@rosthq/cli 0.5.18 → 0.5.19

package/dist/index.js

@@ -472,13 +472,13 @@ function __disposeResources(env) {
   }
   return next();
 }
-function __rewriteRelativeImportExtension(path2, preserveJsx) {
-  if (typeof path2 === "string" && /^\.\.?\//.test(path2)) {
-    return path2.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function(m, tsx, d, ext, cm) {
+function __rewriteRelativeImportExtension(path3, preserveJsx) {
+  if (typeof path3 === "string" && /^\.\.?\//.test(path3)) {
+    return path3.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function(m, tsx, d, ext, cm) {
       return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : d + ext + "." + cm.toLowerCase() + "js";
     });
   }
-  return path2;
+  return path3;
 }
 var extendStatics, __assign, __createBinding, __setModuleDefault, ownKeys, _SuppressedError, tslib_es6_default;
 var init_tslib_es6 = __esm({
@@ -14026,10 +14026,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path2) {
-  if (!path2)
+function getElementAtPath(obj, path3) {
+  if (!path3)
     return obj;
-  return path2.reduce((acc, key) => acc?.[key], obj);
+  return path3.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -14438,11 +14438,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path2, issues) {
+function prefixIssues(path3, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path2);
+    iss.path.unshift(path3);
     return iss;
   });
 }
@@ -14589,16 +14589,16 @@ function flattenError(error51, mapper = (issue2) => issue2.message) {
 }
 function formatError(error51, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error52, path2 = []) => {
+  const processError = (error52, path3 = []) => {
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path2, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path3, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path2, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path3, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path2, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path3, ...issue2.path]);
       } else {
-        const fullpath = [...path2, ...issue2.path];
+        const fullpath = [...path3, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -14625,17 +14625,17 @@ function formatError(error51, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error51, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error52, path2 = []) => {
+  const processError = (error52, path3 = []) => {
     var _a3, _b;
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path2, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path3, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path2, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path3, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path2, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path3, ...issue2.path]);
       } else {
-        const fullpath = [...path2, ...issue2.path];
+        const fullpath = [...path3, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -14667,8 +14667,8 @@ function treeifyError(error51, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path2 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path2) {
+  const path3 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path3) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -27360,13 +27360,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path2 = ref.slice(1).split("/").filter(Boolean);
-  if (path2.length === 0) {
+  const path3 = ref.slice(1).split("/").filter(Boolean);
+  if (path3.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path2[0] === defsKey) {
-    const key = path2[1];
+  if (path3[0] === defsKey) {
+    const key = path3[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -27828,7 +27828,7 @@ var CommandClient = class {
     this.fetchImpl = options.fetchImpl ?? fetch;
   }
   async execute(commandId, body = {}, options = {}) {
-    const path2 = `/api/commands/${encodeURIComponent(commandId)}`;
+    const path3 = `/api/commands/${encodeURIComponent(commandId)}`;
     const headers = {
       authorization: `Bearer ${this.token}`,
       "content-type": "application/json"
@@ -27836,7 +27836,7 @@ var CommandClient = class {
     if (options.targetSeatId !== void 0 && options.targetSeatId.length > 0) {
       headers["x-rost-seat"] = options.targetSeatId;
     }
-    const response = await this.fetchImpl(`${this.appUrl}${path2}`, {
+    const response = await this.fetchImpl(`${this.appUrl}${path3}`, {
       method: "POST",
       headers,
       body: JSON.stringify(body)
@@ -27849,7 +27849,7 @@ var CommandClient = class {
       const snippet = redactSecrets(text.replace(/\s+/g, " ").trim()).slice(0, 200);
       throw new CommandClientError(
         response.status,
-        `server returned HTTP ${response.status} (non-JSON) from ${path2}` + (snippet ? ` \u2014 ${snippet}` : "") + " \u2014 the deployment may be unhealthy"
+        `server returned HTTP ${response.status} (non-JSON) from ${path3}` + (snippet ? ` \u2014 ${snippet}` : "") + " \u2014 the deployment may be unhealthy"
       );
     }
     const parsed = commandResponseSchema.parse(raw);
@@ -33056,8 +33056,8 @@ var IcebergError = class extends Error {
     return this.status === 419;
   }
 };
-function buildUrl(baseUrl, path2, query) {
-  const url2 = new URL(path2, baseUrl);
+function buildUrl(baseUrl, path3, query) {
+  const url2 = new URL(path3, baseUrl);
   if (query) {
     for (const [key, value] of Object.entries(query)) {
       if (value !== void 0) {
@@ -33087,12 +33087,12 @@ function createFetchClient(options) {
   return {
     async request({
       method,
-      path: path2,
+      path: path3,
       query,
       body,
       headers
     }) {
-      const url2 = buildUrl(options.baseUrl, path2, query);
+      const url2 = buildUrl(options.baseUrl, path3, query);
       const authHeaders = await buildAuthHeaders(options.auth);
       const res = await fetchFn(url2, {
         method,
@@ -33954,7 +33954,7 @@ var StorageFileApi = class extends BaseApiClient {
   * @param path The relative file path. Should be of the format `folder/subfolder/filename.png`. The bucket must already exist before attempting to upload.
   * @param fileBody The body of the file to be stored in the bucket.
   */
-  async uploadOrUpdate(method, path2, fileBody, fileOptions) {
+  async uploadOrUpdate(method, path3, fileBody, fileOptions) {
     var _this = this;
     return _this.handleOperation(async () => {
       let body;
@@ -33978,7 +33978,7 @@ var StorageFileApi = class extends BaseApiClient {
         if ((typeof ReadableStream !== "undefined" && body instanceof ReadableStream || body && typeof body === "object" && "pipe" in body && typeof body.pipe === "function") && !options.duplex) options.duplex = "half";
       }
       if (fileOptions === null || fileOptions === void 0 ? void 0 : fileOptions.headers) for (const [key, value] of Object.entries(fileOptions.headers)) headers = setHeader(headers, key, value);
-      const cleanPath = _this._removeEmptyFolders(path2);
+      const cleanPath = _this._removeEmptyFolders(path3);
       const _path = _this._getFinalPath(cleanPath);
       const data = await (method == "PUT" ? put : post)(_this.fetch, `${_this.url}/object/${_path}`, body, _objectSpread22({ headers }, (options === null || options === void 0 ? void 0 : options.duplex) ? { duplex: options.duplex } : {}));
       return {
@@ -34055,8 +34055,8 @@ var StorageFileApi = class extends BaseApiClient {
   * - Refer to the [Storage guide](/docs/guides/storage/security/access-control) on how access control works
   * - For React Native, using either `Blob`, `File` or `FormData` does not work as intended. Upload file using `ArrayBuffer` from base64 file data instead, see example below.
   */
-  async upload(path2, fileBody, fileOptions) {
-    return this.uploadOrUpdate("POST", path2, fileBody, fileOptions);
+  async upload(path3, fileBody, fileOptions) {
+    return this.uploadOrUpdate("POST", path3, fileBody, fileOptions);
   }
   /**
   * Upload a file with a token generated from `createSignedUploadUrl`.
@@ -34096,9 +34096,9 @@ var StorageFileApi = class extends BaseApiClient {
   *   - `objects` table permissions: none
   * - Refer to the [Storage guide](/docs/guides/storage/security/access-control) on how access control works
   */
-  async uploadToSignedUrl(path2, token, fileBody, fileOptions) {
+  async uploadToSignedUrl(path3, token, fileBody, fileOptions) {
     var _this3 = this;
-    const cleanPath = _this3._removeEmptyFolders(path2);
+    const cleanPath = _this3._removeEmptyFolders(path3);
     const _path = _this3._getFinalPath(cleanPath);
     const url2 = new URL(_this3.url + `/object/upload/sign/${_path}`);
     url2.searchParams.set("token", token);
@@ -34167,10 +34167,10 @@ var StorageFileApi = class extends BaseApiClient {
   *   - `objects` table permissions: `insert`
   * - Refer to the [Storage guide](/docs/guides/storage/security/access-control) on how access control works
   */
-  async createSignedUploadUrl(path2, options) {
+  async createSignedUploadUrl(path3, options) {
     var _this4 = this;
     return _this4.handleOperation(async () => {
-      let _path = _this4._getFinalPath(path2);
+      let _path = _this4._getFinalPath(path3);
       const headers = _objectSpread22({}, _this4.headers);
       if (options === null || options === void 0 ? void 0 : options.upsert) headers["x-upsert"] = "true";
       const data = await post(_this4.fetch, `${_this4.url}/object/upload/sign/${_path}`, {}, { headers });
@@ -34179,7 +34179,7 @@ var StorageFileApi = class extends BaseApiClient {
       if (!token) throw new StorageError("No token returned by API");
       return {
         signedUrl: url2.toString(),
-        path: path2,
+        path: path3,
         token
       };
     });
@@ -34239,8 +34239,8 @@ var StorageFileApi = class extends BaseApiClient {
   * - Refer to the [Storage guide](/docs/guides/storage/security/access-control) on how access control works
   * - For React Native, using either `Blob`, `File` or `FormData` does not work as intended. Update file using `ArrayBuffer` from base64 file data instead, see example below.
   */
-  async update(path2, fileBody, fileOptions) {
-    return this.uploadOrUpdate("PUT", path2, fileBody, fileOptions);
+  async update(path3, fileBody, fileOptions) {
+    return this.uploadOrUpdate("PUT", path3, fileBody, fileOptions);
   }
   /**
   * Moves an existing file to a new path in the same bucket.
@@ -34391,10 +34391,10 @@ var StorageFileApi = class extends BaseApiClient {
   *   - `objects` table permissions: `select`
   * - Refer to the [Storage guide](/docs/guides/storage/security/access-control) on how access control works
   */
-  async createSignedUrl(path2, expiresIn, options) {
+  async createSignedUrl(path3, expiresIn, options) {
     var _this8 = this;
     return _this8.handleOperation(async () => {
-      let _path = _this8._getFinalPath(path2);
+      let _path = _this8._getFinalPath(path3);
       const hasTransform = typeof (options === null || options === void 0 ? void 0 : options.transform) === "object" && options.transform !== null && Object.keys(options.transform).length > 0;
       let data = await post(_this8.fetch, `${_this8.url}/object/sign/${_path}`, _objectSpread22({ expiresIn }, hasTransform ? { transform: options.transform } : {}), { headers: _this8.headers });
       const query = new URLSearchParams();
@@ -34530,13 +34530,13 @@ var StorageFileApi = class extends BaseApiClient {
   *   - `objects` table permissions: `select`
   * - Refer to the [Storage guide](/docs/guides/storage/security/access-control) on how access control works
   */
-  download(path2, options, parameters) {
+  download(path3, options, parameters) {
     const renderPath = typeof (options === null || options === void 0 ? void 0 : options.transform) === "object" && options.transform !== null && Object.keys(options.transform).length > 0 ? "render/image/authenticated" : "object";
     const query = new URLSearchParams();
     if (options === null || options === void 0 ? void 0 : options.transform) this.applyTransformOptsToQuery(query, options.transform);
     if ((options === null || options === void 0 ? void 0 : options.cacheNonce) != null) query.set("cacheNonce", String(options.cacheNonce));
     const queryString = query.toString();
-    const _path = this._getFinalPath(path2);
+    const _path = this._getFinalPath(path3);
     const downloadFn = () => get(this.fetch, `${this.url}/${renderPath}/${_path}${queryString ? `?${queryString}` : ""}`, {
       headers: this.headers,
       noResolveJson: true
@@ -34567,9 +34567,9 @@ var StorageFileApi = class extends BaseApiClient {
   * }
   * ```
   */
-  async info(path2) {
+  async info(path3) {
     var _this10 = this;
-    const _path = _this10._getFinalPath(path2);
+    const _path = _this10._getFinalPath(path3);
     return _this10.handleOperation(async () => {
       return recursiveToCamel(await get(_this10.fetch, `${_this10.url}/object/info/${_path}`, { headers: _this10.headers }));
     });
@@ -34590,9 +34590,9 @@ var StorageFileApi = class extends BaseApiClient {
   *   .exists('folder/avatar1.png')
   * ```
   */
-  async exists(path2) {
+  async exists(path3) {
     var _this11 = this;
-    const _path = _this11._getFinalPath(path2);
+    const _path = _this11._getFinalPath(path3);
     try {
       await head(_this11.fetch, `${_this11.url}/object/${_path}`, { headers: _this11.headers });
       return {
@@ -34671,8 +34671,8 @@ var StorageFileApi = class extends BaseApiClient {
   *   - `objects` table permissions: none
   * - Refer to the [Storage guide](/docs/guides/storage/security/access-control) on how access control works
   */
-  getPublicUrl(path2, options) {
-    const _path = this._getFinalPath(path2);
+  getPublicUrl(path3, options) {
+    const _path = this._getFinalPath(path3);
     const query = new URLSearchParams();
     if (options === null || options === void 0 ? void 0 : options.download) query.set("download", options.download === true ? "" : options.download);
     if (options === null || options === void 0 ? void 0 : options.transform) this.applyTransformOptsToQuery(query, options.transform);
@@ -34811,10 +34811,10 @@ var StorageFileApi = class extends BaseApiClient {
   *   - `objects` table permissions: `select`
   * - Refer to the [Storage guide](/docs/guides/storage/security/access-control) on how access control works
   */
-  async list(path2, options, parameters) {
+  async list(path3, options, parameters) {
     var _this13 = this;
     return _this13.handleOperation(async () => {
-      const body = _objectSpread22(_objectSpread22(_objectSpread22({}, DEFAULT_SEARCH_OPTIONS), options), {}, { prefix: path2 || "" });
+      const body = _objectSpread22(_objectSpread22(_objectSpread22({}, DEFAULT_SEARCH_OPTIONS), options), {}, { prefix: path3 || "" });
       return await post(_this13.fetch, `${_this13.url}/object/list/${_this13.bucketId}`, body, { headers: _this13.headers }, parameters);
     });
   }
@@ -34879,11 +34879,11 @@ var StorageFileApi = class extends BaseApiClient {
     if (typeof Buffer !== "undefined") return Buffer.from(data).toString("base64");
     return btoa(data);
   }
-  _getFinalPath(path2) {
-    return `${this.bucketId}/${path2.replace(/^\/+/, "")}`;
+  _getFinalPath(path3) {
+    return `${this.bucketId}/${path3.replace(/^\/+/, "")}`;
   }
-  _removeEmptyFolders(path2) {
-    return path2.replace(/^\/|\/$/g, "").replace(/\/+/g, "/");
+  _removeEmptyFolders(path3) {
+    return path3.replace(/^\/|\/$/g, "").replace(/\/+/g, "/");
   }
   /** Modifies the `query`, appending values the from `transform` */
   applyTransformOptsToQuery(query, transform2) {
@@ -37920,8 +37920,8 @@ function getErrorMap2() {
 
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
-  const { data, path: path2, errorMaps, issueData } = params;
-  const fullPath = [...path2, ...issueData.path || []];
+  const { data, path: path3, errorMaps, issueData } = params;
+  const fullPath = [...path3, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -38037,11 +38037,11 @@ var errorUtil;
 
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
-  constructor(parent, value, path2, key) {
+  constructor(parent, value, path3, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path2;
+    this._path = path3;
     this._key = key;
   }
   get path() {
@@ -41830,7 +41830,7 @@ Drafting can be assisted by agents. Activation is a human decision. When authori
     order: 40,
     title: "Agent staffing playbook",
     summary: "How to decide whether a seat should be human, agent, or hybrid, and how to go live safely.",
-    version: "2026-06-20.1",
+    version: "2026-06-21.2",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["staffing"],
@@ -41889,7 +41889,7 @@ Two creation paths, both draft-first. Read the stock-agents guide for templates
 - Custom: \`agent_setup.start\` / \`rost_start_agent_setup\` (returns a \`setup_id\`), iterate with \`agent_setup.get\` and \`agent_setup.update\`, then \`agent.create_custom\` / \`rost_create_custom_agent\`. Stage tools with \`agent.configure_tools\` (vault refs only) and sandbox with \`agent.run_dry_run\`.
 - Inspect runtime: \`agent.status\` / \`rost_get_agent_status\` with \`{"seat_id":"<seat-id>"}\` returns lane, live state, steward chain, dry-run result, and Runner availability.
 - Run on demand: \`{{cli}} agent run-now --seat-id <seat-id>\` / \`agent.run_now\` / \`rost_run_agent_now\` queues an immediate live run without changing the saved schedule. Cloud agents dispatch to the Inngest executor; runner agents queue work for the paired runner. The command is ungated but still requires a live staffed agent and the normal server-side tool guard.
-- Audit what an agent did (Trust Card): \`{{cli}} command agent.list_runs --json '{"seat_id":"<seat-id>"}'\` / \`rost_list_agent_runs\` returns the seat's run history with per-run tool-call and guard-held counts; \`{{cli}} agent get-run --seat-id <seat-id> --run-id <run-id>\` / \`agent.get_run\` / \`rost_get_agent_run_diagnostics\` reads one run's transcript reference, token/cost usage, outcome, and product-visible run errors; \`{{cli}} command agent.list_tool_calls --json '{"seat_id":"<seat-id>"}'\` / \`rost_list_agent_tool_calls\` returns the tool-call ledger with each call's guard result. Both list commands include a \`denied_tool_call_count\` rollup \u2014 the actions held because they exceeded the charter. Pass \`{"seat_id":"<seat-id>","held_only":true}\` to \`agent.list_tool_calls\` for only the held calls. The web seat page shows the same facts as a Trust Card.
+- Audit what an agent did (Trust Card): \`{{cli}} command agent.list_runs --json '{"seat_id":"<seat-id>"}'\` / \`rost_list_agent_runs\` returns the seat's run history with per-run Skill activation counts plus tool-call and guard-held counts; \`{{cli}} agent get-run --seat-id <seat-id> --run-id <run-id>\` / \`agent.get_run\` / \`rost_get_agent_run_diagnostics\` reads one run's transcript reference, token/cost usage, outcome, product-visible run errors, and any Skill versions/files loaded for that run. Loaded Skill file hashes and sizes identify the immutable source package; the runtime may still bound or truncate prompt text before sending it to the model. \`{{cli}} command agent.list_tool_calls --json '{"seat_id":"<seat-id>"}'\` / \`rost_list_agent_tool_calls\` returns the tool-call ledger with each call's guard result. Both list commands include a \`denied_tool_call_count\` rollup \u2014 the actions held because they exceeded the charter. Pass \`{"seat_id":"<seat-id>","held_only":true}\` to \`agent.list_tool_calls\` for only the held calls. The web seat page shows the same facts as a Trust Card.
 
 ## Review readiness before go-live
 
@@ -41910,7 +41910,7 @@ No orphan agents. No raw secrets in prompts, logs, or tool arguments. No durable
     order: 41,
     title: "Add agents to your Responsibility Graph",
     summary: "The visual journey for adding an agent seat: where to start, choosing a mode, placing the seat, naming a Steward, setup, the safety gates, and go-live.",
-    version: "2026-06-20.1",
+    version: "2026-06-21.1",
     public: true,
     audiences: ["human", "in_app_agent"],
     stages: ["staffing"],
@@ -41959,10 +41959,11 @@ The wizard builds a teammate, not a prompt:
 
 1. **Responsibilities and authority** \u2014 what the seat owns, what it may do alone, what needs approval, and what must escalate. Every clause is editable before sign-off.
 2. **Signals** \u2014 the measurables the seat is judged on.
-3. **Tools** \u2014 connect or decline each proposed tool. Declining a tool updates the permission manifest and the dry-run task so the agent stays safe. Credentials go in through write-only credential ingress and are stored as vault references, never shown again.
-4. **Schedule and lane** \u2014 when the agent runs and on which lane. These stay advanced unless the mode needs them.
+3. **Skills** \u2014 pin published, immutable Skill versions that the agent should carry. Skills are procedures, not authority: selecting one creates a proposed assignment and surfaces required/optional tool dependencies before sign-off.
+4. **Tools** \u2014 connect or decline each proposed tool. Declining a tool updates the permission manifest and the dry-run task so the agent stays safe. Credentials go in through write-only credential ingress and are stored as vault references, never shown again. Missing required Skill tools block sign-off, dry-run, and go-live until resolved; missing optional Skill tools warn without blocking.
+5. **Schedule and lane** \u2014 when the agent runs and on which lane. These stay advanced unless the mode needs them.
 
-You can save and resume a draft setup at any point. Returning to the flow restores the parent, Steward, mode, answers, tool decisions, and dry-run result.
+You can save and resume a draft setup at any point. Returning to the flow restores the parent, Steward, mode, answers, Skill selections, tool decisions, and dry-run result.
 
 ## The safety gates
 
@@ -42139,7 +42140,7 @@ Decisions should be recorded as human decisions. Handoffs should attach to seats
     order: 45,
     title: "How agents work",
     summary: "How {{brand}} agents operate inside seats, use Charters, report work, and escalate beyond authority.",
-    version: "2026-06-20.4",
+    version: "2026-06-21.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["staffing", "operating_rhythm"],
@@ -42231,7 +42232,7 @@ Before an agent goes live, the sandbox dry run rehearses this against fake data
 
 ## What humans should review
 
-The Agents page shows fleet health first: live state, recent runs, failed runs, open held actions, last activity, cost, and the next operator action. It also shows configuration completeness for each staffed agent seat: Steward chain, lane or runtime substrate, vaulted credentials, granted tools, model config, sandbox dry run, and go-live state, each with a remediation link when incomplete. A seat's Trust Card drills into the same facts: run history, one-run detail, tool-call outcomes, product-visible errors, transcript references, and held confirmations or escalations. Open confirmations stay visible until they are decided or expire, even when they are older than the default activity window. Approving or rejecting a held confirmation from the seat page is scoped to that seat; rejection can include a short reason.
+The Agents page shows fleet health first: live state, recent runs, failed runs, open held actions, last activity, cost, and the next operator action. It also shows configuration completeness for each staffed agent seat: Steward chain, lane or runtime substrate, vaulted credentials, granted tools, model config, sandbox dry run, and go-live state, each with a remediation link when incomplete. A seat's Trust Card drills into the same facts: run history, one-run detail, tool-call outcomes, product-visible errors, transcript references, loaded Skill versions, and held confirmations or escalations. Open confirmations stay visible until they are decided or expire, even when they are older than the default activity window. Approving or rejecting a held confirmation from the seat page is scoped to that seat; rejection can include a short reason.
 
 Review the first dry runs, fleet overview, tool-call audit rows, escalations, deliverables, and Signal impact. A seat's completed-work area combines explicit deliverables, work-log evidence, and successful run summaries into one operator-facing trail with safe links labelled as internal, Linear, GitHub, or external. The fleet view at \`/agents\` shows every staffed agent seat at a glance; the agent-native equivalents are \`{{cli}} command agent.list_fleet --json '{}'\` / \`rost_list_agent_fleet\` for the compact overview, and \`{{cli}} agent fleet-digest --json\` / \`agent.fleet_digest\` / \`rost_get_dogfood_fleet_health_digest\` for the daily dogfood evidence bundle. The digest returns live/idle state, 24h/7d turns, 7d/30d spend, recent failed runs, unresolved product errors, failed notifications, and a next action per seat. Fleet real-turn counts use the same seat-run association as \`agent.list_runs\`, filtered to real runs. Scheduled agents are checked in rounded five-minute buckets, so a minute-level cron inside the bucket queues one work order for that bucket rather than one order per minute. Sandbox dry runs do not count as real turns. If the agent is repeatedly blocked, revise the Charter or split the seat. If the agent is taking too much judgment, narrow its autonomous scope.`
   },
@@ -42378,7 +42379,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-06-20.12",
+    version: "2026-06-21.5",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -42784,6 +42785,8 @@ Ergonomic subcommands for everyday operation. Each wrapper is sugar over the sam
 
 These ergonomic wrappers (including the \`{{cli}} agent\` group) require **{{cli}} 0.2.0 or newer** \u2014 run \`npx {{cliPackage}}@latest \u2026\` to get them. Older versions can still reach every command through the \`{{cli}} command <id> --json\` floor, since command execution is server-side.
 
+The signed-in app exposes the same Skill command surface under **Skills** in the left sidebar. Use \`/skills\` to filter the tenant library, \`/skills/new\` to build canonical \`SKILL.md\` frontmatter with \`tool.catalog\` dependencies, \`/skills/import\` for bounded GitHub or upload imports, and each Skill detail page to review validation, publish, check Seat dependencies, and assign a published version. During \`/agents/new\`, \`agent_setup.get\` can return \`next_action: "choose_skills"\`; selected Skills are proposed immutable-version assignments and required Skill tools block sign-off/go-live until tool configuration is ready.
+
 | Command | Command ids | Purpose | Scope | Safe example |
 |---|---|---|---|---|
 | \`{{cli}} task list|accept|decline|complete|create\` | \`task.list\`, \`task.accept\`, \`task.decline\`, \`task.complete\`, \`task.create\` | Operate a seat's task queue. | Seat | \`{{cli}} task list --json\` |
@@ -42801,11 +42804,29 @@ These ergonomic wrappers (including the \`{{cli}} agent\` group) require **{{cli
 | \`{{cli}} agent templates|create|setup|tools|dry-run|go-live|status|run-now|fleet-digest|get-run|show\` | \`agent_template.list\`, \`agent.create_from_template\`, \`agent.create_custom\`, \`agent_setup.get\`, \`agent_setup.update\`, \`agent.configure_tools\`, \`agent.run_dry_run\`, \`agent.go_live\`, \`agent.status\`, \`agent.run_now\`, \`agent.fleet_digest\`, \`agent.get_run\`, \`agent.show_markdown\` | Run the full agent setup and operation flow: list templates, create a draft from a template or guided custom answers (with \`--model\` and \`--effort\`), read or answer setup state, connect or decline tools, dry-run, go live, run on demand, capture the fleet-health digest, read one run's transcript/error diagnostics, and show a markdown readout. Create and go-live stop at human gates; the dry-run is ungated by human approval but requires a signed manifest first. | Tenant and seat | \`{{cli}} agent fleet-digest --json\` |
 | \`{{cli}} tools list\` | \`tool.catalog\` | List the discoverable tool catalog the builder reads (id, scope tiers, credential requirement, access policy, and execution-boundary guidance). | Tenant | \`{{cli}} tools list --json\` |
 | \`{{cli}} skills list|get|file|assigned|check-dependencies\` | \`skill.list\`, \`skill.get\`, \`skill.file.get\`, \`skill.assigned.list\`, \`skill.check_dependencies\` | Discover reusable Skills, read descriptors and stored package files, list approved Seat assignments, and compare required/optional tool dependencies with a Seat's signed Charter manifest. Skills are instructions, not authority. | Tenant and seat | \`{{cli}} skills list --json\`; \`{{cli}} skills file --slug invoice-review --path SKILL.md\` |
+| \`{{cli}} skills catalog|enable|install|sync\` | \`skill.catalog\`, \`skill.enable_catalog\`, \`skill.install_local\`, \`skill.sync_local\` | Discover entitled ROST catalog Skills, enable a catalog Skill into the company library with human confirmation, and install or sync approved Skill files locally from ROST APIs. Private catalog source URLs and GitHub tokens never go to local agents. | Tenant and seat | \`{{cli}} skills sync --seat-id <id> --client codex\`; \`{{cli}} skills install rost/ap-review --seat-id <id> --client codex\` |
 | \`{{cli}} skills create|update-draft|import|publish|assign|revoke\` | \`skill.create\`, \`skill.update_draft\`, \`skill.import_github\`, \`skill.import_upload\`, \`skill.publish\`, \`skill.assign_to_seat\`, \`skill.revoke_from_seat\` | Create or import bounded text Skill packages, publish reviewed immutable versions, propose or approve Seat assignments, and revoke future use without deleting historical activations. Publish, revoke, and approved assignment stop at human confirmation; blocked required tools cannot be approved. | Tenant and seat | \`{{cli}} skills import github --url https://github.com/acme/skills/tree/main/ap --json\`; \`{{cli}} skills assign --seat-id <id> --slug invoice-review --json\` |
 | \`{{cli}} model list\` | \`model.catalog\` | List guided model tiers with recommendations, token prices, cost bands, best-fit work, and model ids for \`--model\`. | Tenant | \`{{cli}} model list --json\` |
 | \`{{cli}} compass show\` | \`compass.show_markdown\` | Render the current Compass as a clean markdown card for review. | Tenant | \`{{cli}} compass show --markdown\` |
 | \`{{cli}} charter show\` | \`charter.show_markdown\` | Render a seat's Charter as a clean markdown card for review. | Tenant | \`{{cli}} charter show --seat-id <id> --markdown\` |
 
+Skills wrapper help:
+
+\`\`\`text
+{{cli}} skills list [--json]
+{{cli}} skills catalog [--json]
+{{cli}} skills get --slug <slug> [--json]
+{{cli}} skills file --slug <slug> --path SKILL.md
+{{cli}} skills enable rost/<slug> [--json]
+{{cli}} skills install <slug-or-rost/slug> [--seat-id <id>] [--client claude-code|codex|cursor] [--version <n>] [--local-only] [--json]
+{{cli}} skills sync --seat-id <id> [--client claude-code|codex|cursor] [--json]
+{{cli}} skills assign --seat-id <id> (--skill <slug>|--slug <slug>|--skill-version-id <id>) [--approve] [--allow-blocked-proposal] [--json]
+{{cli}} skills revoke (--assignment-id <id>|--seat-id <id> --skill <slug>) [--json]
+{{cli}} skills publish (--slug <slug>|--skill-version-id <id>) [--allow-warnings] [--json]
+\`\`\`
+
+\`{{cli}} skills install\` writes into the client Skills directory and records \`.rost-skill.json\` with \`skill_version_id\`, \`content_sha256\`, source, client, and \`installed_from: "rost_api"\`. Set \`ROST_SKILL_INSTALL_ROOT\` to override the local root in CI or a sandbox. Use \`install\` for one Skill and \`sync\` as the default local-agent command because it installs every approved Skill assigned to the Seat and skips unchanged local copies by hash. Entitlement failures mean the tenant cannot access that ROST catalog tier yet; stale local copies are fixed by rerunning \`sync\`; private catalog access is always served by ROST APIs, not by giving the agent a private GitHub credential.
+
 ### MCP registration
 
 | Command | Purpose | Scope | Safe example |
@@ -42902,8 +42923,8 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_list_agent_fleet\` | \`agent.list_fleet\` | Read every staffed agent seat at once: lane, live state, last real turn, 24h/7d real turns, measurable status, escalations, and 7-day spend. | Tenant | Call with \`{}\`; counts use the same seat-run association as \`agent.list_runs\`, with sandbox dry runs excluded from real turns. |
 | \`rost_get_dogfood_fleet_health_digest\` | \`agent.fleet_digest\` | Capture the daily dogfood fleet-health digest: live/idle state, 24h/7d turns, spend, recent failed runs, unresolved errors, failed notifications, and next actions. | Tenant | Call with \`{}\`; optional \`window_hours\` bounds recent failed-run evidence, while \`error_limit\` caps linked evidence per seat. |
 | \`rost_run_agent_now\` | \`agent.run_now\` | Queue an immediate run for a live staffed agent without changing its saved schedule; cloud lane dispatches to the executor and runner lane queues for the paired runner. | Tenant | Call with \`{"seat_id":"<seat-id>"}\`. |
-| \`rost_list_agent_runs\` | \`agent.list_runs\` | Read a seat's agent run history (status, lane, model, cost, per-run tool-call and guard-held counts) plus the seat's run/tool-call rollup including held-action count. | Seat or tenant-admin | Call with \`{"seat_id":"<seat-id>"}\`; pass \`limit\` for a deeper window. |
-| \`rost_get_agent_run_diagnostics\` | \`agent.get_run\` | Read one run's diagnostic record: transcript reference, token/cost usage, outcome, and linked product-visible run errors. | Seat or tenant-admin | Call with \`{"seat_id":"<seat-id>","run_id":"<run-id>"}\`. |
+| \`rost_list_agent_runs\` | \`agent.list_runs\` | Read a seat's agent run history (status, lane, model, cost, per-run Skill activation, tool-call, and guard-held counts) plus the seat's run/tool-call rollup including held-action count. | Seat or tenant-admin | Call with \`{"seat_id":"<seat-id>"}\`; pass \`limit\` for a deeper window. |
+| \`rost_get_agent_run_diagnostics\` | \`agent.get_run\` | Read one run's diagnostic record: transcript reference, token/cost usage, outcome, linked product-visible run errors, and loaded Skill activation file metadata. File hashes/sizes identify the immutable source package, while model prompt text may be bounded or truncated. | Seat or tenant-admin | Call with \`{"seat_id":"<seat-id>","run_id":"<run-id>"}\`. |
 | \`rost_list_agent_tool_calls\` | \`agent.list_tool_calls\` | Read a seat's tool-call ledger (tool name, guard result, manifest clause, outcome) with the held-action count as the hero metric. Never returns argument summaries or secret material. | Seat or tenant-admin | Call with \`{"seat_id":"<seat-id>"}\`; pass \`held_only: true\` for only guard-held calls. |
 | \`rost_list_agent_templates\` | \`agent_template.list\` | List stock agent templates and metadata. | Tenant | Call with \`{}\`. |
 | \`rost_create_agent_from_template\` | \`agent.create_from_template\` | Create a draft stock agent and draft Charter from a template (draft-only; occupancy needs a human steward). | Tenant | Call with \`seat_id\` and \`template_slug\`; expect human confirmation. |
@@ -42968,6 +42989,10 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_show_agent_setup_as_markdown\` | \`agent.show_markdown\` | Render a seat's agent setup, model, steward, tools, and Charter as a clean markdown card for review. | Tenant | Call with \`{"seat_id":"<seat-id>"}\`. |
 | \`rost_list_tool_catalog\` | \`tool.catalog\` | List the discoverable tool catalog the agent builder reads \u2014 id, prescriptive description, scope tiers, credential requirement, access policy, and execution-boundary guidance. | Tenant | Call with \`{}\` or \`{"provider":"google"}\`. |
 | \`rost_list_skills\` | \`skill.list\` | List tenant Skills with application descriptors, dependency metadata, source status, latest version, and assigned Seat count. Seat-scoped reads are available through \`rost://skills\`. | Tenant-admin | Call with \`{}\` or \`{"query":"invoice"}\`. |
+| \`rost_list_rost_skill_catalog\` | \`skill.catalog\` | List entitled ROST catalog Skills. Private catalog source URLs and credentials stay server-side. | Tenant-admin | Call with \`{}\`; use \`{"include_unentitled":true}\` only to inspect tier availability. |
+| \`rost_enable_rost_catalog_skill\` | \`skill.enable_catalog\` | Enable an entitled ROST catalog Skill into the company library with human confirmation. | Tenant-admin | Call with \`{"slug":"rost/ap-review"}\`; non-interactive callers receive a confirmation handoff. |
+| \`rost_install_skill_locally\` | \`skill.install_local\` | Resolve company or entitled ROST catalog Skill files from ROST APIs for a local client install. It returns package files and metadata, not private GitHub URLs. | Tenant-admin | Call with \`{"slug":"invoice-review","client":"codex"}\`; \`rost/<slug>\` enablement may require confirmation. |
+| \`rost_sync_assigned_skills_locally\` | \`skill.sync_local\` | Resolve every approved Skill assigned to a Seat plus revoked local-copy markers for a local client sync. | Tenant-admin | Call with \`{"seat_id":"<seat-id>","client":"codex"}\`; local clients remove revoked copies. |
 | \`rost_get_skill\` | \`skill.get\` | Read one Skill descriptor and latest stored version metadata. Seat-scoped reads are available through \`rost://skills/{slug}\`. | Tenant-admin | Call with \`{"slug":"invoice-review"}\`. |
 | \`rost_get_skill_file\` | \`skill.file.get\` | Read stored Skill package file content by slug and package path; paths resolve only inside the stored package payload. Seat-scoped reads are available through \`rost://skills/{slug}/files/{path}\`. | Tenant-admin | Call with \`{"slug":"invoice-review","path":"SKILL.md"}\`. |
 | \`rost_list_assigned_skills\` | \`skill.assigned.list\` | List approved Skill assignments for a Seat, including immutable version, dependency status, rationale, and approval time. Seat-scoped reads are available through \`rost://seat/{id}/skills\`. | Tenant-admin | Call with \`{"seat_id":"<seat-id>"}\`. |
@@ -46626,6 +46651,431 @@ function ensureTrailingSlash2(value) {
   return value.endsWith("/") ? value : `${value}/`;
 }
 
+// src/skills.ts
+import { existsSync, mkdirSync, readFileSync as readFileSync3, rmSync, writeFileSync } from "node:fs";
+import os from "node:os";
+import path2 from "node:path";
+var UsageError2 = class extends Error {
+};
+var CLIENTS = /* @__PURE__ */ new Set(["claude-code", "codex", "cursor"]);
+function skillsUsage2(binName = cliBrand.binName) {
+  return [
+    `${binName} skills list [--json]`,
+    `${binName} skills catalog [--json]`,
+    `${binName} skills get --slug <slug> [--json]`,
+    `${binName} skills file --slug <slug> --path SKILL.md`,
+    `${binName} skills enable rost/<slug> [--json]`,
+    `${binName} skills install <slug-or-rost/slug> [--seat-id <id>] [--client claude-code|codex|cursor] [--version <n>] [--local-only] [--json]`,
+    `${binName} skills sync --seat-id <id> [--client claude-code|codex|cursor] [--json]`,
+    `${binName} skills assign --seat-id <id> (--skill <slug>|--slug <slug>|--skill-version-id <id>) [--approve] [--allow-blocked-proposal] [--json]`,
+    `${binName} skills revoke (--assignment-id <id>|--seat-id <id> --skill <slug>) [--json]`,
+    `${binName} skills publish (--slug <slug>|--skill-version-id <id>) [--allow-warnings] [--json]`
+  ].join("\n");
+}
+async function runSkills(context, args, env = process.env) {
+  try {
+    const [action, ...rest] = args;
+    if (action === "help" || action === "--help" || action === "-h" || action === void 0) {
+      context.io.stdout.write(`${skillsUsage2(context.binName)}
+`);
+      return action === void 0 ? 1 : 0;
+    }
+    if (action === "list") {
+      return context.run(context.client, "skill.list", {}, void 0);
+    }
+    if (action === "catalog") {
+      const parsed = parseFlags2(rest, /* @__PURE__ */ new Set(["include-unentitled"]));
+      return context.run(context.client, "skill.catalog", {
+        ...parsed.flags.has("include-unentitled") ? { include_unentitled: true } : {}
+      }, parsed.json ? void 0 : formatCatalog);
+    }
+    if (action === "get") {
+      const parsed = parseFlags2(rest);
+      return context.run(context.client, "skill.get", { slug: requireValue3(parsed, "slug") }, parsed.json ? void 0 : formatSkillDetail2);
+    }
+    if (action === "file") {
+      const parsed = parseFlags2(rest);
+      return context.run(context.client, "skill.file.get", {
+        slug: requireValue3(parsed, "slug"),
+        path: requireValue3(parsed, "path")
+      }, (output) => {
+        const content = asRecord2(output).content;
+        return typeof content === "string" ? content : JSON.stringify(output, null, 2);
+      });
+    }
+    if (action === "enable") {
+      const slug2 = rest[0];
+      if (!slug2 || slug2.startsWith("--")) {
+        throw new UsageError2(`Usage: ${context.binName} skills enable rost/<slug> [--json]`);
+      }
+      const parsed = parseFlags2(rest.slice(1));
+      return context.run(context.client, "skill.enable_catalog", { slug: slug2 }, parsed.json ? void 0 : formatEnable);
+    }
+    if (action === "install") {
+      return installOne(context, rest, env);
+    }
+    if (action === "sync") {
+      return syncAssigned(context, rest, env);
+    }
+    if (action === "assign") {
+      const parsed = parseFlags2(rest, /* @__PURE__ */ new Set(["approve", "allow-blocked-proposal"]));
+      const body = withDefined({
+        seat_id: requireValue3(parsed, "seat-id"),
+        status: parsed.flags.has("approve") ? "approved" : "proposed",
+        rationale: optionalValue2(parsed, "rationale") ?? "Skill selected for this Seat.",
+        allow_blocked_proposal: parsed.flags.has("allow-blocked-proposal")
+      }, {
+        slug: optionalValue2(parsed, "skill") ?? optionalValue2(parsed, "slug"),
+        skill_version_id: optionalValue2(parsed, "skill-version-id")
+      });
+      return context.run(context.client, "skill.assign_to_seat", body, parsed.json ? void 0 : formatAssignment2, { targetSeatId: body.seat_id });
+    }
+    if (action === "revoke") {
+      const parsed = parseFlags2(rest);
+      const seatId = optionalValue2(parsed, "seat-id");
+      const body = withDefined({}, {
+        assignment_id: optionalValue2(parsed, "assignment-id"),
+        seat_id: seatId,
+        slug: optionalValue2(parsed, "skill") ?? optionalValue2(parsed, "slug"),
+        skill_version_id: optionalValue2(parsed, "skill-version-id"),
+        rationale: optionalValue2(parsed, "rationale")
+      });
+      return context.run(context.client, "skill.revoke_from_seat", body, parsed.json ? void 0 : formatRevoke, seatId ? { targetSeatId: seatId } : {});
+    }
+    if (action === "publish") {
+      const parsed = parseFlags2(rest, /* @__PURE__ */ new Set(["allow-warnings"]));
+      const body = withDefined({
+        allow_warnings: parsed.flags.has("allow-warnings")
+      }, {
+        slug: optionalValue2(parsed, "slug"),
+        skill_version_id: optionalValue2(parsed, "skill-version-id")
+      });
+      return context.run(context.client, "skill.publish", body, parsed.json ? void 0 : formatPublish);
+    }
+    throw new UsageError2(`Unknown skills action: ${action}`);
+  } catch (error51) {
+    if (error51 instanceof UsageError2) {
+      context.io.stderr.write(`${error51.message}
+`);
+      return 1;
+    }
+    if (error51 instanceof CommandClientError) {
+      return printCommandError(context.io, error51);
+    }
+    throw error51;
+  }
+}
+async function installOne(context, args, env) {
+  const slug2 = args[0];
+  if (!slug2 || slug2.startsWith("--")) {
+    throw new UsageError2(`Usage: ${context.binName} skills install <slug-or-rost/slug> [--seat-id <id>] [--client claude-code|codex|cursor] [--version <n>] [--local-only] [--json]`);
+  }
+  const parsed = parseFlags2(args.slice(1), /* @__PURE__ */ new Set(["local-only"]));
+  const client = parseClient2(optionalValue2(parsed, "client") ?? "codex");
+  const seatId = optionalValue2(parsed, "seat-id");
+  const body = withDefined({
+    slug: slug2,
+    client,
+    local_only: parsed.flags.has("local-only")
+  }, {
+    seat_id: seatId,
+    version: optionalNumber2(parsed, "version")
+  });
+  const options = seatId ? { targetSeatId: seatId } : {};
+  const output = await executeInstallCommand(context, body, options);
+  const summary = applyLocalSkillChanges(output, client, env, { removeRevoked: false });
+  const outputRecord = asRecord2(output);
+  context.io.stdout.write(parsed.json ? `${JSON.stringify({ ...outputRecord, local: summary }, null, 2)}
+` : `${formatLocalSummary(summary)}
+`);
+  return 0;
+}
+async function syncAssigned(context, args, env) {
+  const parsed = parseFlags2(args);
+  const seatId = requireValue3(parsed, "seat-id");
+  const client = parseClient2(optionalValue2(parsed, "client") ?? "codex");
+  const output = await executeSkillCommand(context, "skill.sync_local", {
+    seat_id: seatId,
+    client
+  }, { targetSeatId: seatId });
+  const summary = applyLocalSkillChanges(output, client, env, { removeRevoked: true });
+  const outputRecord = asRecord2(output);
+  context.io.stdout.write(parsed.json ? `${JSON.stringify({ ...outputRecord, local: summary }, null, 2)}
+` : `${formatLocalSummary(summary)}
+`);
+  return 0;
+}
+async function executeInstallCommand(context, body, options) {
+  const slug2 = typeof body.slug === "string" ? body.slug : "";
+  if (slug2.startsWith("rost/") && body.local_only !== true) {
+    try {
+      return await executeSkillCommand(context, "skill.install_local", { ...body, local_only: true }, options);
+    } catch (error51) {
+      if (!isCommandConflict(error51)) {
+        throw error51;
+      }
+    }
+  }
+  return executeSkillCommand(context, "skill.install_local", body, options);
+}
+async function executeSkillCommand(context, commandId, body, options = {}) {
+  try {
+    const output = await context.client.execute(commandId, body, options);
+    return output.output;
+  } catch (error51) {
+    const pending = context.io.interactive === true ? pendingConfirmationFromError(error51) : null;
+    if (pending && pending.commandId === commandId) {
+      context.io.stderr.write(`Approving ${pending.commandId} confirmation ${pending.confirmationId} as the interactive CLI user.
+`);
+      const approved = await context.client.execute("confirmation.approve", { confirmation_id: pending.confirmationId });
+      return asRecord2(approved.output).output ?? approved.output;
+    }
+    throw error51;
+  }
+}
+function applyLocalSkillChanges(output, client, env, options) {
+  const root = installRoot(client, env);
+  const changes = writeInstalls(output, root);
+  if (options.removeRevoked) {
+    changes.push(...removeRevokedInstalls(output, root));
+  }
+  return changes;
+}
+function writeInstalls(output, root) {
+  const installs = asArray2(asRecord2(output).installs);
+  return installs.map((entry) => {
+    const install = asRecord2(entry);
+    const slug2 = safeLocalSlug(String(install.slug ?? ""));
+    const metadata = asRecord2(install.metadata);
+    const files = asArray2(install.files).map(asRecord2);
+    const dir = path2.join(root, slug2);
+    const metadataPath = path2.join(dir, ".rost-skill.json");
+    const expectedHash = String(metadata.content_sha256 ?? "");
+    if (existingHash(metadataPath) === expectedHash) {
+      return { slug: slug2, dir, status: "unchanged", files: files.length };
+    }
+    rmSync(dir, { recursive: true, force: true });
+    mkdirSync(dir, { recursive: true });
+    for (const file2 of files) {
+      const relativePath = safeRelativePath(String(file2.path ?? ""));
+      const content = String(file2.content ?? "");
+      const target = path2.join(dir, relativePath);
+      mkdirSync(path2.dirname(target), { recursive: true });
+      writeFileSync(target, content, "utf8");
+    }
+    writeFileSync(metadataPath, `${JSON.stringify(metadata, null, 2)}
+`, "utf8");
+    return { slug: slug2, dir, status: "installed", files: files.length };
+  });
+}
+function removeRevokedInstalls(output, root) {
+  const installs = new Set(asArray2(asRecord2(output).installs).map((entry) => {
+    const slug2 = asRecord2(entry).slug;
+    return typeof slug2 === "string" ? slug2 : "";
+  }));
+  const revoked = asArray2(asRecord2(output).revoked);
+  const changes = [];
+  for (const entry of revoked) {
+    const slug2 = safeLocalSlug(String(asRecord2(entry).slug ?? ""));
+    if (installs.has(slug2)) {
+      continue;
+    }
+    const dir = path2.join(root, slug2);
+    if (!existsSync(dir)) {
+      continue;
+    }
+    rmSync(dir, { recursive: true, force: true });
+    changes.push({ slug: slug2, dir, status: "removed", files: 0 });
+  }
+  return changes;
+}
+function installRoot(client, env) {
+  const override = env.ROST_SKILL_INSTALL_ROOT;
+  if (override && override.length > 0) {
+    return path2.resolve(override, client);
+  }
+  if (client === "codex") {
+    return path2.join(env.CODEX_HOME ?? path2.join(os.homedir(), ".codex"), "skills", "rost");
+  }
+  if (client === "claude-code") {
+    return path2.join(env.CLAUDE_HOME ?? path2.join(os.homedir(), ".claude"), "skills", "rost");
+  }
+  return path2.join(os.homedir(), ".cursor", "skills", "rost");
+}
+function safeRelativePath(value) {
+  const normalized = value.trim().replaceAll("\\", "/").replace(/^\.\/+/, "");
+  if (!normalized || normalized.startsWith("/") || normalized.includes("//") || normalized.split("/").includes("..")) {
+    throw new UsageError2("Server returned an invalid skill file path.");
+  }
+  return normalized;
+}
+function safeLocalSlug(value) {
+  if (!/^[a-z0-9][a-z0-9-]{1,80}$/.test(value)) {
+    throw new UsageError2("Server returned an invalid skill slug.");
+  }
+  return value;
+}
+function existingHash(metadataPath) {
+  if (!existsSync(metadataPath)) {
+    return null;
+  }
+  try {
+    const parsed = JSON.parse(readFileSync3(metadataPath, "utf8"));
+    const hash2 = asRecord2(parsed).content_sha256;
+    return typeof hash2 === "string" ? hash2 : null;
+  } catch {
+    return null;
+  }
+}
+function parseFlags2(args, booleanFlags = /* @__PURE__ */ new Set()) {
+  const values = /* @__PURE__ */ new Map();
+  const flags = /* @__PURE__ */ new Set();
+  let json2 = false;
+  for (let index = 0; index < args.length; index += 1) {
+    const token = args[index];
+    if (token === void 0) {
+      continue;
+    }
+    if (!token.startsWith("--")) {
+      throw new UsageError2(`Unexpected argument: ${token}`);
+    }
+    const key = token.slice(2);
+    if (key === "json") {
+      json2 = true;
+      continue;
+    }
+    if (booleanFlags.has(key)) {
+      flags.add(key);
+      continue;
+    }
+    const value = args[index + 1];
+    if (value === void 0 || value.startsWith("--")) {
+      flags.add(key);
+      continue;
+    }
+    values.set(key, value);
+    index += 1;
+  }
+  return { json: json2, values, flags };
+}
+function requireValue3(parsed, key) {
+  const value = optionalValue2(parsed, key);
+  if (value === void 0) {
+    throw new UsageError2(`Missing required --${key} value.`);
+  }
+  return value;
+}
+function optionalValue2(parsed, key) {
+  const value = parsed.values.get(key);
+  return value && value.length > 0 ? value : void 0;
+}
+function optionalNumber2(parsed, key) {
+  const value = optionalValue2(parsed, key);
+  if (value === void 0) {
+    return void 0;
+  }
+  const parsedNumber = Number(value);
+  if (!Number.isSafeInteger(parsedNumber) || parsedNumber <= 0) {
+    throw new UsageError2(`--${key} must be a positive integer.`);
+  }
+  return parsedNumber;
+}
+function parseClient2(value) {
+  if (!CLIENTS.has(value)) {
+    throw new UsageError2("--client must be claude-code, codex, or cursor.");
+  }
+  return value;
+}
+function isCommandConflict(error51) {
+  return error51 instanceof CommandClientError && error51.status === 409;
+}
+function withDefined(base, extra) {
+  const next = { ...base };
+  for (const [key, value] of Object.entries(extra)) {
+    if (value !== void 0) {
+      next[key] = value;
+    }
+  }
+  return next;
+}
+function asRecord2(value) {
+  return typeof value === "object" && value !== null ? value : {};
+}
+function asArray2(value) {
+  return Array.isArray(value) ? value : [];
+}
+function formatCatalog(output) {
+  const entries = asArray2(asRecord2(output).catalog);
+  if (entries.length === 0) {
+    return "No ROST catalog skills are available for this tenant.";
+  }
+  return entries.map((entry) => {
+    const record2 = asRecord2(entry);
+    return `${record2.catalog_slug} [${record2.tier}/${record2.entitlement_status}] ${record2.name}`;
+  }).join("\n");
+}
+function formatSkillDetail2(output) {
+  const skill = asRecord2(asRecord2(output).skill);
+  return `${skill.slug} v${skill.latest_version ?? "\u2014"} [${skill.status}] ${skill.name}
+${skill.description}`;
+}
+function formatEnable(output) {
+  const skill = asRecord2(asRecord2(output).skill);
+  const catalog = asRecord2(asRecord2(output).catalog);
+  return `Enabled ${catalog.catalog_slug} as ${skill.slug} v${skill.version} (${skill.skill_version_id})`;
+}
+function formatAssignment2(output) {
+  const assignment = asRecord2(asRecord2(output).assignment);
+  return `${assignment.status} ${assignment.slug} for seat ${assignment.seat_id}; sync: ${String(asRecord2(output).local_sync_next_step)}`;
+}
+function formatRevoke(output) {
+  const record2 = asRecord2(output);
+  return `Revoked ${record2.slug} for seat ${record2.seat_id}; sync: ${record2.local_sync_next_step}`;
+}
+function formatPublish(output) {
+  const skill = asRecord2(asRecord2(output).skill);
+  return `Published ${skill.slug} v${skill.version} (${skill.skill_version_id})`;
+}
+function formatLocalSummary(summary) {
+  if (summary.length === 0) {
+    return "No skills to install.";
+  }
+  return summary.map((entry) => `${entry.status} ${entry.slug} -> ${entry.dir} (${entry.files} files)`).join("\n");
+}
+function printCommandError(io, error51) {
+  if (error51.response && !error51.response.ok) {
+    const payload = {
+      code: error51.response.error.code,
+      message: error51.response.error.message,
+      ...error51.response.error.details === void 0 ? {} : { details: error51.response.error.details },
+      ...error51.response.error.help === void 0 ? {} : { help: error51.response.error.help },
+      ...error51.response.requestId === void 0 ? {} : { requestId: error51.response.requestId }
+    };
+    io.stderr.write(`${redactForLog(payload)}
+`);
+    if (error51.response.error.help !== void 0) {
+      io.stderr.write(`\u2192 try: ${redactForLog(error51.response.error.help)}
+`);
+    }
+    return error51.status === 409 ? 3 : error51.status >= 400 && error51.status < 500 ? 1 : 2;
+  }
+  io.stderr.write(`${redactForLog(error51.message)}
+`);
+  return error51.status >= 400 && error51.status < 500 ? 1 : 2;
+}
+function pendingConfirmationFromError(error51) {
+  if (!(error51 instanceof CommandClientError) || !error51.response || error51.response.ok || error51.response.error.code !== "COMMAND_CONFIRMATION_REQUIRED") {
+    return null;
+  }
+  const details = asRecord2(error51.response.error.details);
+  const confirmationId = details.confirmationId;
+  const commandId = details.commandId;
+  if (typeof confirmationId !== "string" || confirmationId.length === 0 || typeof commandId !== "string" || commandId.length === 0) {
+    return null;
+  }
+  return { confirmationId, commandId };
+}
+
 // src/index.ts
 async function main(argv = process.argv.slice(2), options = {}) {
   const io = options.io ?? {
@@ -46788,6 +47238,23 @@ Run ${cliBrand.binName} login --device again if the next command asks you to aut
   if (command === "mcp") {
     return executeMcp(io, client, config2.appUrl, args);
   }
+  if (command === "skills") {
+    const skillsAction = args[0];
+    if (skillsAction !== "catalog" && skillsAction !== "enable" && skillsAction !== "install" && skillsAction !== "sync") {
+      return runOperation(command, args, {
+        io,
+        client,
+        binName: cliBrand.binName,
+        run: (wrapperClient, commandId, body, format, options2) => printCommandOutput(io, wrapperClient, commandId, body, format, options2)
+      });
+    }
+    return runSkills({
+      io,
+      client,
+      binName: cliBrand.binName,
+      run: (wrapperClient, commandId, body, format, options2) => printCommandOutput(io, wrapperClient, commandId, body, format, options2)
+    }, args);
+  }
   if (command === "init") {
     return executeInit(io, client, config2.appUrl, args);
   }
@@ -46887,7 +47354,7 @@ function extractSeatFlag(args) {
 var SeatFlagError = class extends Error {
 };
 function formatCommandSchema(output) {
-  const record2 = asRecord2(output);
+  const record2 = asRecord3(output);
   const lines = [
     `${field2(record2, "id")} \u2014 ${field2(record2, "title")}`,
     field2(record2, "description"),
@@ -46912,16 +47379,16 @@ function formatCommandSchema(output) {
   return lines.join("\n");
 }
 function formatCommandList(output) {
-  const commands = Array.isArray(asRecord2(output).commands) ? asRecord2(output).commands : [];
+  const commands = Array.isArray(asRecord3(output).commands) ? asRecord3(output).commands : [];
   if (commands.length === 0) {
     return "No commands registered.";
   }
   return commands.map((entry) => {
-    const record2 = asRecord2(entry);
+    const record2 = asRecord3(entry);
     return `${field2(record2, "id")}  [${field2(record2, "required_scope")}/${field2(record2, "confirmation")}]  ${field2(record2, "title")}`;
   }).join("\n");
 }
-function asRecord2(value) {
+function asRecord3(value) {
   return typeof value === "object" && value !== null ? value : {};
 }
 function asStringArray(value) {
@@ -46982,7 +47449,7 @@ async function executeMcp(io, client, appUrl2, args, env = process.env) {
       return 1;
     }
     if (error51 instanceof CommandClientError) {
-      return printCommandError(io, error51);
+      return printCommandError2(io, error51);
     }
     io.stderr.write(`${redactForLog(error51 instanceof Error ? error51.message : String(error51))}
 `);
@@ -47038,30 +47505,30 @@ async function printCommandOutput(io, client, commandId, body = {}, format, opti
     return 0;
   } catch (error51) {
     if (io.interactive === true) {
-      const pending = pendingConfirmationFromError(error51);
+      const pending = pendingConfirmationFromError2(error51);
       if (pending && pending.commandId === commandId) {
         io.stderr.write(`Approving ${pending.commandId} confirmation ${pending.confirmationId} as the interactive CLI user.
 `);
         try {
           const approved = await client.execute("confirmation.approve", { confirmation_id: pending.confirmationId });
-          const approvedOutput = asRecord2(approved.output).output ?? approved.output;
+          const approvedOutput = asRecord3(approved.output).output ?? approved.output;
           const rendered = format ? format(approvedOutput) : JSON.stringify(approvedOutput, null, 2);
           io.stdout.write(`${rendered}
 `);
           return 0;
         } catch (approvalError) {
-          return printCommandError(io, approvalError);
+          return printCommandError2(io, approvalError);
         }
       }
     }
-    return printCommandError(io, error51);
+    return printCommandError2(io, error51);
   }
 }
-function pendingConfirmationFromError(error51) {
+function pendingConfirmationFromError2(error51) {
   if (!(error51 instanceof CommandClientError) || !error51.response || error51.response.ok || error51.response.error.code !== "COMMAND_CONFIRMATION_REQUIRED") {
     return null;
   }
-  const details = asRecord2(error51.response.error.details);
+  const details = asRecord3(error51.response.error.details);
   const confirmationId = details.confirmationId;
   const commandId = details.commandId;
   if (typeof confirmationId !== "string" || confirmationId.length === 0 || typeof commandId !== "string" || commandId.length === 0) {
@@ -47069,7 +47536,7 @@ function pendingConfirmationFromError(error51) {
   }
   return { confirmationId, commandId };
 }
-function printCommandError(io, error51) {
+function printCommandError2(io, error51) {
   if (error51 instanceof CommandClientError && error51.response && !error51.response.ok) {
     const help = error51.response.error.help;
     const requestId = error51.response.requestId;
@@ -47106,7 +47573,7 @@ function parseJsonBody(args) {
   return JSON.parse(body);
 }
 function isCommand(value) {
-  return value === "login" || value === "logout" || value === "signup" || value === "whoami" || value === "tenants" || value === "use" || value === "command" || value === "onboard" || value === "mcp" || value === "init" || value === "docs" || value === "reference" || value === "help";
+  return value === "login" || value === "logout" || value === "signup" || value === "whoami" || value === "tenants" || value === "use" || value === "command" || value === "onboard" || value === "mcp" || value === "skills" || value === "init" || value === "docs" || value === "reference" || value === "help";
 }
 function printUsage(io) {
   io.stdout.write([
@@ -47126,6 +47593,7 @@ function printUsage(io) {
     `${cliBrand.binName} mcp install --client claude-code|codex|cursor --scope tenant-admin|seat [--seat-id <id>] [--expires-in <days>|--no-expiry] [--skip-permissions]`,
     `${cliBrand.binName} mcp install --client claude-code|codex|cursor --rotate <old-token-id>  (inherits the old token's scope; no --scope)`,
     `${cliBrand.binName} mcp install ... --skip-permissions  (or ${cliBrand.envPrefix}_CLI_SKIP_PERMISSIONS=1 \u2014 auto-approves the token-mint confirmation in a non-interactive session)`,
+    skillsUsage2(cliBrand.binName),
     `${cliBrand.binName} init [--client claude-code|codex|cursor]  (defaults --scope tenant-admin)`,
     `${cliBrand.binName} docs`,
     `${cliBrand.binName} reference <list|search|get> [options]`,