@matamt-dbg/dsh-studio 0.3.0 → 0.5.0

package/index.js

@@ -53,10 +53,11 @@ var LEGACY_PACKAGE_NAME = "@local/dsh-studio-shell";
 var POLICY_PLUGIN = `${PACKAGE_NAME}/policy`;
 var ROLE_PLUGIN = `${PACKAGE_NAME}/roles`;
 var BATCH_PLUGIN = `${PACKAGE_NAME}/batch`;
+var JUDGE_PLUGIN = `${PACKAGE_NAME}/judge`;
 function currentPluginName(name) {
   return name === LEGACY_PACKAGE_NAME || name.startsWith(`${LEGACY_PACKAGE_NAME}/`) ? PACKAGE_NAME + name.slice(LEGACY_PACKAGE_NAME.length) : name;
 }
-var STUDIO_VERSION = "0.3.0";
+var STUDIO_VERSION = "0.5.0";
 
 // src/delegation.ts
 var ROLE_TOOL = "subagent_role";
@@ -255,6 +256,7 @@ function studioLayer() {
   return [
     plugin("spill-policy"),
     { id: "studio-batch", name: BATCH_PLUGIN },
+    { id: "studio-judge", name: JUDGE_PLUGIN },
     plugin("tool-cordis"),
     plugin("tool-plugin-manager", void 0, "plugin-manager/tools")
   ];
@@ -485,7 +487,7 @@ var MasterExtensions = class {
 };
 
 // src/host/shell.ts
-import { dirname as dirname8, join as join7 } from "node:path";
+import { dirname as dirname8, join as join8 } from "node:path";
 import { randomUUID as randomUUID12 } from "node:crypto";
 import { Remote as Remote2, TypertRemoteService as TypertRemoteService2 } from "@deepseek-ai/dsh-typert-protocol";
 
@@ -1607,15 +1609,82 @@ import { dirname as dirname3, resolve as resolve2 } from "node:path";
 
 // src/pixie-gate-task.ts
 var GATE_WHENS = ["user-message", "agent-message", "tool-before", "tool-after", "turn-end"];
-var HOOK_EXIT = { continue: 0, skip: 10 };
+var HOOK_EXIT = { continue: 0, skip: 10, direct: 11 };
 var enabledFor = (task, preset) => task.enabled && task.presetIds.includes(preset) && !task.disabledPresetIds?.includes(preset);
 function taskProblem(task) {
   if (!task.name.trim()) return "name";
-  if (!task.instruction.trim()) return "instruction";
+  if (!task.instruction.trim() && task.advanced.script === void 0) return "instruction";
   if (!(task.advanced.timeoutMs > 0) || !Number.isInteger(task.advanced.maxSteers) || task.advanced.maxSteers < 0) return "limits";
   return void 0;
 }
 
+// src/pixie-gate-task-contracts.ts
+var object3 = (value) => !!value && typeof value === "object" && !Array.isArray(value);
+var text = (value) => typeof value === "string" && !!value.trim();
+function validateGateTask(value) {
+  if (!object3(value) || !text(value.id) || !text(value.name) || typeof value.enabled !== "boolean" || !GATE_WHENS.includes(value.when) || typeof value.instruction !== "string") throw new Error("Invalid gate task");
+  const advanced = value.advanced;
+  if (!object3(advanced) || typeof advanced.confirmReplace !== "boolean" || !["pass", "block"].includes(advanced.onError) || !["root", "child", "any"].includes(advanced.agents) || typeof advanced.timeoutMs !== "number" || !Number.isFinite(advanced.timeoutMs) || typeof advanced.maxSteers !== "number" || advanced.showInChat !== void 0 && typeof advanced.showInChat !== "boolean") throw new Error("Invalid gate advanced options");
+  if (advanced.script !== void 0 && (typeof advanced.script !== "string" || (!/^[A-Za-z0-9][A-Za-z0-9_.-]*$/.test(advanced.script) || advanced.script.includes("..")))) throw new Error("Invalid gate script filename");
+  if (!Array.isArray(value.presetIds) || !value.presetIds.every(text)) throw new Error("Invalid gate presetIds");
+  if (value.disabledPresetIds !== void 0 && (!Array.isArray(value.disabledPresetIds) || !value.disabledPresetIds.every(text))) throw new Error("Invalid gate disabledPresetIds");
+  const name = typeof advanced.script === "string" ? advanced.script.replace(/\.[^.]+$/, "") : void 0;
+  for (const match of value.instruction.matchAll(/{{\s*([^{}]+?)\s*}}/g)) {
+    if (!name || ![`hooks.${name}.text`, `hooks.${name}.data`].includes(match[1])) throw new Error(`Unknown prompt variable: ${match[1]}`);
+  }
+  const task = structuredClone(value);
+  delete task.advanced.judge;
+  const problem = taskProblem(task);
+  if (problem) throw new Error(`Invalid gate ${problem}`);
+  task.presetIds = [...new Set(task.presetIds)];
+  const disabled = [...new Set(task.disabledPresetIds ?? [])].filter((id) => task.presetIds.includes(id));
+  if (disabled.length) task.disabledPresetIds = disabled;
+  else delete task.disabledPresetIds;
+  return task;
+}
+function validateGateTasks(value) {
+  if (!Array.isArray(value)) throw new Error("Gate tasks must be an array");
+  const ids = /* @__PURE__ */ new Set(), bindings = /* @__PURE__ */ new Set();
+  return value.map((raw) => {
+    const task = validateGateTask(raw);
+    if (ids.has(task.id)) throw new Error("Duplicate gate id");
+    ids.add(task.id);
+    for (const preset of task.presetIds) {
+      const key = JSON.stringify([preset, task.when]);
+      if (!enabledFor(task, preset)) continue;
+      if (bindings.has(key)) throw new Error("Only one enabled gate per preset and when is supported");
+      bindings.add(key);
+    }
+    return task;
+  });
+}
+function parseGateOutput(text2) {
+  const value = JSON.parse(text2);
+  if (!object3(value) || Object.hasOwn(value, "verdict") && !["pass", "stop"].includes(value.verdict)) throw new Error("Gate output needs a pass/stop verdict");
+  for (const [key, field2] of Object.entries(value)) {
+    if (!["verdict", "reason", "replace", "append", "note"].includes(key) || typeof field2 !== "string") throw new Error(`Invalid gate output field: ${key}`);
+  }
+  return { verdict: "pass", ...value };
+}
+function gateOutputPlan(task, output, original) {
+  const message = task.when === "user-message" || task.when === "agent-message";
+  const mutable = message || task.when === "tool-after";
+  const changed = output.replace !== void 0 && output.replace !== original;
+  const confirm = message && task.advanced.confirmReplace && changed;
+  const stop = output.verdict === "stop" || confirm;
+  const notes = output.note === void 0 ? [] : [output.note];
+  if (output.replace !== void 0 && (!mutable || stop && !message)) notes.push(output.replace);
+  if (output.append !== void 0 && (!mutable || stop)) notes.push(output.append);
+  return {
+    stop,
+    notes,
+    ...output.reason !== void 0 ? { reason: output.reason } : {},
+    ...stop && message && output.replace !== void 0 ? { suggestion: output.replace } : {},
+    ...!stop && mutable && changed ? { replacement: output.replace } : {},
+    ...!stop && mutable && output.append !== void 0 ? { addition: output.append } : {}
+  };
+}
+
 // src/host/pixie-gate-script.ts
 function validScriptName(name) {
   return /^[A-Za-z0-9][A-Za-z0-9_.-]*$/.test(name) && !name.includes("..");
@@ -1675,8 +1744,16 @@ async function runHookScript(task, target, signal, deps, context, helperEnv = as
   if (output.aborted) throw new Error("Hook script aborted");
   if (output.stdout.truncated || Buffer.byteLength(output.stdout.text) > 256 * 1024) throw new Error("Hook stdout exceeds 256KB");
   if (output.exitCode === HOOK_EXIT.skip) return { skipped: true, instruction: task.instruction };
-  if (output.exitCode !== HOOK_EXIT.continue) throw new Error(`Hook script exit ${output.exitCode}: ${output.stderr.text}`);
+  if (output.exitCode !== HOOK_EXIT.continue && output.exitCode !== HOOK_EXIT.direct) throw new Error(`Hook script exit ${output.exitCode}: ${output.stderr.text}`);
   const text2 = output.stdout.text.replace(/^[\r\n]+|[\r\n]+$/g, "");
+  if (output.exitCode === HOOK_EXIT.direct) {
+    try {
+      return { skipped: false, direct: parseGateOutput(text2) };
+    } catch (error) {
+      throw new Error(`Hook script exit 11 needs a gate output JSON object on stdout: ${error instanceof Error ? error.message : String(error)}`);
+    }
+  }
+  if (!task.instruction.trim()) throw new Error("Hook script asked for Pixie (exit 0) but the gate has no instruction");
   let data = "";
   try {
     const value = JSON.parse(text2);
@@ -1726,6 +1803,7 @@ function threadMessages(thread) {
 var DEFAULT_JUDGE_SYSTEM_PROMPT = [
   "You are a judgment component. Evaluate the given state against each question independently.",
   'Reply with exactly one JSON object and nothing else: {"answers": {<question id>: <answer>}}.',
+  "Each question has instructions (what to decide) and criteria: choice criteria map option names to descriptions; score criteria list ordered level descriptions; noul criteria optionally describe what true and false mean.",
   'choice answer: {"choice": <option name>, "probabilities": {<every option name>: number}} \u2014 probabilities sum to 1.',
   'score answer: {"score": number from 0 to levels-1 (fractional allowed), "probabilities": [one number per level, in order]} \u2014 probabilities sum to 1.',
   'noul answer: {"noul": probability from 0 to 1 that the answer is yes}.'
@@ -1746,16 +1824,18 @@ function validateJudgeRequest(value) {
   for (const [id, raw] of entries) {
     if (!/^[A-Za-z][A-Za-z0-9_-]*$/.test(id) || ["__proto__", "constructor", "prototype"].includes(id)) throw new JudgeValidationError("questionId", `Invalid judge question id: ${id}`);
     const question = raw;
-    if (question?.type === "choice") {
-      const options = question.options;
-      if (!options || typeof options !== "object" || Array.isArray(options) || Object.keys(options).length < 2 || Object.values(options).some((item) => typeof item !== "string" || !item.trim())) throw new JudgeValidationError("options", `Choice "${id}" needs at least two options with descriptions`);
-    } else if (question?.type === "score") {
-      const levels = question.levels;
-      if (!Array.isArray(levels) || levels.length < 2 || levels.length > 10 || levels.some((item) => typeof item !== "string")) throw new JudgeValidationError("levels", `Score "${id}" needs 2\u201310 levels`);
-    } else if (question?.type === "noul") {
-      if (typeof question.question !== "string" || !question.question.trim()) throw new JudgeValidationError("question", `Noul "${id}" needs a question`);
-      if (question.criteria !== void 0 && (!question.criteria || typeof question.criteria !== "object" || Array.isArray(question.criteria) || Object.entries(question.criteria).some(([key, value2]) => !["true", "false"].includes(key) || typeof value2 !== "string"))) throw new JudgeValidationError("criteria", `Invalid noul criteria: ${id}`);
-    } else throw new JudgeValidationError("questionType", `Question "${id}" must be choice, score, or noul`);
+    if (!question || typeof question !== "object" || Array.isArray(question)) throw new JudgeValidationError("questionType", `Question "${id}" must be choice, score, or noul`);
+    if (!["choice", "score", "noul"].includes(question.type)) throw new JudgeValidationError("questionType", `Question "${id}" must be choice, score, or noul`);
+    if (typeof question.instructions !== "string" || !question.instructions.trim()) throw new JudgeValidationError("instructions", `Question "${id}" needs instructions`);
+    const criteria = question.criteria;
+    if (question.type === "choice") {
+      const names3 = criteria && typeof criteria === "object" && !Array.isArray(criteria) ? Object.keys(criteria) : [];
+      if (names3.length < 2 || names3.length > 255 || names3.some((name) => !name.trim() || typeof criteria[name] !== "string")) throw new JudgeValidationError("criteria", `Choice "${id}" needs 2\u2013255 named options with string descriptions`);
+    } else if (question.type === "score") {
+      if (!Array.isArray(criteria) || criteria.length < 2 || criteria.length > 10 || criteria.some((item) => typeof item !== "string" || !item.trim())) throw new JudgeValidationError("criteria", `Score "${id}" needs 2\u201310 level descriptions`);
+    } else if (criteria !== void 0 && (!criteria || typeof criteria !== "object" || Array.isArray(criteria) || Object.entries(criteria).some(([key, value2]) => !["true", "false"].includes(key) || typeof value2 !== "string"))) {
+      throw new JudgeValidationError("criteria", `Invalid noul criteria: ${id}`);
+    }
   }
   return { state, questions };
 }
@@ -1879,7 +1959,7 @@ var PixieGateStore = class {
       if (error.code === "ENOENT") return { sessionId, runs: [] };
       throw error;
     }
-    if (!record5 || typeof record5 !== "object" || Array.isArray(record5) || record5.sessionId !== sessionId || !Array.isArray(record5.runs) || record5.runs.some((run) => !run || typeof run !== "object" || Array.isArray(run) || run.sessionId !== sessionId)) {
+    if (!record5 || typeof record5 !== "object" || Array.isArray(record5) || record5.sessionId !== sessionId || !Array.isArray(record5.runs) || record5.runs.some((run) => !run || typeof run !== "object" || Array.isArray(run) || run.sessionId !== sessionId) || record5.disabledGateIds !== void 0 && (!Array.isArray(record5.disabledGateIds) || record5.disabledGateIds.some((id) => typeof id !== "string"))) {
       throw new Error(`Invalid Pixie Gate record for session ${sessionId}`);
     }
     for (const run of record5.runs) if (run.status === "running" && !this.owned.has(run.id)) run.status = "cancelled";
@@ -1896,6 +1976,7 @@ var PixieGateStore = class {
         point: snapshot.point,
         ...snapshot.when ? { when: snapshot.when } : {},
         sessionId,
+        ...snapshot.advanced ? { showInChat: snapshot.advanced.showInChat !== false } : {},
         startedAt: Date.now(),
         original,
         finalText: original,
@@ -1932,6 +2013,7 @@ var PixieGateStore = class {
       if (value.reason !== void 0) run.reason = value.reason;
       if (value.turn !== void 0) run.turn = value.turn;
       if (value.tool !== void 0) run.tool = value.tool;
+      if (value.messageId !== void 0) run.messageId = value.messageId;
       if (value.steerCount !== void 0) run.steerCount = value.steerCount;
       if (value.result) {
         run.result = value.result;
@@ -1960,6 +2042,26 @@ var PixieGateStore = class {
       return structuredClone(run);
     });
   }
+  /** Gates switched off for this session; a missing record means none. */
+  async disabledGates(sessionId) {
+    return [...(await this.read(sessionId)).disabledGateIds ?? []];
+  }
+  /** Switch one gate for this session only. Shares the run queue, so it never races a run commit. */
+  setGateEnabled(sessionId, gateId, enabled) {
+    if (typeof gateId !== "string" || !gateId) throw new Error("Gate id is required");
+    return this.enqueue(sessionId, async () => {
+      const record5 = await this.read(sessionId);
+      const current = new Set(record5.disabledGateIds ?? []);
+      if (enabled) current.delete(gateId);
+      else current.add(gateId);
+      const next = [...current];
+      if (next.length) record5.disabledGateIds = next;
+      else delete record5.disabledGateIds;
+      await this.save(sessionId, record5);
+      for (const listener of this.listeners.get(sessionId) ?? []) listener({ type: "session", disabledGateIds: [...next] });
+      return next;
+    });
+  }
   /** Sync means refetch durable history; only committed running executions are replayed. No await between snapshot and subscribe. */
   async *follow(sessionId, signal) {
     this.file(sessionId);
@@ -2411,6 +2513,14 @@ function parsePixieSettings(value) {
     if (typeof raw.judgeSystemPrompt !== "string") throw new Error("Pixie settings judgeSystemPrompt must be a string");
     settings.judgeSystemPrompt = raw.judgeSystemPrompt;
   }
+  if (raw.judgeEngine !== void 0) {
+    if (raw.judgeEngine !== "llm" && raw.judgeEngine !== "jev") throw new Error("Pixie settings judgeEngine must be llm or jev");
+    settings.judgeEngine = raw.judgeEngine;
+  }
+  if (raw.jevModel !== void 0) {
+    if (typeof raw.jevModel !== "string" || !/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(raw.jevModel)) throw new Error("Pixie settings jevModel must be a model ID");
+    settings.jevModel = raw.jevModel;
+  }
   return settings;
 }
 function parsePixieModel(value) {
@@ -2461,75 +2571,6 @@ var PixieSettingsStore = class {
 import { mkdir as mkdir5, readFile as readFile6, rename as rename5, writeFile as writeFile5 } from "node:fs/promises";
 import { dirname as dirname5 } from "node:path";
 import { randomUUID as randomUUID6 } from "node:crypto";
-
-// src/pixie-gate-task-contracts.ts
-var object3 = (value) => !!value && typeof value === "object" && !Array.isArray(value);
-var text = (value) => typeof value === "string" && !!value.trim();
-function validateGateTask(value) {
-  if (!object3(value) || !text(value.id) || !text(value.name) || typeof value.enabled !== "boolean" || !GATE_WHENS.includes(value.when) || typeof value.instruction !== "string") throw new Error("Invalid gate task");
-  const advanced = value.advanced;
-  if (!object3(advanced) || typeof advanced.confirmReplace !== "boolean" || !["pass", "block"].includes(advanced.onError) || !["root", "child", "any"].includes(advanced.agents) || typeof advanced.timeoutMs !== "number" || !Number.isFinite(advanced.timeoutMs) || typeof advanced.maxSteers !== "number") throw new Error("Invalid gate advanced options");
-  if (advanced.script !== void 0 && (typeof advanced.script !== "string" || (!/^[A-Za-z0-9][A-Za-z0-9_.-]*$/.test(advanced.script) || advanced.script.includes("..")))) throw new Error("Invalid gate script filename");
-  if (!Array.isArray(value.presetIds) || !value.presetIds.every(text)) throw new Error("Invalid gate presetIds");
-  if (value.disabledPresetIds !== void 0 && (!Array.isArray(value.disabledPresetIds) || !value.disabledPresetIds.every(text))) throw new Error("Invalid gate disabledPresetIds");
-  const name = typeof advanced.script === "string" ? advanced.script.replace(/\.[^.]+$/, "") : void 0;
-  for (const match of value.instruction.matchAll(/{{\s*([^{}]+?)\s*}}/g)) {
-    if (!name || ![`hooks.${name}.text`, `hooks.${name}.data`].includes(match[1])) throw new Error(`Unknown prompt variable: ${match[1]}`);
-  }
-  const task = structuredClone(value);
-  delete task.advanced.judge;
-  const problem = taskProblem(task);
-  if (problem) throw new Error(`Invalid gate ${problem}`);
-  task.presetIds = [...new Set(task.presetIds)];
-  const disabled = [...new Set(task.disabledPresetIds ?? [])].filter((id) => task.presetIds.includes(id));
-  if (disabled.length) task.disabledPresetIds = disabled;
-  else delete task.disabledPresetIds;
-  return task;
-}
-function validateGateTasks(value) {
-  if (!Array.isArray(value)) throw new Error("Gate tasks must be an array");
-  const ids = /* @__PURE__ */ new Set(), bindings = /* @__PURE__ */ new Set();
-  return value.map((raw) => {
-    const task = validateGateTask(raw);
-    if (ids.has(task.id)) throw new Error("Duplicate gate id");
-    ids.add(task.id);
-    for (const preset of task.presetIds) {
-      const key = JSON.stringify([preset, task.when]);
-      if (!enabledFor(task, preset)) continue;
-      if (bindings.has(key)) throw new Error("Only one enabled gate per preset and when is supported");
-      bindings.add(key);
-    }
-    return task;
-  });
-}
-function parseGateOutput(text2) {
-  const value = JSON.parse(text2);
-  if (!object3(value) || Object.hasOwn(value, "verdict") && !["pass", "stop"].includes(value.verdict)) throw new Error("Gate output needs a pass/stop verdict");
-  for (const [key, field2] of Object.entries(value)) {
-    if (!["verdict", "reason", "replace", "append", "note"].includes(key) || typeof field2 !== "string") throw new Error(`Invalid gate output field: ${key}`);
-  }
-  return { verdict: "pass", ...value };
-}
-function gateOutputPlan(task, output, original) {
-  const message = task.when === "user-message" || task.when === "agent-message";
-  const mutable = message || task.when === "tool-after";
-  const changed = output.replace !== void 0 && output.replace !== original;
-  const confirm = message && task.advanced.confirmReplace && changed;
-  const stop = output.verdict === "stop" || confirm;
-  const notes = output.note === void 0 ? [] : [output.note];
-  if (output.replace !== void 0 && (!mutable || stop && !message)) notes.push(output.replace);
-  if (output.append !== void 0 && (!mutable || stop)) notes.push(output.append);
-  return {
-    stop,
-    notes,
-    ...output.reason !== void 0 ? { reason: output.reason } : {},
-    ...stop && message && output.replace !== void 0 ? { suggestion: output.replace } : {},
-    ...!stop && mutable && changed ? { replacement: output.replace } : {},
-    ...!stop && mutable && output.append !== void 0 ? { addition: output.append } : {}
-  };
-}
-
-// src/host/pixie-gate-definitions.ts
 var diagnostic = (error, code) => ({ code: typeof error?.code === "string" ? error.code : code, message: error instanceof Error ? error.message : String(error) });
 function decode(text2) {
   let value;
@@ -2599,6 +2640,15 @@ async function readRuntimeGateDefinitions(source) {
     return [];
   }
 }
+async function readSessionGateDefinitions(source, sessionId) {
+  const [rows, disabled] = await Promise.all([readRuntimeGateDefinitions(source), source.disabledGates?.(sessionId).catch((error) => {
+    source.warn?.(`studio pixie: session gate switches unreadable for ${sessionId}: ${String(error)}`);
+    return [];
+  }) ?? Promise.resolve([])]);
+  if (!disabled.length) return rows;
+  const off = new Set(disabled);
+  return rows.filter((row) => !off.has(row.id));
+}
 
 // src/host/pixie-gate-input.ts
 import { randomUUID as randomUUID7 } from "node:crypto";
@@ -2622,6 +2672,7 @@ async function executeTask(task, original, signal, runner, context) {
     records: execution.helperCalls ?? [],
     hooks: {},
     appliedPolicy: task.advanced.onError,
+    ...execution.concludedBy ? { concludedBy: execution.concludedBy } : {},
     ...plan.stop || execution.error ? { forwardError: { verdict: execution.error ? "error" : "fail", reason: plan.reason ?? "Revision requires confirmation", ...plan.suggestion !== void 0 ? { text: plan.suggestion } : {} } } : {},
     forward: plan.stop ? { kind: "none" } : plan.replacement !== void 0 ? { kind: "replace", text: plan.replacement } : plan.addition !== void 0 ? { kind: "append", text: original, contexts: [plan.addition], source: "studio-pixie-gate" } : { kind: "original", text: original }
   };
@@ -2649,7 +2700,7 @@ function gateInput(deps) {
     if (decision.kind === "reject") return decision;
     const preset = deps.preset(payload.agent);
     if (!preset) return decision;
-    const rows = await readRuntimeGateDefinitions(deps);
+    const rows = await readSessionGateDefinitions(deps, payload.agent.id);
     const root = deps.isRoot(payload.agent);
     const targets = decision.messages.flatMap((message) => {
       const when = message.source.kind === "user" ? "user-message" : message.source.kind === "agent-message" ? "agent-message" : void 0;
@@ -2668,7 +2719,7 @@ function gateInput(deps) {
       deps.emit("pixie-gate/start", structuredClone(run));
       const execution = await executeTask(gate, original, payload.signal, deps.runner, () => deps.hookContext?.(payload.agent, payload.turn) ?? { sessionId: payload.agent.id, cwd: payload.agent.session.header.cwd, turn: payload.turn, agent: root ? "root" : "child" });
       const { result, plan } = execution;
-      const item = { run, execution, result, applied: execution.skipped ? "none" : "pass" };
+      const item = { messageId: String(message.id), run, execution, result, applied: execution.skipped ? "none" : "pass" };
       pending.push(item);
       if (payload.signal.aborted || result.verdict === "cancelled") break;
       const suggestion = plan.suggestion;
@@ -2704,9 +2755,9 @@ function gateInput(deps) {
         addition: !cancelled && !rejected && item.execution.plan.addition !== void 0,
         withheld: !cancelled && rejected
       });
-      await deps.recorder.finish(payload.agent.id, item.run.id, { status: cancelled ? "cancelled" : item.result.verdict === "error" ? "error" : "done", result: item.result, output: item.execution.output, usage: item.execution.usage, applied, hooksInput, ...applied === "rejected" ? { rejection: item.rejection } : {} });
+      await deps.recorder.finish(payload.agent.id, item.run.id, { status: cancelled ? "cancelled" : item.result.verdict === "error" ? "error" : "done", result: item.result, output: item.execution.output, usage: item.execution.usage, applied, hooksInput, messageId: item.messageId, ...applied === "rejected" ? { rejection: item.rejection } : {} });
       const usage = item.execution.usage;
-      deps.emit("pixie-gate/end", { ...item.run, result: item.result, output: item.execution.output, finalText: item.result.subject, applied, hooksInput, usage, endedAt: Date.now(), status: cancelled ? "cancelled" : item.result.verdict === "error" ? "error" : "done", ...applied === "rejected" && item.rejection ? { rejection: { ...item.rejection, original: item.run.original, status: "pending" } } : {} });
+      deps.emit("pixie-gate/end", { ...item.run, messageId: item.messageId, result: item.result, output: item.execution.output, finalText: item.result.subject, applied, hooksInput, usage, endedAt: Date.now(), status: cancelled ? "cancelled" : item.result.verdict === "error" ? "error" : "done", ...applied === "rejected" && item.rejection ? { rejection: { ...item.rejection, original: item.run.original, status: "pending" } } : {} });
     }
     return committed;
   };
@@ -2720,7 +2771,7 @@ function gateTurn(deps) {
   return async ({ agent, turn, signal }) => {
     const preset = deps.preset(agent);
     if (!preset) return;
-    const gate = (await readRuntimeGateDefinitions(deps)).find((row) => row.when === "turn-end" && taskMatches(row, preset, deps.isRoot(agent)));
+    const gate = (await readSessionGateDefinitions(deps, agent.id)).find((row) => row.when === "turn-end" && taskMatches(row, preset, deps.isRoot(agent)));
     if (!gate) return;
     const original = [...agent.session.deriveMessages()].reverse().find((message2) => message2.role === "assistant");
     const subject = original ? textOf3(original) : "";
@@ -2759,7 +2810,7 @@ function gateTools(deps) {
     if (!agent) return decision;
     const preset = deps.preset(agent);
     if (!preset) return decision;
-    const gate = (await readRuntimeGateDefinitions(deps)).find((row) => row.when === point && taskMatches(row, preset, deps.isRoot(agent)));
+    const gate = (await readSessionGateDefinitions(deps, agent.id)).find((row) => row.when === point && taskMatches(row, preset, deps.isRoot(agent)));
     if (!gate) return decision;
     const turn = [...agent.session.snapshotEvents()].reverse().find((event) => event.type === "turn/start")?.data.turn ?? 0;
     const contexts = "additionalContexts" in decision ? decision.additionalContexts : void 0;
@@ -2822,89 +2873,184 @@ function gateTools(deps) {
   };
 }
 
-// src/host/pixie-judge.ts
-var TOLERANCE = 0.02;
-var isProbability = (value) => typeof value === "number" && Number.isFinite(value) && value >= 0 && value <= 1;
-var sumsToOne = (values) => Math.abs(values.reduce((sum, value) => sum + value, 0) - 1) <= TOLERANCE;
-function checkAnswer(id, question, raw) {
-  const answer = raw;
-  if (!answer || typeof answer !== "object") throw new Error(`Missing answer for "${id}"`);
-  if (question.type === "choice") {
-    const names3 = Object.keys(question.options);
-    const probabilities = answer.probabilities;
-    if (typeof answer.choice !== "string" || !names3.includes(answer.choice)) throw new Error(`Answer "${id}" chose an unknown option`);
-    if (!probabilities || names3.some((name) => !isProbability(probabilities[name])) || Object.keys(probabilities).some((name) => !names3.includes(name))) throw new Error(`Answer "${id}" needs a probability per option`);
-    const values = names3.map((name) => probabilities[name]);
-    if (!sumsToOne(values)) throw new Error(`Answer "${id}" probabilities must sum to 1`);
-    return { type: "choice", choice: answer.choice, probabilities: Object.fromEntries(names3.map((name) => [name, probabilities[name]])), confidence: Math.max(...values) };
-  }
-  if (question.type === "score") {
-    const probabilities = answer.probabilities;
-    const top = question.levels.length - 1;
-    if (typeof answer.score !== "number" || !Number.isFinite(answer.score) || answer.score < 0 || answer.score > top) throw new Error(`Answer "${id}" score must be within 0..${top}`);
-    if (!Array.isArray(probabilities) || probabilities.length !== question.levels.length || !probabilities.every(isProbability) || !sumsToOne(probabilities)) throw new Error(`Answer "${id}" needs one probability per level summing to 1`);
-    return { type: "score", score: answer.score, probabilities, confidence: Math.max(...probabilities) };
-  }
-  if (!isProbability(answer.noul)) throw new Error(`Answer "${id}" noul must be a probability in 0..1`);
-  return { type: "noul", noul: answer.noul };
+// src/host/pixie-gate-helper.ts
+import { createHash, randomBytes } from "node:crypto";
+import { chmod, mkdir as mkdir6, rename as rename6, writeFile as writeFile6 } from "node:fs/promises";
+import { join as join5 } from "node:path";
+var HELPER_ROUTE = "/studio/pixie-gate/helper";
+var HELPER_LIMITS = { calls: 20, bodyBytes: 256 * 1024 };
+function helperJudgement(request, answer, meta = {}) {
+  const extra = { ...meta.engine ? { engine: meta.engine } : {}, ...meta.model ? { model: meta.model } : {} };
+  if (answer.type === "noul") {
+    const pass = answer.noul >= request.threshold;
+    return { exit: pass ? 0 : 1, text: String(answer.noul), json: { type: "bool", label: pass ? "yes" : "no", answer, threshold: request.threshold, ...extra } };
+  }
+  if (answer.type === "choice") return { exit: 0, text: answer.choice, json: { type: "select", label: answer.choice, answer, ...extra } };
+  return { exit: 0, text: String(answer.score), json: { type: "score", label: String(Math.round(answer.score)), answer, ...extra } };
 }
-function parseJudgeOutput(text2, questions) {
-  const fenced = /^```(?:json)?\s*([\s\S]*?)\s*```$/.exec(text2.trim());
-  let parsed;
-  try {
-    parsed = JSON.parse(fenced ? fenced[1] : text2.trim());
-  } catch {
-    throw new Error("Judge model did not return JSON");
-  }
-  const answers = parsed?.answers;
-  if (!answers || typeof answers !== "object") throw new Error("Judge model output has no answers object");
-  return Object.fromEntries(Object.entries(questions).map(([id, question]) => [id, checkAnswer(id, question, answers[id])]));
+function helperJudgeRequest(form) {
+  const type = form.get("type") ?? "bool";
+  if (!["bool", "select", "score"].includes(type)) throw new Error("type must be bool, select, or score");
+  const instructions2 = form.get("question")?.trim();
+  if (!instructions2) throw new Error("question is required");
+  const raw = form.get("threshold"), threshold = raw === null ? 0.5 : Number(raw);
+  if (!(threshold >= 0 && threshold <= 1)) throw new Error("threshold must be between 0 and 1");
+  let question;
+  if (type === "bool") {
+    const yes = form.get("true"), no = form.get("false");
+    question = { type: "noul", instructions: instructions2, ...yes !== null || no !== null ? { criteria: { ...yes !== null ? { true: yes } : {}, ...no !== null ? { false: no } : {} } } : {} };
+  } else if (type === "select") {
+    const criteria = {};
+    for (const option of form.getAll("option")) {
+      const at = option.indexOf("=");
+      const name = (at < 0 ? option : option.slice(0, at)).trim();
+      if (!name || Object.hasOwn(criteria, name)) throw new Error(`option names must be unique and non-empty: ${option}`);
+      criteria[name] = at < 0 ? name : option.slice(at + 1);
+    }
+    question = { type: "choice", instructions: instructions2, criteria };
+  } else question = { type: "score", instructions: instructions2, criteria: form.getAll("level") };
+  validateJudgeRequest({ state: "", questions: { helper: question } });
+  return { type, question, threshold };
 }
-var LlmJudgeEngine = class {
-  constructor(llm, model, system = DEFAULT_JUDGE_SYSTEM_PROMPT) {
-    this.llm = llm;
-    this.model = model;
-    this.system = system;
+var HELPER_SCRIPT = `#!/usr/bin/env bash
+# Pixie Gate hook helper, generated by DSH Studio. Valid only inside one hook script run.
+#   pixie ask "<instruction>" [--input]
+#   pixie judge [--type bool|select|score] --question "<question>" [--threshold 0.5] [--true ..] [--false ..]
+#               [--option name=desc ..] [--level desc ..] [--json] [--input]
+# --input reads the helper input from stdin; otherwise the gate target is used.
+set -u
+fail() { printf 'pixie: %s\\n' "$1" >&2; exit 2; }
+[ -n "\${PIXIE_URL:-}" ] && [ -n "\${PIXIE_TOKEN:-}" ] || fail 'helper is not available outside a Pixie Gate hook script run'
+command -v curl >/dev/null 2>&1 || fail 'curl is required'
+command="\${1:-}"; [ $# -gt 0 ] && shift
+input=0; args=()
+case "$command" in
+  ask)
+    [ $# -ge 1 ] || fail 'usage: pixie ask "<instruction>" [--input]'
+    args+=(--data-urlencode "instruction=$1"); shift
+    while [ $# -gt 0 ]; do case "$1" in --input) input=1 ;; *) fail "unknown option: $1" ;; esac; shift; done ;;
+  judge)
+    question=''; json=0
+    while [ $# -gt 0 ]; do case "$1" in
+      --type|--question|--threshold|--true|--false|--option|--level)
+        [ $# -ge 2 ] || fail "$1 needs a value"
+        [ "$1" = --question ] && question="$2"
+        args+=(--data-urlencode "\${1#--}=$2"); shift ;;
+      --json) json=1 ;;
+      --input) input=1 ;;
+      *) fail "unknown option: $1" ;;
+    esac; shift; done
+    [ -n "$question" ] || fail 'usage: pixie judge [--type bool|select|score] --question "<question>" [--threshold 0.5] [--true ..] [--false ..] [--option name=desc ..] [--level desc ..] [--json] [--input]' ;;
+  *) fail 'usage: pixie ask|judge ...' ;;
+esac
+[ "$input" = 1 ] && args+=(--data-urlencode 'input@-')
+# The token travels in a config on a file descriptor, never on the command line.
+out=$(curl -sS --noproxy '*' -X POST -K <(printf 'header = "Authorization: Bearer %s"\\n' "$PIXIE_TOKEN") -w '\\n%{http_code}' "\${args[@]}" "$PIXIE_URL/$command") || fail "request failed"
+code=\${out##*$'\\n'}; body=\${out%$'\\n'*}
+[ "$code" = 200 ] || fail "HTTP $code: $body"
+if [ "$command" = ask ]; then printf '%s\\n' "$body"; exit 0; fi
+# judge body: exit code, plain answer, then the JSON line.
+status=\${body%%$'\\n'*}; rest=\${body#*$'\\n'}; text=\${rest%%$'\\n'*}; line=\${rest#*$'\\n'}
+if [ "$json" = 1 ]; then printf '%s\\n' "$line"; else printf '%s\\n' "$text"; fi
+exit "$status"
+`;
+var hash = (token) => createHash("sha256").update(token).digest("hex");
+var send = (res, status, text2) => {
+  if (res.headersSent) return;
+  res.writeHead(status, { "content-type": "text/plain; charset=utf-8", "cache-control": "no-store" });
+  res.end(text2);
+};
+var PixieGateHelper = class {
+  constructor(options) {
+    this.options = options;
+    this.limits = options.limits ?? HELPER_LIMITS;
   }
-  kind = "judge";
-  async judge(request, signal) {
-    let usage;
-    try {
-      const { state, questions } = validateJudgeRequest(request);
-      const prompt = `State:
-${typeof state === "string" ? state : JSON.stringify(state, null, 2)}
-
-Questions:
-${JSON.stringify(questions, null, 2)}`;
-      let text2 = "";
-      let finished = false;
-      for await (const chunk of untilAborted(this.llm.stream({
-        provider: this.model.provider,
-        model: this.model.model,
-        ...this.model.reasoningEffort ? { reasoningEffort: this.model.reasoningEffort } : {},
-        ...this.model.maxTokens ? { maxTokens: this.model.maxTokens } : {},
-        system: this.system,
-        messages: [{ role: "user", content: [{ type: "text", text: prompt }] }],
-        signal
-      }), signal)) {
-        if (chunk.type === "text-delta" && typeof chunk.text === "string") text2 += chunk.text;
-        if (chunk.type === "usage" && chunk.usage && typeof chunk.usage === "object") {
-          const raw = chunk.usage;
-          usage = { inputTokens: typeof raw.inputTokens === "number" ? raw.inputTokens : 0, outputTokens: typeof raw.outputTokens === "number" ? raw.outputTokens : 0 };
-          for (const key of ["cacheReadTokens", "cacheWriteTokens", "reasoningTokens"]) if (typeof raw[key] === "number") usage[key] = raw[key];
-        }
-        if (chunk.type === "finish") {
-          const reason = chunk.reason;
-          if (reason?.kind !== "stop") throw new Error(reason?.failure?.message ?? `Judge model ended with ${reason?.kind ?? "unknown"}`);
-          finished = true;
-        }
+  grants = /* @__PURE__ */ new Map();
+  installed;
+  limits;
+  /** Environment for one script run. Without a reachable route only PATH is given and `pixie` explains why. */
+  async issue(grant) {
+    await (this.installed ??= this.install().catch((error) => {
+      this.installed = void 0;
+      throw error;
+    }));
+    const env = { PATH: `${this.options.binDirectory}:${process.env.PATH ?? "/usr/bin:/bin"}` };
+    const url = this.options.url();
+    if (!url) return { env, revoke() {
+    } };
+    const token = randomBytes(32).toString("hex"), key = hash(token);
+    const entry = { grant, calls: 0, revoked: new AbortController() };
+    this.grants.set(key, entry);
+    return { env: { ...env, PIXIE_URL: url, PIXIE_TOKEN: token }, revoke: () => {
+      this.grants.delete(key);
+      entry.revoked.abort(new Error("Pixie helper token revoked"));
+    } };
+  }
+  handle = async (req, res) => {
+    const action = new URL(req.url ?? "/", "http://x").pathname.slice(HELPER_ROUTE.length);
+    if (action !== "/ask" && action !== "/judge") return send(res, 404, "unknown helper");
+    if (req.method !== "POST") return send(res, 405, "POST only");
+    const header = req.headers.authorization;
+    const entry = typeof header === "string" && header.startsWith("Bearer ") ? this.grants.get(hash(header.slice(7))) : void 0;
+    if (!entry) return send(res, 401, "invalid or expired token");
+    if (entry.calls >= this.limits.calls) return send(res, 429, `helper call limit (${this.limits.calls}) reached`);
+    const body = await this.read(req);
+    if (body === void 0) return send(res, 413, `helper request exceeds ${this.limits.bodyBytes} bytes`);
+    if (!this.grants.has(hash(header.slice(7)))) return send(res, 401, "invalid or expired token");
+    const form = new URLSearchParams(body);
+    const input = form.get("input") ?? entry.grant.target;
+    const closed = new AbortController();
+    res.on("close", () => {
+      if (!res.writableFinished) closed.abort(new Error("Helper client disconnected"));
+    });
+    const signal = AbortSignal.any([entry.grant.signal, entry.revoked.signal, closed.signal]);
+    let call;
+    if (action === "/ask") {
+      const instruction = form.get("instruction")?.trim();
+      if (!instruction) return send(res, 400, "instruction is required");
+      entry.calls++;
+      call = entry.grant.ask(instruction, input, signal);
+    } else {
+      let request;
+      try {
+        request = helperJudgeRequest(form);
+      } catch (error) {
+        return send(res, 400, error instanceof Error ? error.message : String(error));
       }
-      signal.throwIfAborted();
-      if (!finished) throw new Error("Judge model stream ended without a finish");
-      return { ok: true, answers: parseJudgeOutput(text2, questions), ...usage ? { usage } : {} };
+      entry.calls++;
+      call = entry.grant.judge(request, input, signal).then((result) => `${result.exit}
+${result.text.replace(/\n/g, " ")}
+${JSON.stringify(result.json)}`);
+    }
+    try {
+      send(res, 200, await call);
     } catch (error) {
-      return { ok: false, error: error instanceof Error ? error.message : String(error), ...usage ? { usage } : {} };
+      send(res, signal.aborted ? 503 : 502, error instanceof Error ? error.message : String(error));
     }
+  };
+  /** Body text, or undefined above the size limit (the rest is drained, then the socket closed past 4×). */
+  read(req) {
+    return new Promise((resolve6, reject) => {
+      const chunks = [];
+      let size = 0;
+      req.on("data", (chunk) => {
+        size += chunk.length;
+        if (size <= this.limits.bodyBytes) chunks.push(chunk);
+        else if (size > this.limits.bodyBytes * 4) {
+          req.destroy();
+          resolve6(void 0);
+        }
+      });
+      req.on("end", () => resolve6(size > this.limits.bodyBytes ? void 0 : Buffer.concat(chunks).toString("utf8")));
+      req.on("error", reject);
+    });
+  }
+  async install() {
+    await mkdir6(this.options.binDirectory, { recursive: true });
+    const path = join5(this.options.binDirectory, "pixie"), temp = `${path}.${process.pid}.tmp`;
+    await writeFile6(temp, HELPER_SCRIPT, { mode: 493 });
+    await chmod(temp, 493);
+    await rename6(temp, path);
   }
 };
 
@@ -2959,7 +3105,8 @@ var GateTaskRunner = class {
         } finally {
           session?.revoke();
         }
-        if (hook.skipped) return { status: "done", skipped: true, output: { verdict: "pass", note: "skipped by hook" }, usage };
+        if (hook.skipped) return { status: "done", skipped: true, concludedBy: "skipped", output: { verdict: "pass", note: "skipped by hook" }, usage };
+        if ("direct" in hook) return { status: "done", concludedBy: "script", output: hook.direct, usage };
         instruction = hook.instruction;
       }
       if (!this.deps.model) throw new Error("No Pixie model configured");
@@ -2990,7 +3137,7 @@ Instruction: ${instruction}`,
       signal.throwIfAborted();
       if (!finished) throw new Error("Gate model stream ended without a finish");
       const output = parseGateOutput(text2);
-      return { status: "done", output, usage };
+      return { status: "done", concludedBy: "pixie", output, usage };
     } catch (error) {
       return { status: parent.aborted ? "cancelled" : "error", error: String(signal.aborted ? signal.reason : error), usage };
     } finally {
@@ -3034,168 +3181,34 @@ Instruction: ${instruction}`,
         record5("ask", input, { verdict: "note", text: text2, reason: instruction, ...usage ? { usage } : {} });
         return text2;
       },
-      judge: async (question, threshold, input, callSignal) => {
-        const model = this.deps.model;
-        if (!model) {
-          record5("judge", input, { verdict: "error", error: "No Pixie model configured", reason: question });
-          throw new Error("No Pixie model configured");
+      judge: async (request, input, callSignal) => {
+        const reason = request.question.instructions;
+        const engine = this.deps.judge;
+        if (!engine) {
+          record5("judge", input, { verdict: "error", error: "No judge engine configured", reason });
+          throw new Error("No judge engine configured");
         }
-        const result = await new LlmJudgeEngine(this.deps.llm, model).judge({ state: input, questions: { helper: { type: "noul", question } } }, callSignal);
+        const result = await engine.judge({ state: input, questions: { helper: request.question } }, callSignal);
         const usage = result.usage ? { usage: result.usage } : {};
         const answer = result.ok ? result.answers.helper : void 0;
-        if (answer?.type !== "noul") {
-          const error = result.ok ? "Judge answer is not noul" : result.error;
-          record5("judge", input, { verdict: "error", error, reason: question, ...usage });
+        if (!answer) {
+          const error = result.ok ? "Judge returned no answer" : result.error;
+          record5("judge", input, { verdict: "error", error, reason, data: { type: request.type, engine: engine.label }, ...usage });
           throw new Error(error);
         }
-        const pass = answer.noul >= threshold;
-        record5("judge", input, { verdict: pass ? "pass" : "fail", reason: question, data: { noul: answer.noul, threshold }, ...usage });
-        return { noul: answer.noul, pass };
+        const judgement = helperJudgement(request, answer, { engine: engine.label });
+        record5("judge", input, {
+          verdict: judgement.exit === 0 ? "pass" : "fail",
+          reason,
+          ...usage,
+          data: { type: request.type, label: judgement.json.label, engine: engine.label, ...request.type === "bool" && answer.type === "noul" ? { noul: answer.noul, threshold: request.threshold } : { answer } }
+        });
+        return judgement;
       }
     };
   }
 };
 
-// src/host/pixie-gate-helper.ts
-import { createHash, randomBytes } from "node:crypto";
-import { chmod, mkdir as mkdir6, rename as rename6, writeFile as writeFile6 } from "node:fs/promises";
-import { join as join5 } from "node:path";
-var HELPER_ROUTE = "/studio/pixie-gate/helper";
-var HELPER_LIMITS = { calls: 20, bodyBytes: 256 * 1024 };
-var HELPER_SCRIPT = `#!/usr/bin/env bash
-# Pixie Gate hook helper, generated by DSH Studio. Valid only inside one hook script run.
-#   pixie ask "<instruction>" [--input]
-#   pixie judge --question "<question>" [--threshold 0.5] [--input]
-# --input reads the helper input from stdin; otherwise the gate target is used.
-set -u
-fail() { printf 'pixie: %s\\n' "$1" >&2; exit 2; }
-[ -n "\${PIXIE_URL:-}" ] && [ -n "\${PIXIE_TOKEN:-}" ] || fail 'helper is not available outside a Pixie Gate hook script run'
-command -v curl >/dev/null 2>&1 || fail 'curl is required'
-command="\${1:-}"; [ $# -gt 0 ] && shift
-input=0; args=()
-case "$command" in
-  ask)
-    [ $# -ge 1 ] || fail 'usage: pixie ask "<instruction>" [--input]'
-    args+=(--data-urlencode "instruction=$1"); shift
-    while [ $# -gt 0 ]; do case "$1" in --input) input=1 ;; *) fail "unknown option: $1" ;; esac; shift; done ;;
-  judge)
-    question=''; threshold=''
-    while [ $# -gt 0 ]; do case "$1" in
-      --question) [ $# -ge 2 ] || fail '--question needs a value'; question="$2"; shift ;;
-      --threshold) [ $# -ge 2 ] || fail '--threshold needs a value'; threshold="$2"; shift ;;
-      --input) input=1 ;;
-      *) fail "unknown option: $1" ;;
-    esac; shift; done
-    [ -n "$question" ] || fail 'usage: pixie judge --question "<question>" [--threshold 0.5] [--input]'
-    args+=(--data-urlencode "question=$question")
-    [ -z "$threshold" ] || args+=(--data-urlencode "threshold=$threshold") ;;
-  *) fail 'usage: pixie ask|judge ...' ;;
-esac
-[ "$input" = 1 ] && args+=(--data-urlencode 'input@-')
-# The token travels in a config on a file descriptor, never on the command line.
-out=$(curl -sS --noproxy '*' -X POST -K <(printf 'header = "Authorization: Bearer %s"\\n' "$PIXIE_TOKEN") -w '\\n%{http_code}' "\${args[@]}" "$PIXIE_URL/$command") || fail "request failed"
-code=\${out##*$'\\n'}; body=\${out%$'\\n'*}
-[ "$code" = 200 ] || fail "HTTP $code: $body"
-if [ "$command" = ask ]; then printf '%s\\n' "$body"; exit 0; fi
-verdict=\${body%% *}; printf '%s\\n' "\${body#* }"
-[ "$verdict" = pass ]
-`;
-var hash = (token) => createHash("sha256").update(token).digest("hex");
-var send = (res, status, text2) => {
-  if (res.headersSent) return;
-  res.writeHead(status, { "content-type": "text/plain; charset=utf-8", "cache-control": "no-store" });
-  res.end(text2);
-};
-var PixieGateHelper = class {
-  constructor(options) {
-    this.options = options;
-    this.limits = options.limits ?? HELPER_LIMITS;
-  }
-  grants = /* @__PURE__ */ new Map();
-  installed;
-  limits;
-  /** Environment for one script run. Without a reachable route only PATH is given and `pixie` explains why. */
-  async issue(grant) {
-    await (this.installed ??= this.install().catch((error) => {
-      this.installed = void 0;
-      throw error;
-    }));
-    const env = { PATH: `${this.options.binDirectory}:${process.env.PATH ?? "/usr/bin:/bin"}` };
-    const url = this.options.url();
-    if (!url) return { env, revoke() {
-    } };
-    const token = randomBytes(32).toString("hex"), key = hash(token);
-    const entry = { grant, calls: 0, revoked: new AbortController() };
-    this.grants.set(key, entry);
-    return { env: { ...env, PIXIE_URL: url, PIXIE_TOKEN: token }, revoke: () => {
-      this.grants.delete(key);
-      entry.revoked.abort(new Error("Pixie helper token revoked"));
-    } };
-  }
-  handle = async (req, res) => {
-    const action = new URL(req.url ?? "/", "http://x").pathname.slice(HELPER_ROUTE.length);
-    if (action !== "/ask" && action !== "/judge") return send(res, 404, "unknown helper");
-    if (req.method !== "POST") return send(res, 405, "POST only");
-    const header = req.headers.authorization;
-    const entry = typeof header === "string" && header.startsWith("Bearer ") ? this.grants.get(hash(header.slice(7))) : void 0;
-    if (!entry) return send(res, 401, "invalid or expired token");
-    if (entry.calls >= this.limits.calls) return send(res, 429, `helper call limit (${this.limits.calls}) reached`);
-    const body = await this.read(req);
-    if (body === void 0) return send(res, 413, `helper request exceeds ${this.limits.bodyBytes} bytes`);
-    if (!this.grants.has(hash(header.slice(7)))) return send(res, 401, "invalid or expired token");
-    const form = new URLSearchParams(body);
-    const input = form.get("input") ?? entry.grant.target;
-    const closed = new AbortController();
-    res.on("close", () => {
-      if (!res.writableFinished) closed.abort(new Error("Helper client disconnected"));
-    });
-    const signal = AbortSignal.any([entry.grant.signal, entry.revoked.signal, closed.signal]);
-    let call;
-    if (action === "/ask") {
-      const instruction = form.get("instruction")?.trim();
-      if (!instruction) return send(res, 400, "instruction is required");
-      entry.calls++;
-      call = entry.grant.ask(instruction, input, signal);
-    } else {
-      const question = form.get("question")?.trim();
-      const raw = form.get("threshold"), threshold = raw === null ? 0.5 : Number(raw);
-      if (!question) return send(res, 400, "question is required");
-      if (!(threshold >= 0 && threshold <= 1)) return send(res, 400, "threshold must be between 0 and 1");
-      entry.calls++;
-      call = entry.grant.judge(question, threshold, input, signal).then((result) => `${result.pass ? "pass" : "fail"} ${result.noul}`);
-    }
-    try {
-      send(res, 200, await call);
-    } catch (error) {
-      send(res, signal.aborted ? 503 : 502, error instanceof Error ? error.message : String(error));
-    }
-  };
-  /** Body text, or undefined above the size limit (the rest is drained, then the socket closed past 4×). */
-  read(req) {
-    return new Promise((resolve6, reject) => {
-      const chunks = [];
-      let size = 0;
-      req.on("data", (chunk) => {
-        size += chunk.length;
-        if (size <= this.limits.bodyBytes) chunks.push(chunk);
-        else if (size > this.limits.bodyBytes * 4) {
-          req.destroy();
-          resolve6(void 0);
-        }
-      });
-      req.on("end", () => resolve6(size > this.limits.bodyBytes ? void 0 : Buffer.concat(chunks).toString("utf8")));
-      req.on("error", reject);
-    });
-  }
-  async install() {
-    await mkdir6(this.options.binDirectory, { recursive: true });
-    const path = join5(this.options.binDirectory, "pixie"), temp = `${path}.${process.pid}.tmp`;
-    await writeFile6(temp, HELPER_SCRIPT, { mode: 493 });
-    await chmod(temp, 493);
-    await rename6(temp, path);
-  }
-};
-
 // src/host/pixie-gate-settings.ts
 import { randomUUID as randomUUID10 } from "node:crypto";
 import { mkdir as mkdir7, readFile as readFile7, rename as rename7, writeFile as writeFile7 } from "node:fs/promises";
@@ -3256,17 +3269,203 @@ async function trialGate(payload, deps, signal) {
   return { output: execution.output, plan: gateOutputPlan(task, execution.output, raw.text), usage: execution.usage };
 }
 
+// src/host/pixie-judge.ts
+var TOLERANCE = 0.02;
+var isProbability = (value) => typeof value === "number" && Number.isFinite(value) && value >= 0 && value <= 1;
+var sumsToOne = (values) => Math.abs(values.reduce((sum, value) => sum + value, 0) - 1) <= TOLERANCE;
+function checkAnswer(id, question, raw) {
+  const answer = raw;
+  if (!answer || typeof answer !== "object") throw new Error(`Missing answer for "${id}"`);
+  if (question.type === "choice") {
+    const names3 = Object.keys(question.criteria);
+    const probabilities = answer.probabilities;
+    if (typeof answer.choice !== "string" || !names3.includes(answer.choice)) throw new Error(`Answer "${id}" chose an unknown option`);
+    if (!probabilities || names3.some((name) => !isProbability(probabilities[name])) || Object.keys(probabilities).some((name) => !names3.includes(name))) throw new Error(`Answer "${id}" needs a probability per option`);
+    const values = names3.map((name) => probabilities[name]);
+    if (!sumsToOne(values)) throw new Error(`Answer "${id}" probabilities must sum to 1`);
+    return { type: "choice", choice: answer.choice, probabilities: Object.fromEntries(names3.map((name) => [name, probabilities[name]])), confidence: isProbability(answer.confidence) ? answer.confidence : Math.max(...values) };
+  }
+  if (question.type === "score") {
+    const probabilities = answer.probabilities;
+    const top = question.criteria.length - 1;
+    if (typeof answer.score !== "number" || !Number.isFinite(answer.score) || answer.score < 0 || answer.score > top) throw new Error(`Answer "${id}" score must be within 0..${top}`);
+    if (!Array.isArray(probabilities) || probabilities.length !== question.criteria.length || !probabilities.every(isProbability) || !sumsToOne(probabilities)) throw new Error(`Answer "${id}" needs one probability per level summing to 1`);
+    return { type: "score", score: answer.score, probabilities, confidence: isProbability(answer.confidence) ? answer.confidence : Math.max(...probabilities) };
+  }
+  if (!isProbability(answer.noul)) throw new Error(`Answer "${id}" noul must be a probability in 0..1`);
+  return { type: "noul", noul: answer.noul };
+}
+function parseJudgeOutput(text2, questions) {
+  const fenced = /^```(?:json)?\s*([\s\S]*?)\s*```$/.exec(text2.trim());
+  let parsed;
+  try {
+    parsed = JSON.parse(fenced ? fenced[1] : text2.trim());
+  } catch {
+    throw new Error("Judge model did not return JSON");
+  }
+  const answers = parsed?.answers;
+  if (!answers || typeof answers !== "object") throw new Error("Judge model output has no answers object");
+  return Object.fromEntries(Object.entries(questions).map(([id, question]) => [id, checkAnswer(id, question, answers[id])]));
+}
+var LlmJudgeEngine = class {
+  constructor(llm, model, system = DEFAULT_JUDGE_SYSTEM_PROMPT) {
+    this.llm = llm;
+    this.model = model;
+    this.system = system;
+  }
+  kind = "judge";
+  label = "llm";
+  async judge(request, signal) {
+    let usage;
+    try {
+      const { state, questions } = validateJudgeRequest(request);
+      const prompt = `State:
+${typeof state === "string" ? state : JSON.stringify(state, null, 2)}
+
+Questions:
+${JSON.stringify(questions, null, 2)}`;
+      let text2 = "";
+      let finished = false;
+      for await (const chunk of untilAborted(this.llm.stream({
+        provider: this.model.provider,
+        model: this.model.model,
+        ...this.model.reasoningEffort ? { reasoningEffort: this.model.reasoningEffort } : {},
+        ...this.model.maxTokens ? { maxTokens: this.model.maxTokens } : {},
+        system: this.system,
+        messages: [{ role: "user", content: [{ type: "text", text: prompt }] }],
+        signal
+      }), signal)) {
+        if (chunk.type === "text-delta" && typeof chunk.text === "string") text2 += chunk.text;
+        if (chunk.type === "usage" && chunk.usage && typeof chunk.usage === "object") {
+          const raw = chunk.usage;
+          usage = { inputTokens: typeof raw.inputTokens === "number" ? raw.inputTokens : 0, outputTokens: typeof raw.outputTokens === "number" ? raw.outputTokens : 0 };
+          for (const key of ["cacheReadTokens", "cacheWriteTokens", "reasoningTokens"]) if (typeof raw[key] === "number") usage[key] = raw[key];
+        }
+        if (chunk.type === "finish") {
+          const reason = chunk.reason;
+          if (reason?.kind !== "stop") throw new Error(reason?.failure?.message ?? `Judge model ended with ${reason?.kind ?? "unknown"}`);
+          finished = true;
+        }
+      }
+      signal.throwIfAborted();
+      if (!finished) throw new Error("Judge model stream ended without a finish");
+      return { ok: true, answers: parseJudgeOutput(text2, questions), ...usage ? { usage } : {} };
+    } catch (error) {
+      return { ok: false, error: error instanceof Error ? error.message : String(error), ...usage ? { usage } : {} };
+    }
+  }
+};
+
+// src/host/jev-judge.ts
+var JEV_ENDPOINT = "https://api.typesafe.ai/v1/systemone";
+var JEV_KEY_REF = "TYPESAFE_API_KEY";
+var DEFAULT_JEV_MODEL = "jev-latest";
+var RETRIES = 2;
+var MAX_WAIT_MS = 4e3;
+function fromWire(question, raw) {
+  if (question.type !== "score" || !raw || typeof raw !== "object") return raw;
+  const answer = raw;
+  const probabilities = answer.probabilities;
+  if (!probabilities || typeof probabilities !== "object" || Array.isArray(probabilities)) return raw;
+  const keyed = probabilities;
+  if (Object.keys(keyed).length !== question.criteria.length) return { ...answer, probabilities: void 0 };
+  return { ...answer, probabilities: question.criteria.map((_, index) => keyed[String(index)]) };
+}
+var wait = (ms, signal) => new Promise((resolve6, reject) => {
+  if (signal.aborted) {
+    reject(signal.reason);
+    return;
+  }
+  const timer = setTimeout(() => {
+    signal.removeEventListener("abort", abort);
+    resolve6();
+  }, ms);
+  const abort = () => {
+    clearTimeout(timer);
+    reject(signal.reason);
+  };
+  signal.addEventListener("abort", abort, { once: true });
+});
+function retryDelay(retryAfter, attempt) {
+  const seconds = retryAfter === null ? NaN : Number(retryAfter);
+  return Math.min(Number.isFinite(seconds) && seconds >= 0 ? seconds * 1e3 : 500 * 2 ** attempt, MAX_WAIT_MS);
+}
+var JevJudgeEngine = class {
+  constructor(deps) {
+    this.deps = deps;
+  }
+  kind = "judge";
+  label = "jev";
+  async judge(request, signal) {
+    let usage;
+    try {
+      const { state, questions } = validateJudgeRequest(request);
+      if (!this.deps.credentials) throw new Error("DSH credentials service is unavailable");
+      const key = (await this.deps.credentials.resolve(JEV_KEY_REF))?.value;
+      if (!key) throw new Error(`Jev API key is not configured (${JEV_KEY_REF})`);
+      signal.throwIfAborted();
+      const send2 = this.deps.fetch ?? globalThis.fetch;
+      const body = JSON.stringify({ model: this.deps.model, state, questions });
+      for (let attempt = 0; ; attempt++) {
+        const response = await send2(JEV_ENDPOINT, {
+          method: "POST",
+          signal,
+          body,
+          headers: { authorization: `Bearer ${key}`, "content-type": "application/json" }
+        });
+        const text2 = await response.text();
+        if ((response.status === 429 || response.status === 529) && attempt < RETRIES) {
+          await wait(retryDelay(response.headers.get("retry-after"), attempt), signal);
+          continue;
+        }
+        if (response.status !== 200) throw new Error(`Jev request failed: HTTP ${response.status}${text2 ? `: ${text2.slice(0, 500)}` : ""}`);
+        let parsed;
+        try {
+          parsed = JSON.parse(text2);
+        } catch {
+          throw new Error("Jev response is not JSON");
+        }
+        const raw = parsed.usage;
+        if (raw && typeof raw.input_tokens === "number" && typeof raw.output_tokens === "number") usage = { inputTokens: raw.input_tokens, outputTokens: raw.output_tokens };
+        const answers = parsed.answers;
+        if (!answers || typeof answers !== "object") throw new Error("Jev response has no answers object");
+        const typed = Object.fromEntries(Object.entries(questions).map(([id, question]) => [id, checkAnswer(id, question, fromWire(question, answers[id]))]));
+        return { ok: true, answers: typed, ...usage ? { usage } : {} };
+      }
+    } catch (error) {
+      const message = signal.aborted ? String(signal.reason instanceof Error ? signal.reason.message : signal.reason ?? "aborted") : error instanceof Error ? error.message : String(error);
+      return { ok: false, error: message, ...usage ? { usage } : {} };
+    }
+  }
+};
+function judgeEngineFor(settings, deps) {
+  if (settings.judgeEngine === "jev") return new JevJudgeEngine({ credentials: deps.credentials, model: settings.jevModel ?? DEFAULT_JEV_MODEL, ...deps.fetch ? { fetch: deps.fetch } : {} });
+  const model = settings.judgeModel ?? settings.model;
+  return model ? new LlmJudgeEngine(deps.llm, model, settings.judgeSystemPrompt || void 0) : void 0;
+}
+
 // src/host/pixie-service.ts
 var PRUNE_INTERVAL_MS = 10 * 60 * 1e3;
 var json2 = (payload) => JSON.parse(payload);
+async function credentialWrite(write) {
+  try {
+    await write();
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (/Expected YAML collection at refs\b/.test(message)) throw new Error(`[pixie/credentials-refs] ${message}`);
+    throw error;
+  }
+}
 var llmOf = (ctx) => ctx.get("llm");
-var _models_dec, _saveSettings_dec, _readSettings_dec, _followGates_dec, _resolveGateRejection_dec, _gateRuns_dec, _saveGateDefinitions_dec, _gateDefinitions_dec, _saveGateScriptDirectory_dec, _gateScripts_dec, _trialGate_dec, _follow_dec, _cancel_dec, _ask_dec, _commandTurn_dec, _deleteThread_dec, _activate_dec, _createThread_dec, _view_dec, _a, _init;
-var PixieService = class extends (_a = TypertRemoteService, _view_dec = [Remote], _createThread_dec = [Remote], _activate_dec = [Remote], _deleteThread_dec = [Remote], _commandTurn_dec = [Remote], _ask_dec = [Remote], _cancel_dec = [Remote], _follow_dec = [Remote({ mode: "stream" })], _trialGate_dec = [Remote], _gateScripts_dec = [Remote], _saveGateScriptDirectory_dec = [Remote], _gateDefinitions_dec = [Remote], _saveGateDefinitions_dec = [Remote], _gateRuns_dec = [Remote], _resolveGateRejection_dec = [Remote], _followGates_dec = [Remote({ mode: "stream" })], _readSettings_dec = [Remote], _saveSettings_dec = [Remote], _models_dec = [Remote], _a) {
+var _models_dec, _deleteJevKey_dec, _saveJevKey_dec, _jevKeyStatus_dec, _saveSettings_dec, _readSettings_dec, _followGates_dec, _setSessionGate_dec, _sessionGates_dec, _resolveGateRejection_dec, _gateRuns_dec, _saveGateDefinitions_dec, _gateDefinitions_dec, _saveGateScriptDirectory_dec, _gateScripts_dec, _trialGate_dec, _follow_dec, _cancel_dec, _ask_dec, _commandTurn_dec, _deleteThread_dec, _activate_dec, _createThread_dec, _view_dec, _a, _init;
+var PixieService = class extends (_a = TypertRemoteService, _view_dec = [Remote], _createThread_dec = [Remote], _activate_dec = [Remote], _deleteThread_dec = [Remote], _commandTurn_dec = [Remote], _ask_dec = [Remote], _cancel_dec = [Remote], _follow_dec = [Remote({ mode: "stream" })], _trialGate_dec = [Remote], _gateScripts_dec = [Remote], _saveGateScriptDirectory_dec = [Remote], _gateDefinitions_dec = [Remote], _saveGateDefinitions_dec = [Remote], _gateRuns_dec = [Remote], _resolveGateRejection_dec = [Remote], _sessionGates_dec = [Remote], _setSessionGate_dec = [Remote], _followGates_dec = [Remote({ mode: "stream" })], _readSettings_dec = [Remote], _saveSettings_dec = [Remote], _jevKeyStatus_dec = [Remote], _saveJevKey_dec = [Remote], _deleteJevKey_dec = [Remote], _models_dec = [Remote], _a) {
   constructor(ctx, dataDir) {
     super(ctx, "studioPixie");
     __runInitializers(_init, 5, this);
     __publicField(this, "defaultScriptDirectory");
     __publicField(this, "gateSettings");
+    /** Optional: the DSH credentials service, read per call so a later mount applies. */
+    __publicField(this, "credentials", () => this.ctx.get("credentials"));
     __publicField(this, "scriptSupported", () => process.platform !== "win32" && !!this.ctx.get("shell"));
     __publicField(this, "store");
     __publicField(this, "settings");
@@ -3297,6 +3496,7 @@ var PixieService = class extends (_a = TypertRemoteService, _view_dec = [Remote]
     });
     const gateDeps = {
       definitions: () => this.definitions.read(),
+      disabledGates: (sessionId) => this.gates.disabledGates(sessionId),
       warn: (message) => ctx.logger.warn(message),
       preset: (agent) => ctx.get("agentPresets")?.composedPreset(agent.ctx),
       isRoot: (agent) => ctx.get("agents")?.roots().some((root) => root.id === agent.id) ?? false,
@@ -3312,14 +3512,17 @@ var PixieService = class extends (_a = TypertRemoteService, _view_dec = [Remote]
         };
       },
       runner: async () => {
-        const [{ model }, scriptDirectory] = await Promise.all([this.settings.read(), this.scriptDirectory()]);
+        const [settings, scriptDirectory] = await Promise.all([this.settings.read(), this.scriptDirectory()]);
+        const llm = { stream: (options) => llmOf(ctx).stream(options) };
+        const judge = judgeEngineFor(settings, { llm, credentials: this.credentials() });
         return new GateTaskRunner({
           scriptDirectory,
           scriptSupported: this.scriptSupported(),
           shell: ctx.get("shell"),
           helper: this.helper,
-          llm: { stream: (options) => llmOf(ctx).stream(options) },
-          ...model ? { model } : {}
+          llm,
+          ...settings.model ? { model: settings.model } : {},
+          ...judge ? { judge } : {}
         });
       },
       recorder: this.gates,
@@ -3469,6 +3672,24 @@ var PixieService = class extends (_a = TypertRemoteService, _view_dec = [Remote]
   async resolveGateRejection(sessionId, runId, status) {
     return this.gates.resolveRejection(sessionId, runId, status);
   }
+  async sessionGates(sessionId) {
+    const agent = this.ctx.get("agents")?.get(sessionId);
+    const preset = agent ? this.ctx.get("agentPresets")?.composedPreset(agent.ctx) : void 0;
+    if (!preset) return { gates: [] };
+    const [read, disabled] = await Promise.all([this.definitions.read(), this.gates.disabledGates(sessionId)]);
+    const off = new Set(disabled);
+    return { preset, gates: read.entries.filter((task) => enabledFor(task, preset)).map((task) => ({
+      id: task.id,
+      name: task.name,
+      when: task.when,
+      ...task.advanced.script ? { script: task.advanced.script } : {},
+      sessionEnabled: !off.has(task.id)
+    })) };
+  }
+  async setSessionGate(sessionId, gateId, enabled) {
+    if (typeof enabled !== "boolean") throw new Error("enabled must be a boolean");
+    return this.gates.setGateEnabled(sessionId, gateId, enabled);
+  }
   async *followGates(sessionId, signal) {
     yield* this.gates.follow(sessionId, signal);
   }
@@ -3478,6 +3699,26 @@ var PixieService = class extends (_a = TypertRemoteService, _view_dec = [Remote]
   async saveSettings(payload) {
     return this.settings.save(json2(payload));
   }
+  async jevKeyStatus() {
+    const credentials = this.credentials();
+    if (!credentials) return { available: false, configured: false, writable: false };
+    const info = await credentials.describe(JEV_KEY_REF);
+    return { available: true, configured: info.configured, writable: info.writable, ...info.source ? { source: info.source } : {} };
+  }
+  async saveJevKey(payload) {
+    const value = json2(payload).value;
+    if (typeof value !== "string" || !value.trim()) throw new Error("Jev API key is required");
+    const credentials = this.credentials();
+    if (!credentials) throw new Error("DSH credentials service is unavailable");
+    await credentialWrite(() => credentials.set(JEV_KEY_REF, value.trim()));
+    return this.jevKeyStatus();
+  }
+  async deleteJevKey() {
+    const credentials = this.credentials();
+    if (!credentials) throw new Error("DSH credentials service is unavailable");
+    await credentialWrite(() => credentials.unset(JEV_KEY_REF));
+    return this.jevKeyStatus();
+  }
   async models() {
     return this.ctx.get("sessionController").modelCatalog();
   }
@@ -3498,16 +3739,91 @@ __decorateElement(_init, 1, "gateDefinitions", _gateDefinitions_dec, PixieServic
 __decorateElement(_init, 1, "saveGateDefinitions", _saveGateDefinitions_dec, PixieService);
 __decorateElement(_init, 1, "gateRuns", _gateRuns_dec, PixieService);
 __decorateElement(_init, 1, "resolveGateRejection", _resolveGateRejection_dec, PixieService);
+__decorateElement(_init, 1, "sessionGates", _sessionGates_dec, PixieService);
+__decorateElement(_init, 1, "setSessionGate", _setSessionGate_dec, PixieService);
 __decorateElement(_init, 1, "followGates", _followGates_dec, PixieService);
 __decorateElement(_init, 1, "readSettings", _readSettings_dec, PixieService);
 __decorateElement(_init, 1, "saveSettings", _saveSettings_dec, PixieService);
+__decorateElement(_init, 1, "jevKeyStatus", _jevKeyStatus_dec, PixieService);
+__decorateElement(_init, 1, "saveJevKey", _saveJevKey_dec, PixieService);
+__decorateElement(_init, 1, "deleteJevKey", _deleteJevKey_dec, PixieService);
 __decorateElement(_init, 1, "models", _models_dec, PixieService);
 __decoratorMetadata(_init, PixieService);
 __publicField(PixieService, "inject", ["llm", "sessionController", "commands"]);
 
+// src/host/skill-install.ts
+import { createHash as createHash2 } from "node:crypto";
+import { mkdir as mkdir8, readFile as readFile8, rename as rename8, writeFile as writeFile8 } from "node:fs/promises";
+import { join as join7 } from "node:path";
+var MARKER = "studio-managed";
+var MANIFEST = ".studio-managed.json";
+var digest = (text2) => createHash2("sha256").update(text2).digest("hex");
+async function installSkill(skillsRoot, skill) {
+  const directory = join7(skillsRoot, skill.name);
+  await mkdir8(directory, { recursive: true });
+  const manifestPath = join7(directory, MANIFEST);
+  let recorded = {};
+  try {
+    const parsed = JSON.parse(await readFile8(manifestPath, "utf8"));
+    if (parsed.kind === MARKER && parsed.files && typeof parsed.files === "object") recorded = parsed.files;
+  } catch {
+  }
+  const results = {};
+  const next = {};
+  for (const [relative, content] of Object.entries(skill.files)) {
+    const path = join7(directory, relative);
+    const wanted = digest(content);
+    let current;
+    try {
+      current = digest(await readFile8(path, "utf8"));
+    } catch {
+      current = void 0;
+    }
+    if (current === wanted) {
+      results[relative] = "current";
+      next[relative] = wanted;
+      continue;
+    }
+    if (current !== void 0 && current !== recorded[relative]) {
+      results[relative] = "kept-user-edit";
+      continue;
+    }
+    const temporary2 = `${path}.${process.pid}.tmp`;
+    await writeFile8(temporary2, content);
+    await rename8(temporary2, path);
+    results[relative] = "installed";
+    next[relative] = wanted;
+  }
+  const temporary = `${manifestPath}.${process.pid}.tmp`;
+  await writeFile8(temporary, `${JSON.stringify({ kind: MARKER, files: next }, null, 2)}
+`);
+  await rename8(temporary, manifestPath);
+  return results;
+}
+
+// src/host/pixie-hook-skill.ts
+import { readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+function pixieHookSkill() {
+  const name = "studio-pixie-hook-guide";
+  const read = (packaged, source) => {
+    for (const candidate of [new URL(packaged, import.meta.url), new URL(source, import.meta.url), new URL(source.replace("release/docs/", "docs/"), import.meta.url)]) {
+      try {
+        return readFileSync(fileURLToPath(candidate), "utf8");
+      } catch {
+      }
+    }
+    throw new Error(`Studio skill file missing: ${packaged}`);
+  };
+  return { name, files: {
+    "SKILL.md": read(`./skills/${name}/SKILL.md`, "../../release/docs/appendix/studio-pixie-hook-guide/SKILL.md"),
+    "guide.md": read(`./skills/${name}/guide.md`, "../../release/docs/appendix/pixie-gate.md")
+  } };
+}
+
 // src/host/catalog-baseline.ts
 import { randomUUID as randomUUID11 } from "node:crypto";
-import { mkdir as mkdir8, readFile as readFile8, rename as rename8, unlink as unlink2, writeFile as writeFile8 } from "node:fs/promises";
+import { mkdir as mkdir9, readFile as readFile9, rename as rename9, unlink as unlink2, writeFile as writeFile9 } from "node:fs/promises";
 import { dirname as dirname7, resolve as resolve5 } from "node:path";
 var valid = (value) => {
   if (!value || typeof value !== "object") return false;
@@ -3524,7 +3840,7 @@ var CatalogBaseline = class {
     await this.tail;
     let content;
     try {
-      content = await readFile8(this.file, "utf8");
+      content = await readFile9(this.file, "utf8");
     } catch (error) {
       if (error.code === "ENOENT") return void 0;
       throw error;
@@ -3536,11 +3852,11 @@ var CatalogBaseline = class {
   save(snapshot) {
     const content = JSON.stringify(snapshot, null, 2);
     const operation = this.tail.then(async () => {
-      await mkdir8(dirname7(this.file), { recursive: true, mode: 448 });
+      await mkdir9(dirname7(this.file), { recursive: true, mode: 448 });
       const temp = `${this.file}.${randomUUID11()}.tmp`;
       try {
-        await writeFile8(temp, content, { mode: 384, flag: "wx" });
-        await rename8(temp, this.file);
+        await writeFile9(temp, content, { mode: 384, flag: "wx" });
+        await rename9(temp, this.file);
       } finally {
         await unlink2(temp).catch(() => {
         });
@@ -3582,10 +3898,18 @@ var StudioCatalog = class extends (_a2 = TypertRemoteService2, _listPresets_dec
     /** The newest complete collection and what it changes against the confirmed baseline. */
     __publicField(this, "pending");
     const storePath = studioStorePath(process.env, ctx.get("profileContext"));
-    this.extensions = new MasterExtensions(join7(dirname8(storePath), "master-extensions.json"));
-    this.baseline = new CatalogBaseline(join7(dirname8(storePath), "catalog-snapshot.json"));
+    this.extensions = new MasterExtensions(join8(dirname8(storePath), "master-extensions.json"));
+    this.baseline = new CatalogBaseline(join8(dirname8(storePath), "catalog-snapshot.json"));
     this.store = new PresetStore(ctx, storePath);
     ctx.plugin(PixieService, dirname8(storePath));
+    const home = ctx.get("profileContext")?.home;
+    if (home) void Promise.resolve().then(() => {
+      const skill = pixieHookSkill();
+      return installSkill(join8(home, "skills"), skill).then((results) => {
+        const kept = Object.entries(results).filter(([, result]) => result === "kept-user-edit").map(([file]) => file);
+        if (kept.length) ctx.logger?.info?.(`studio: kept user-edited ${skill.name}/${kept.join(", ")}`);
+      });
+    }).catch((error) => ctx.logger?.warn?.(`studio: skill install skipped: ${String(error)}`));
     this.snapshot = new Promise((resolve6) => {
       setImmediate(resolve6);
     }).then(() => this.capture());