliteExecutionGrantStore {
+  db;
+  constructor(db) {
+    this.db = db;
+  }
+  async get(p2, id, revision) {
+    return document(revision ? this.db.query("SELECT document_json FROM skills_execution_grant_revisions WHERE org_id=? AND profile_id=? AND revision=?").get(p2.orgId, id, revision) : this.db.query("SELECT document_json FROM skills_execution_grants WHERE org_id=? AND profile_id=?").get(p2.orgId, id));
+  }
+  async save(p2, id, grants, expected) {
+    return this.db.transaction(() => {
+      const value = next(p2, id, grants, expected), json = JSON.stringify(value);
+      const row = expected === null ? this.db.query("INSERT INTO skills_execution_grants(org_id,profile_id,revision,document_json) VALUES(?,?,?,?) ON CONFLICT(org_id,profile_id) DO NOTHING RETURNING document_json").get(p2.orgId, id, value.revision, json) : this.db.query("UPDATE skills_execution_grants SET revision=?,document_json=? WHERE org_id=? AND profile_id=? AND revision=? RETURNING document_json").get(value.revision, json, p2.orgId, id, expected);
+      if (!row)
+        return null;
+      this.db.query("INSERT INTO skills_execution_grant_revisions(org_id,profile_id,revision,document_json) VALUES(?,?,?,?)").run(p2.orgId, id, value.revision, json);
+      return document(row);
+    })();
+  }
+}
+
+class PostgresExecutionGrantStore {
+  sql;
+  constructor(sql) {
+    this.sql = sql;
+  }
+  async get(p2, id, revision) {
+    const rows = revision ? await this.sql`SELECT document_json FROM skills_execution_grant_revisions WHERE org_id=${p2.orgId} AND profile_id=${id} AND revision=${revision}` : await this.sql`SELECT document_json FROM skills_execution_grants WHERE org_id=${p2.orgId} AND profile_id=${id}`;
+    return document(rows[0]);
+  }
+  async save(p2, id, grants, expected) {
+    const value = next(p2, id, grants, expected), json = JSON.stringify(value);
+    const rows = expected === null ? await this.sql`WITH changed AS (INSERT INTO skills_execution_grants(org_id,profile_id,revision,document_json) VALUES(${p2.orgId},${id},${value.revision},${json}::jsonb) ON CONFLICT(org_id,profile_id) DO NOTHING RETURNING *) INSERT INTO skills_execution_grant_revisions(org_id,profile_id,revision,document_json) SELECT org_id,profile_id,revision,document_json FROM changed RETURNING document_json` : await this.sql`WITH changed AS (UPDATE skills_execution_grants SET revision=${value.revision},document_json=${json}::jsonb WHERE org_id=${p2.orgId} AND profile_id=${id} AND revision=${expected} RETURNING *) INSERT INTO skills_execution_grant_revisions(org_id,profile_id,revision,document_json) SELECT org_id,profile_id,revision,document_json FROM changed RETURNING document_json`;
+    return document(rows[0]);
+  }
+}
+
 // src/server/sqlite-store.ts
 import { Database } from "bun:sqlite";
 
 // src/server/selection-store.ts
-import { randomUUID } from "crypto";
+import { randomUUID as randomUUID2 } from "crypto";
 function selections(value) {
   return typeof value === "string" ? JSON.parse(value) : structuredClone(value);
 }
@@ -87499,15 +87570,15 @@ class MemorySkillSelectionStore {
     const key = this.key(p2.orgId, id), previous = this.profiles.get(key);
     if ((previous?.revision ?? null) !== expected)
       return null;
-    const next = {
+    const next2 = {
       id,
       workspaceId: p2.orgId,
-      revision: randomUUID(),
+      revision: randomUUID2(),
       selections: structuredClone(selected),
       updatedAt: new Date().toISOString()
     };
-    this.profiles.set(key, next);
-    return structuredClone(next);
+    this.profiles.set(key, next2);
+    return structuredClone(next2);
   }
   async getStationState(p2, id) {
     return structuredClone(this.states.get(this.key(p2.orgId, p2.userId, id)) ?? null);
@@ -87515,15 +87586,15 @@ class MemorySkillSelectionStore {
   async saveStationState(p2, id, input) {
     if (this.profiles.get(this.key(p2.orgId, input.profileId))?.revision !== input.profileRevision)
       return null;
-    const next = {
+    const next2 = {
       ...structuredClone(input),
       stationId: id,
       workspaceId: p2.orgId,
       actorId: p2.userId,
       appliedAt: new Date().toISOString()
     };
-    this.states.set(this.key(p2.orgId, p2.userId, id), next);
-    return structuredClone(next);
+    this.states.set(this.key(p2.orgId, p2.userId, id), next2);
+    return structuredClone(next2);
   }
 }
 
@@ -87537,7 +87608,7 @@ class SqliteSkillSelectionStore {
     return row ? profile(row) : null;
   }
   async saveProfile(p2, id, selected, expected) {
-    const revision = randomUUID(), timestamp = new Date().toISOString();
+    const revision = randomUUID2(), timestamp = new Date().toISOString();
     const row = expected === null ? this.db.query("INSERT INTO skills_profiles(org_id,profile_id,revision,selections_json,updated_at) VALUES(?,?,?,?,?) ON CONFLICT(org_id,profile_id) DO NOTHING RETURNING *").get(p2.orgId, id, revision, JSON.stringify(selected), timestamp) : this.db.query("UPDATE skills_profiles SET revision=?,selections_json=?,updated_at=? WHERE org_id=? AND profile_id=? AND revision=? RETURNING *").get(revision, JSON.stringify(selected), timestamp, p2.orgId, id, expected);
     return row ? profile(row) : null;
   }
@@ -87563,7 +87634,7 @@ class PostgresSkillSelectionStore {
     return rows[0] ? profile(rows[0]) : null;
   }
   async saveProfile(p2, id, selected, expected) {
-    const revision = randomUUID(), timestamp = new Date().toISOString();
+    const revision = randomUUID2(), timestamp = new Date().toISOString();
     const rows = expected === null ? await this.sql`INSERT INTO skills_profiles(org_id,profile_id,revision,selections_json,updated_at) VALUES(${p2.orgId},${id},${revision},${JSON.stringify(selected)}::jsonb,${timestamp}) ON CONFLICT(org_id,profile_id) DO NOTHING RETURNING *` : await this.sql`UPDATE skills_profiles SET revision=${revision},selections_json=${JSON.stringify(selected)}::jsonb,updated_at=${timestamp} WHERE org_id=${p2.orgId} AND profile_id=${id} AND revision=${expected} RETURNING *`;
     return rows[0] ? profile(rows[0]) : null;
   }
@@ -87581,7 +87652,7 @@ class PostgresSkillSelectionStore {
 }
 
 // src/server/sqlite-store.ts
-import { randomUUID as randomUUID3 } from "crypto";
+import { randomUUID as randomUUID4 } from "crypto";
 import { mkdirSync as mkdirSync2, readFileSync as readFileSync3, readdirSync } from "fs";
 import { dirname as dirname3, join as join5 } from "path";
 
@@ -87642,7 +87713,7 @@ function defaultStartDirs() {
 }
 
 // src/server/rows.ts
-import { randomUUID as randomUUID2 } from "crypto";
+import { randomUUID as randomUUID3 } from "crypto";
 function nowIso() {
   return new Date().toISOString();
 }
@@ -87650,7 +87721,7 @@ function normalizeLimit(limit) {
   return Number.isFinite(limit) ? Math.max(0, Math.trunc(limit)) : 0;
 }
 function runId() {
-  return `run_${Date.now().toString(36)}_${randomUUID2().slice(0, 8)}`;
+  return `run_${Date.now().toString(36)}_${randomUUID3().slice(0, 8)}`;
 }
 function rowToRun(row) {
   return {
@@ -87873,6 +87944,9 @@ class SqliteSkillsStore {
   get selectionStore() {
     return new SqliteSkillSelectionStore(this.db);
   }
+  get executionGrantStore() {
+    return new SqliteExecutionGrantStore(this.db);
+  }
   backend;
   db;
   closed = false;
@@ -87974,7 +88048,7 @@ class SqliteSkillsStore {
       JSON.stringify(input.input),
       JSON.stringify(input.args),
       input.idempotencyKey ?? null,
-      randomUUID3(),
+      randomUUID4(),
       nowIso()
     ]);
     return rowToRun(row);
@@ -88284,21 +88358,21 @@ class SqliteSkillsStore {
     if (expectedRevisionId !== current.revisionId) {
       throw new SkillRevisionConflictError(slug, expectedRevisionId, current.revisionId);
     }
-    const next = { ...current, ...patch };
+    const next2 = { ...current, ...patch };
     return this.db.transaction(() => {
-      const revisionId = revisionIdOfRecord(next);
+      const revisionId = revisionIdOfRecord(next2);
       const row = this.get(`UPDATE skills_registry
          SET display_name = ?, description = ?, category = ?, tags_json = ?, kind = ?, version = ?, skill_md = ?,
              revision_id = ?, revision_number = revision_number + 1, updated_at = ?
          WHERE org_id = ? AND slug = ? AND tombstoned_at IS NULL AND revision_id = ?
          RETURNING *`, [
-        next.displayName,
-        next.description,
-        next.category,
-        JSON.stringify(next.tags),
-        next.kind,
-        next.version ?? null,
-        next.skillMd ?? null,
+        next2.displayName,
+        next2.description,
+        next2.category,
+        JSON.stringify(next2.tags),
+        next2.kind,
+        next2.version ?? null,
+        next2.skillMd ?? null,
         revisionId,
         nowIso(),
         principal.orgId,
@@ -88318,7 +88392,7 @@ class SqliteSkillsStore {
       }
       this.db.run("DELETE FROM skills_tags WHERE org_id = ? AND slug = ?", [principal.orgId, slug]);
       const insertTag = this.db.prepare("INSERT OR IGNORE INTO skills_tags (org_id, slug, tag) VALUES (?, ?, ?)");
-      for (const tag of next.tags) {
+      for (const tag of next2.tags) {
         if (!tag.trim())
           continue;
         insertTag.run(principal.orgId, slug, tag);
@@ -88494,8 +88568,245 @@ function parseScopes(value) {
   }
 }
 
-// node_modules/@hasna/contracts/dist/client/transport.js
+// node_modules/@hasna/secrets/dist/sdk.js
 import { createRequire } from "module";
+import { createRequire as createRequire2 } from "module";
+var __esm2 = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+var CredentialResolutionError;
+var CredentialFileUnsafeError;
+var MAX_CREDENTIAL_FILE_BYTES;
+var SAFE_APP_SLUG;
+var SAFE_PROFILE;
+var ILLEGAL_IN_HEADER_VALUE;
+var VAULT_POINTER_SHAPE;
+var CREDENTIAL_SHAPED_KEY;
+var INSPECT_CUSTOM;
+var CREDENTIAL_SEAL;
+var AMBIENT_ENVIRONMENT;
+var SECRETS_PACKAGE_SPECIFIER;
+var requireSecretsSdk;
+var ASCII_CONTROL_PATTERN;
+var DNS_LABEL_PATTERN;
+var ClientTransportConfigurationError;
+var HasnaHttpError;
+var DEFAULT_RETRY_STATUSES;
+var IDEMPOTENT_METHODS;
+var AUTHORITY_OVERRIDE_HEADERS;
+var init_transport = __esm2(() => {
+  CredentialResolutionError = class CredentialResolutionError2 extends Error {
+    appName;
+    attempted;
+    constructor(appName, message, attempted) {
+      super(message);
+      this.name = "CredentialResolutionError";
+      this.appName = appName;
+      this.attempted = attempted;
+    }
+  };
+  CredentialFileUnsafeError = class CredentialFileUnsafeError2 extends Error {
+    path;
+    constructor(path, reason) {
+      super(`Refusing unsafe credential/config file ${path}: ${reason}.`);
+      this.name = "CredentialFileUnsafeError";
+      this.path = path;
+    }
+  };
+  MAX_CREDENTIAL_FILE_BYTES = 64 * 1024;
+  SAFE_APP_SLUG = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/;
+  SAFE_PROFILE = /^[A-Za-z0-9](?:[A-Za-z0-9._-]*[A-Za-z0-9])?$/;
+  ILLEGAL_IN_HEADER_VALUE = /[^\t\x20-\x7e]/;
+  VAULT_POINTER_SHAPE = /^[a-z0-9][a-z0-9-]*(?:\/[a-z0-9][a-z0-9-_.]*){2,}$/;
+  CREDENTIAL_SHAPED_KEY = /(?:^|_)(?:API_KEY|KEY|TOKEN|SECRET|PASSWORD|PASSWD|CREDENTIAL|AUTH)(?:_|$)/;
+  INSPECT_CUSTOM = Symbol.for("nodejs.util.inspect.custom");
+  CREDENTIAL_SEAL = Symbol.for("hasna:contracts:sealedCredential");
+  AMBIENT_ENVIRONMENT = Symbol.for("hasna:contracts:ambientClientEnvironment");
+  SECRETS_PACKAGE_SPECIFIER = "@hasna/" + "secrets";
+  requireSecretsSdk = createRequire(import.meta.url);
+  ASCII_CONTROL_PATTERN = /[\u0000-\u001f\u007f]/;
+  DNS_LABEL_PATTERN = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/;
+  ClientTransportConfigurationError = class ClientTransportConfigurationError2 extends Error {
+    appName;
+    sources;
+    constructor(appName, message, sources = []) {
+      super(message);
+      this.name = "ClientTransportConfigurationError";
+      this.appName = appName;
+      this.sources = Object.freeze([...sources]);
+    }
+  };
+  HasnaHttpError = class HasnaHttpError2 extends Error {
+    status;
+    method;
+    path;
+    credentialSource;
+    credentialTier;
+    constructor(method, path, status, body, credential) {
+      const guidance = credential ? `. ${credential.guidance}` : "";
+      super(`Hasna cloud request failed: ${method} ${path} -> ${status}${guidance}`);
+      this.name = "HasnaHttpError";
+      this.status = status;
+      this.method = method;
+      this.path = path;
+      Object.defineProperty(this, "body", {
+        value: body,
+        enumerable: status !== 401 && status !== 403,
+        writable: false,
+        configurable: false
+      });
+      this.credentialSource = credential?.source ?? null;
+      this.credentialTier = credential?.tier ?? null;
+    }
+  };
+  DEFAULT_RETRY_STATUSES = [408, 425, 429, 500, 502, 503, 504];
+  IDEMPOTENT_METHODS = new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
+  AUTHORITY_OVERRIDE_HEADERS = new Set([
+    "host",
+    ":authority",
+    "forwarded",
+    "x-forwarded-host",
+    "x-original-host"
+  ]);
+});
+var MAX_CREDENTIAL_FILE_BYTES2;
+var INSPECT_CUSTOM2;
+var CREDENTIAL_SEAL2;
+var AMBIENT_ENVIRONMENT2;
+var SECRETS_PACKAGE_SPECIFIER2;
+var requireSecretsSdk2;
+var IDEMPOTENT_METHODS2;
+var AUTHORITY_OVERRIDE_HEADERS2;
+var init_storage = __esm2(() => {
+  MAX_CREDENTIAL_FILE_BYTES2 = 64 * 1024;
+  INSPECT_CUSTOM2 = Symbol.for("nodejs.util.inspect.custom");
+  CREDENTIAL_SEAL2 = Symbol.for("hasna:contracts:sealedCredential");
+  AMBIENT_ENVIRONMENT2 = Symbol.for("hasna:contracts:ambientClientEnvironment");
+  SECRETS_PACKAGE_SPECIFIER2 = "@hasna/" + "secrets";
+  requireSecretsSdk2 = createRequire2(import.meta.url);
+  IDEMPOTENT_METHODS2 = new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
+  AUTHORITY_OVERRIDE_HEADERS2 = new Set([
+    "host",
+    ":authority",
+    "forwarded",
+    "x-forwarded-host",
+    "x-original-host"
+  ]);
+});
+var PATHS_RESOLVER_APP_SLUG_RE2;
+var SQLITE_SIDECAR_FILES;
+var LEGACY_SERVICE_FILES;
+var init_data_dir = __esm2(() => {
+  PATHS_RESOLVER_APP_SLUG_RE2 = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+  SQLITE_SIDECAR_FILES = ["vault.db-wal", "vault.db-shm", "vault.db-journal"];
+  LEGACY_SERVICE_FILES = [
+    "vault.key",
+    "vault.key.enc",
+    "kms.json",
+    "aws.json",
+    ".serve-token"
+  ];
+});
+var SecretsTestIsolationError;
+var TEST_ENTRYPOINT_RE;
+var init_test_isolation = __esm2(() => {
+  init_data_dir();
+  SecretsTestIsolationError = class SecretsTestIsolationError2 extends Error {
+    constructor(message) {
+      super(message);
+      this.name = "SecretsTestIsolationError";
+    }
+  };
+  TEST_ENTRYPOINT_RE = /\.(test|spec)\.[cm]?[jt]sx?$/;
+});
+var init_client = __esm2(() => {
+  init_transport();
+  init_storage();
+  init_test_isolation();
+  init_transport();
+});
+init_client();
+init_client();
+
+// src/lib/profile-limits.ts
+var MAX_PROFILE_SELECTIONS = 4096;
+var MAX_PROFILE_DOCUMENT_BYTES = 8 * 1024 * 1024;
+var MAX_SKILL_SESSION_ID_CHARS = 256;
+var PROFILE_SESSION_ENVELOPE_BYTES = MAX_PROFILE_SELECTIONS * 67 + MAX_SKILL_SESSION_ID_CHARS * 6 + 256;
+var MAX_RESOLVED_PROFILE_BYTES = MAX_PROFILE_DOCUMENT_BYTES - PROFILE_SESSION_ENVELOPE_BYTES;
+
+// src/lib/selection-cache.ts
+var MAX_CACHED_PROFILE_AGE_MS = 24 * 60 * 60 * 1000;
+
+// src/lib/execution-grants.ts
+var MAX_EXECUTION_GRANT_BYTES = 2 * 1024 * 1024;
+
+// src/lib/hosted-skill-set.ts
+var HOSTED_RUNTIMES = new Set(["hosted"]);
+var HOSTED_SOURCES = new Set(["remote", "private-hosted"]);
+var HOSTED_METADATA_SET_EMPTY_ERROR = [
+  "The hosted metadata skill set is empty, but the packaging guards that depend on it",
+  "only mean anything while it is non-empty: an empty set makes every one of them pass",
+  "vacuously and silently removes the protection that keeps hosted implementation source",
+  "out of the published package.",
+  "",
+  "If emptying the set is intentional (every hosted skill was deleted or converted to a",
+  "runnable in-repo skill), retire the derived guards in the SAME change \u2014 do not let them",
+  "stay green and empty."
+].join(`
+`);
+var SLUG = "[^,{}/]+";
+var BRACE_SOURCE_EXCLUSION = new RegExp(`^!skills/\\{(${SLUG}(?:,${SLUG})+)\\}/src$`);
+var SINGLE_SOURCE_EXCLUSION = new RegExp(`^!skills/(${SLUG})/src$`);
+
+// src/lib/skill-validation.ts
+var RESERVED_SKILL_ENTRIES = new Set([
+  ".env",
+  ".npmrc",
+  ".pypirc",
+  ".netrc",
+  "id_rsa",
+  "id_ed25519"
+]);
+var KNOWN_TOP_LEVEL_ENTRIES = new Set([
+  ".claude",
+  ".env.example",
+  ".gitignore",
+  ".skills",
+  "CLAUDE.md",
+  "AGENTS.md",
+  "LICENSE",
+  "PROJECT_OVERVIEW.md",
+  "QUICKSTART.md",
+  "README.md",
+  "SKILL.md",
+  "api-docs-list.json",
+  "auth.ts",
+  "bun.lock",
+  "bunfig.toml",
+  "data",
+  "dist",
+  "examples",
+  "exports",
+  "http-client.ts",
+  "index.ts",
+  "install.sh",
+  "installer.ts",
+  "logs",
+  "node_modules",
+  "package.json",
+  "scripts",
+  "skill-install.ts",
+  "skill.json",
+  "src",
+  "tests",
+  "references",
+  "assets",
+  "tsconfig.json",
+  "vision.ts"
+]);
+var VALID_PROVENANCE_SOURCES = new Set(["official", "custom", "remote", "private", "private-hosted", "upstream", "extension"]);
+
+// node_modules/@hasna/contracts/dist/client/transport.js
+import { createRequire as createRequire3 } from "module";
 function envToken(name) {
   return name.toUpperCase().replace(/-/g, "_");
 }
@@ -88507,13 +88818,13 @@ function clientTransportEnvKeys(name) {
   };
 }
 var MAX_PACKAGE_BYTES = 1024 * 1024;
-var MAX_CREDENTIAL_FILE_BYTES = 64 * 1024;
-var INSPECT_CUSTOM = Symbol.for("nodejs.util.inspect.custom");
-var CREDENTIAL_SEAL = Symbol.for("hasna:contracts:sealedCredential");
-var AMBIENT_ENVIRONMENT = Symbol.for("hasna:contracts:ambientClientEnvironment");
-var requireSecretsSdk = createRequire(import.meta.url);
-var IDEMPOTENT_METHODS = new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
-var AUTHORITY_OVERRIDE_HEADERS = new Set([
+var MAX_CREDENTIAL_FILE_BYTES3 = 64 * 1024;
+var INSPECT_CUSTOM3 = Symbol.for("nodejs.util.inspect.custom");
+var CREDENTIAL_SEAL3 = Symbol.for("hasna:contracts:sealedCredential");
+var AMBIENT_ENVIRONMENT3 = Symbol.for("hasna:contracts:ambientClientEnvironment");
+var requireSecretsSdk3 = createRequire3(import.meta.url);
+var IDEMPOTENT_METHODS3 = new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
+var AUTHORITY_OVERRIDE_HEADERS3 = new Set([
   "host",
   ":authority",
   "forwarded",
@@ -88535,13 +88846,6 @@ var MAX_MANIFEST_BYTES = MAX_SKILL_MD_BYTES + 64000;
 var ALLOWED_PUBLISH_PARTS = new Set(["manifest", "bundle"]);
 var MAX_VERSION_MANIFEST_BYTES = 512 * 1024;
 
-// src/lib/profile-limits.ts
-var MAX_PROFILE_SELECTIONS = 4096;
-var MAX_PROFILE_DOCUMENT_BYTES = 8 * 1024 * 1024;
-var MAX_SKILL_SESSION_ID_CHARS = 256;
-var PROFILE_SESSION_ENVELOPE_BYTES = MAX_PROFILE_SELECTIONS * 67 + MAX_SKILL_SESSION_ID_CHARS * 6 + 256;
-var MAX_RESOLVED_PROFILE_BYTES = MAX_PROFILE_DOCUMENT_BYTES - PROFILE_SESSION_ENVELOPE_BYTES;
-
 // src/sdk/execution/storage.ts
 class MemoryRunExecutionStore {
   durable = false;
@@ -88619,15 +88923,15 @@ class MemoryRunExecutionStore {
     if (attempt.leaseGeneration !== input.expectedLeaseGeneration) {
       return { ok: false, reason: "STALE_GENERATION" };
     }
-    const next = {
+    const next2 = {
       ...attempt,
       leaseGeneration: attempt.leaseGeneration + 1,
       workerId: input.workerId,
       claimedAt: new Date().toISOString(),
       status: "leased"
     };
-    this.attempts.set(attempt.attemptId, next);
-    return { ok: true, attempt: next, leaseGeneration: next.leaseGeneration };
+    this.attempts.set(attempt.attemptId, next2);
+    return { ok: true, attempt: next2, leaseGeneration: next2.leaseGeneration };
   }
   async recordLaunchIntent(input) {
     const run = this.runs.get(input.runId);
@@ -88639,28 +88943,28 @@ class MemoryRunExecutionStore {
       return { ok: false, reason: "NO_SUCH_ATTEMPT" };
     if (attempt.status === "terminal")
       return { ok: false, reason: "ATTEMPT_TERMINAL" };
-    const next = {
+    const next2 = {
       ...attempt,
       clientToken: input.clientToken,
       requestDigest: input.requestDigest,
       startedBy: input.startedBy,
       launchState: "launching"
     };
-    this.attempts.set(attempt.attemptId, next);
+    this.attempts.set(attempt.attemptId, next2);
     this.runs.set(input.runId, { ...run, currentAttemptId: attempt.attemptId, updatedAt: new Date().toISOString() });
-    return { ok: true, attempt: next };
+    return { ok: true, attempt: next2 };
   }
   async recordLaunchState(input) {
     const attempt = this.attempts.get(input.attemptId);
     if (!attempt)
       return null;
-    const next = {
+    const next2 = {
       ...attempt,
       launchState: input.launchState,
       ...input.taskId === undefined ? {} : { taskId: input.taskId }
     };
-    this.attempts.set(attempt.attemptId, next);
-    return next;
+    this.attempts.set(attempt.attemptId, next2);
+    return next2;
   }
   async recordTransition(transition) {
     this.transitions.push(transition);
@@ -88669,9 +88973,9 @@ class MemoryRunExecutionStore {
     const attempt = this.attempts.get(attemptId);
     if (!attempt)
       return null;
-    const next = { ...attempt, status: "terminal" };
-    this.attempts.set(attemptId, next);
-    return next;
+    const next2 = { ...attempt, status: "terminal" };
+    this.attempts.set(attemptId, next2);
+    return next2;
   }
   async writeReceipt(receipt) {
     this.receipts.set(receipt.runId + "\x00" + receipt.attemptId, receipt);
@@ -88689,22 +88993,22 @@ class MemoryRunExecutionStore {
         this.attempts.set(attemptId, { ...attempt, status: "terminal" });
       }
     }
-    const next = {
+    const next2 = {
       ...run,
       status,
       terminalReceiptId: receiptId,
       updatedAt: new Date().toISOString()
     };
-    this.runs.set(runId2, next);
-    return next;
+    this.runs.set(runId2, next2);
+    return next2;
   }
   async setRunStatus(runId2, status) {
     const run = this.runs.get(runId2);
     if (!run)
       return null;
-    const next = { ...run, status, updatedAt: new Date().toISOString() };
-    this.runs.set(runId2, next);
-    return next;
+    const next2 = { ...run, status, updatedAt: new Date().toISOString() };
+    this.runs.set(runId2, next2);
+    return next2;
   }
 }
 function isMemoryTerminal(status) {
@@ -88782,28 +89086,28 @@ async function failRun(store, run, code, message) {
   try {
     await store.appendLog(run.id, run.orgId, "error", message);
   } catch {}
-  const next = await fencedTransition(store, run, {
+  const next2 = await fencedTransition(store, run, {
     status: "failed",
     errorCode: code,
     errorMessage: message,
     completedAt: new Date().toISOString()
   });
-  return next ?? run;
+  return next2 ?? run;
 }
 async function fencedTransition(store, run, patch) {
   if (!store.transitionRun)
     return store.updateRun(run.id, patch);
-  const next = await store.transitionRun(run.id, patch, run.leaseGeneration);
-  if (!next) {
+  const next2 = await store.transitionRun(run.id, patch, run.leaseGeneration);
+  if (!next2) {
     try {
       await store.appendLog(run.id, run.orgId, "warn", `late write rejected: run no longer owned at lease_generation ${run.leaseGeneration}`);
     } catch {}
   }
-  return next;
+  return next2;
 }
 
 // src/server/store.ts
-import { randomUUID as randomUUID4 } from "crypto";
+import { randomUUID as randomUUID5 } from "crypto";
 function recordFieldsOf(input, carriedBundle, carriedSkillMd) {
   return {
     slug: input.slug,
@@ -88846,6 +89150,7 @@ function instantiateStore(target, sqliteOptions) {
 
 class MemorySkillsStore {
   selectionStore = new MemorySkillSelectionStore;
+  executionGrantStore = new MemoryExecutionGrantStore;
   backend = { kind: "memory", durable: false, label: "memory (non-durable)" };
   apiKeys = new Map;
   runs = new Map;
@@ -88890,7 +89195,7 @@ class MemorySkillsStore {
       input: input.input,
       args: input.args,
       ...idemKey ? { idempotencyKey: idemKey } : {},
-      correlationId: randomUUID4(),
+      correlationId: randomUUID5(),
       costCents: 0,
       leaseGeneration: 0,
       createdAt: now
@@ -88939,11 +89244,11 @@ class MemorySkillsStore {
     return run ? [...this.logs.get(runId2) ?? []] : [];
   }
   async addArtifact(artifact) {
-    const next = { ...artifact, createdAt: nowIso() };
+    const next2 = { ...artifact, createdAt: nowIso() };
     const artifacts = this.artifacts.get(artifact.runId) ?? [];
-    artifacts.push(next);
+    artifacts.push(next2);
     this.artifacts.set(artifact.runId, artifacts);
-    return next;
+    return next2;
   }
   async listArtifacts(principal, runId2) {
     const run = await this.getRun(principal, runId2);
@@ -89049,15 +89354,15 @@ class MemorySkillsStore {
     if (latest.revisionId !== current.revisionId) {
       throw new SkillRevisionConflictError(slug, expectedRevisionId, latest.revisionId);
     }
-    const next = {
+    const next2 = {
       ...latest,
       ...patch,
       updatedAt: nowIso(),
       revisionId: revisionIdOfRecord({ ...latest, ...patch }),
       revisionNumber: latest.revisionNumber + 1
     };
-    this.skills.set(skillKey(principal.orgId, slug), next);
-    return next;
+    this.skills.set(skillKey(principal.orgId, slug), next2);
+    return next2;
   }
   async deleteSkill(principal, slug, tombstoneWindowMs) {
     const current = await this.getSkill(principal, slug);
@@ -89066,9 +89371,9 @@ class MemorySkillsStore {
     if (!current.tombstonedAt) {
       const tombstoned = nowIso();
       const purgeAfter = new Date(Date.now() + tombstoneWindowMs).toISOString();
-      const next = { ...current, tombstonedAt: tombstoned, tombstonePurgeAfter: purgeAfter, updatedAt: tombstoned };
-      this.skills.set(skillKey(principal.orgId, slug), next);
-      return next;
+      const next2 = { ...current, tombstonedAt: tombstoned, tombstonePurgeAfter: purgeAfter, updatedAt: tombstoned };
+      this.skills.set(skillKey(principal.orgId, slug), next2);
+      return next2;
     }
     return current;
   }
@@ -89140,9 +89445,9 @@ class MemorySkillsStore {
     const run = this.runs.get(runId2);
     if (!run)
       return null;
-    const next = { ...run, ...patch };
-    this.runs.set(runId2, next);
-    return next;
+    const next2 = { ...run, ...patch };
+    this.runs.set(runId2, next2);
+    return next2;
   }
 }
 function skillKey(orgId, slug) {
@@ -89159,6 +89464,9 @@ class PostgresSkillsStore {
   get selectionStore() {
     return new PostgresSkillSelectionStore(this.sql);
   }
+  get executionGrantStore() {
+    return new PostgresExecutionGrantStore(this.sql);
+  }
   backend = { kind: "postgres", durable: true, label: "postgres" };
   sql;
   constructor(databaseUrl) {
@@ -89258,7 +89566,7 @@ class PostgresSkillsStore {
       const id = runId();
       const rows = await tx`
         INSERT INTO skills_runs (id, org_id, user_id, skill_slug, requested_slug, status, input_json, args_json, idempotency_key, correlation_id)
-        VALUES (${id}, ${input.principal.orgId}, ${input.principal.userId}, ${input.slug}, ${input.slug}, ${"queued"}, ${JSON.stringify(input.input)}::jsonb, ${JSON.stringify(input.args)}::jsonb, ${input.idempotencyKey ?? null}, ${randomUUID4()})
+        VALUES (${id}, ${input.principal.orgId}, ${input.principal.userId}, ${input.slug}, ${input.slug}, ${"queued"}, ${JSON.stringify(input.input)}::jsonb, ${JSON.stringify(input.args)}::jsonb, ${input.idempotencyKey ?? null}, ${randomUUID5()})
         RETURNING *
       `;
       return rowToRun(rows[0]);
@@ -89564,14 +89872,14 @@ class PostgresSkillsStore {
     if (expectedRevisionId !== current.revisionId) {
       throw new SkillRevisionConflictError(slug, expectedRevisionId, current.revisionId);
     }
-    const next = { ...current, ...patch };
+    const next2 = { ...current, ...patch };
     return await this.sql.begin(async (tx) => {
-      const revisionId = revisionIdOfRecord(next);
+      const revisionId = revisionIdOfRecord(next2);
       const updated = await tx`
         UPDATE skills_registry
-        SET display_name = ${next.displayName}, description = ${next.description}, category = ${next.category},
-            tags_json = ${JSON.stringify(next.tags)}::jsonb, kind = ${next.kind}, version = ${next.version ?? null},
-            skill_md = ${next.skillMd ?? null}, revision_id = ${revisionId}, revision_number = revision_number + 1, updated_at = now()
+        SET display_name = ${next2.displayName}, description = ${next2.description}, category = ${next2.category},
+            tags_json = ${JSON.stringify(next2.tags)}::jsonb, kind = ${next2.kind}, version = ${next2.version ?? null},
+            skill_md = ${next2.skillMd ?? null}, revision_id = ${revisionId}, revision_number = revision_number + 1, updated_at = now()
         WHERE org_id = ${principal.orgId} AND slug = ${slug} AND tombstoned_at IS NULL AND revision_id = ${current.revisionId}
         RETURNING *
       `;
@@ -89586,7 +89894,7 @@ class PostgresSkillsStore {
         return null;
       }
       await tx`DELETE FROM skills_tags WHERE org_id = ${principal.orgId} AND slug = ${slug}`;
-      for (const tag of next.tags) {
+      for (const tag of next2.tags) {
         if (!tag.trim())
           continue;
         await tx`
@@ -89761,7 +90069,7 @@ function assertDurableTarget(target, config) {
 }
 
 // src/server/worker.ts
-async function runWorkerOnce(store, workerId = `worker_${randomUUID5().slice(0, 8)}`, storage = new ArtifactStorage) {
+async function runWorkerOnce(store, workerId = `worker_${randomUUID6().slice(0, 8)}`, storage = new ArtifactStorage) {
   const run = await store.claimNextRun({ workerId });
   if (!run)
     return false;
@@ -89799,7 +90107,7 @@ Environment:
   assertDurableStore(store, config);
   const storage = new ArtifactStorage({ bucket: config.artifactBucket, prefix: config.artifactPrefix, runPrefix: config.runArtifactPrefix });
   console.log(`skills worker ${process.env.HASNA_SKILLS_WORKER_ID || ""} storage: ${resolveDatabaseTarget(config.databaseUrl).label}`);
-  const workerId = process.env.HASNA_SKILLS_WORKER_ID || `worker_${randomUUID5().slice(0, 8)}`;
+  const workerId = process.env.HASNA_SKILLS_WORKER_ID || `worker_${randomUUID6().slice(0, 8)}`;
   const once = process.argv.includes("--once");
   const idleMs = Number.parseInt(process.env.HASNA_SKILLS_WORKER_IDLE_MS || "1000", 10);
   const pause = Number.isFinite(idleMs) ? idleMs : 1000;