@rosthq/cli 0.7.134 → 0.7.136

package/dist/index.js

@@ -52585,7 +52585,7 @@ The implementation method is split into stable sections so a CLI, MCP, or in-app
     order: 12,
     title: "Install the {{brand}} implementation Skill",
     summary: "Install the public implementation Skill through its signed, verified GitHub release so a general-purpose agent can run the {{brand}} implementation method.",
-    version: "2026-07-30.1",
+    version: "2026-07-30.2",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup"],
@@ -52639,7 +52639,7 @@ A fetched release can never introduce its own trust root. Any key material insid
 
 Files are placed under the client's skills directory as \`rost-implementation/\`, plus a \`.rost-skill-release.json\` provenance marker. The marker records source repository, tag, commit, manifest sha256, and signer fingerprint. The agent quotes this marker when reporting which implementation method ran.
 
-For Claude Code the directory is \`$CLAUDE_CONFIG_DIR/skills/\` when that variable is set, otherwise \`~/.claude/skills/\` \u2014 \`CLAUDE_CONFIG_DIR\` is the variable Claude Code itself reads. The legacy \`CLAUDE_HOME\` is still honoured as a fallback and prints a deprecation notice; prefer \`CLAUDE_CONFIG_DIR\`, because a Skill installed under a root the client does not read leaves the agent running without it. For Codex the directory is \`$CODEX_HOME/skills/\`, otherwise \`~/.codex/skills/\`. The installer prints the resolved directory \u2014 check it matches the configuration the client launches with.
+For Claude Code the directory is \`$CLAUDE_CONFIG_DIR/skills/\` when that variable is set, otherwise \`~/.claude/skills/\` \u2014 \`CLAUDE_CONFIG_DIR\` is the variable Claude Code itself reads. If \`CLAUDE_HOME\` is set without \`CLAUDE_CONFIG_DIR\`, the installer fails with a migration instruction (\`Set CLAUDE_CONFIG_DIR=<value> instead, or unset CLAUDE_HOME to install under the default ~/.claude\`); when both variables are set and name different directories, the installer uses \`CLAUDE_CONFIG_DIR\` and prints a notice that \`CLAUDE_HOME\` is ignored (an equivalent spelling prints no notice). For Codex the directory is \`$CODEX_HOME/skills/\`, otherwise \`~/.codex/skills/\`. The installer prints the resolved directory and a line such as \`Claude Code will load this from <path>\` \u2014 check it matches the configuration the client launches with.
 
 ## Update path
 
@@ -53680,7 +53680,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-07-30.2",
+    version: "2026-07-30.3",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -54265,7 +54265,7 @@ Ergonomic subcommands for everyday operation. Each wrapper is sugar over the sam
 
 These ergonomic wrappers (including the \`{{cli}} agent\` group) require **{{cli}} 0.2.0 or newer** \u2014 run \`npx {{cliPackage}}@latest \u2026\` to get them. Older versions can still reach every command through the \`{{cli}} command <id> --json\` floor, since command execution is server-side.
 
-**Generated verbs (0.6.0+).** Every registry command now has a first-class \`{{cli}} <namespace> <action>\` verb, projected directly from the command's input schema \u2014 so namespaces that previously had no ergonomic wrapper (for example \`{{cli}} measurable create\`, \`{{cli}} work_order enqueue\`, \`{{cli}} mcp_token create\`) are usable without dropping to the raw \`command <id>\` path. Flags follow the schema field names (\`--seat-id\`, \`--name\`, \u2026); read a command's exact input offline with \`{{cli}} <namespace> <action> --schema\` before calling it, and pass a nested payload with \`--input '<json>'\` when a field is a complex object. \`--json\` still selects machine output, \`--seat <id>\` still sets seat scope, and \`{{cli}} command <id> --json '<body>'\` remains the universal fallback.
+**Generated verbs (0.6.0+).** Every registry command now has a first-class \`{{cli}} <namespace> <action>\` verb, projected directly from the command's input schema \u2014 so namespaces that previously had no ergonomic wrapper (for example \`{{cli}} measurable create\`, \`{{cli}} work_order enqueue\`, \`{{cli}} mcp_token create\`) are usable without dropping to the raw \`command <id>\` path. Flags follow the schema field names (\`--seat-id\`, \`--name\`, \u2026); read a command's exact input offline with \`{{cli}} <namespace> <action> --schema\` before calling it, and pass a nested payload with \`--input '<json>'\` or \`--input-file <path>\` (a JSON file read client-side) when a field is a complex object \u2014 explicit field flags merge on top of either payload form. On these generated verbs, a flag the verb does not support is a usage error naming the flag before anything is sent, never silently ignored (the bespoke handler verbs, such as \`status record\` and \`agent create\`, still parse flags by hand and are being hardened separately). \`--json\` still selects machine output, \`--seat <id>\` still sets seat scope, and \`{{cli}} command <id> --json '<body>'\` remains the universal fallback.
 
 For a complete Seat, inspect \`{{cli}} seat create-complete --schema\`, then pass the strict nested request with \`{{cli}} seat create-complete --input '<json>' --json\`. The generic \`{{cli}} command seat.create_complete --json '<json>'\` path and the generated MCP tool \`rost_create_complete_seat\` expose the same registry schema and server-side command. \`seat create-complete\` authenticates with an existing implementation-bootstrap credential first (it is one of the vetted bootstrap staging primitives) and falls back to the user session. Staging surfaces as the CLI's confirmation-required envelope: a \`COMMAND_CONFIRMATION_REQUIRED\` JSON object on stderr, exit code 3, whose \`details\` carry the pending confirmation id and the exact approval URL (\`details.approveVia.webUrl\`) \u2014 read the URL from there; the command has done its job at that point. The human owner reviews one card covering the Seat, canonical Charter and permission manifest, disclosed staffing, effective agent lane/readiness, exact pinned Skill versions and dependency state, and schedule. Approval applies the proposal in one transaction and returns its application and receipt ids. Any failure rolls back the whole proposal. An optional agent remains in \`dry_run\`; this command never approves go-live. Direct calls use existing parent and Steward Seat ids\u2014logical references are reserved for the later composite onboarding flow. Retained source ingestion is not available on this direct command yet, so \`sources\` and every \`source_uses\` collection must be empty and planned staffing must omit \`source_ref\`; the command rejects source-backed provenance instead of accepting an unverified upload id or caller-supplied digest.
 
@@ -59836,10 +59836,36 @@ function explicitArgvValue(entry, field4, parsed, positional, overrides, aliasFl
   }
   return { provided: true, value: coerceScalar(field4, raw) };
 }
+var RESERVED_FLAGS = /* @__PURE__ */ new Set(["json", "seat", "input", "body", "yes", "y", "schema"]);
+function knownFlagsFor(entry, overrides) {
+  const known = new Set(RESERVED_FLAGS);
+  for (const field4 of entry.fields) {
+    known.add(field4.flag);
+  }
+  for (const aliasFlag of Object.keys(overrides.flagAliases ?? {})) {
+    known.add(aliasFlag);
+  }
+  for (const negatedFlag of Object.keys(overrides.negatedFlags ?? {})) {
+    known.add(negatedFlag);
+  }
+  return known;
+}
+function assertKnownFlags(entry, parsed, overrides, extraKnownFlags = /* @__PURE__ */ new Set()) {
+  const knownFlags = knownFlagsFor(entry, overrides);
+  for (const flag of extraKnownFlags) {
+    knownFlags.add(flag);
+  }
+  for (const key of [...parsed.values.keys(), ...parsed.flags]) {
+    if (!knownFlags.has(key)) {
+      throw new UsageError(`Unknown flag: --${key}. Run this command with --schema to see its supported flags.`);
+    }
+  }
+}
 function buildBodyFromFlags(entry, parsed, positional, overrides = {}) {
   if (entry.secretBlocked) {
     throw new UsageError(SECRET_ARGV_GUIDANCE);
   }
+  assertKnownFlags(entry, parsed, overrides);
   const aliasFlags = new Map(Object.entries(overrides.flagAliases ?? {}));
   const booleanFields = new Set(entry.fields.filter((field4) => field4.type === "boolean").map((field4) => field4.name));
   for (const [negatedFlag, fieldName] of Object.entries(overrides.negatedFlags ?? {})) {
@@ -60022,7 +60048,12 @@ function renderCommandOutput(output) {
 }
 
 // src/generator/verbs.ts
+import { readFile as readFile6 } from "node:fs/promises";
 var MANIFEST_BY_ID = new Map(COMMAND_MANIFEST.map((entry) => [entry.id, entry]));
+function hasBespokeHandler(verbSpec) {
+  return verbSpec.handler !== void 0;
+}
+var INPUT_FILE_FLAG = /* @__PURE__ */ new Set(["input-file"]);
 function manifestById(commandId) {
   return MANIFEST_BY_ID.get(commandId);
 }
@@ -60047,6 +60078,7 @@ function renderVerbSchema(entry) {
     }
     if (entry.hasComplexInput) {
       lines.push("  --input '<json>' \u2014 nested payload (this command has complex input fields)");
+      lines.push("  --input-file <path> \u2014 read the nested payload from a JSON file (same merge rules as --input)");
     }
   }
   if (entry.example !== void 0) {
@@ -60054,12 +60086,12 @@ function renderVerbSchema(entry) {
   }
   return lines.join("\n");
 }
-function verbUsageLine(bin, group, verb, entry) {
+function verbUsageLine(bin, group, verb, entry, advertiseComplexInput) {
   const parts = entry.fields.map((field4) => {
     const token = field4.type === "boolean" ? `--${field4.flag}` : `--${field4.flag} <${field4.type === "enum" && field4.enumValues ? field4.enumValues.join("|") : field4.name}>`;
     return field4.required ? token : `[${token}]`;
   });
-  const complex = entry.hasComplexInput ? " [--input '<json>']" : "";
+  const complex = entry.hasComplexInput && advertiseComplexInput ? " [--input '<json>' | --input-file <path>]" : "";
   return `  ${bin} ${group} ${verb} ${parts.join(" ")}${complex}`.replace(/\s+$/, "");
 }
 function groupUsage(bin, group, spec) {
@@ -60071,16 +60103,47 @@ function groupUsage(bin, group, spec) {
     if (verbSpec.usage) {
       lines.push(`  ${verbSpec.usage}`);
     } else if (entry) {
-      lines.push(verbUsageLine(bin, group, verb, entry));
+      lines.push(verbUsageLine(bin, group, verb, entry, !hasBespokeHandler(verbSpec)));
     }
   }
   return lines.join("\n");
 }
+async function resolveInputFileFlag(parsed) {
+  const inputFile = parsed.values.get("input-file");
+  if (inputFile === void 0) {
+    if (parsed.flags.has("input-file")) {
+      throw new UsageError("Missing required --input-file value.");
+    }
+    return;
+  }
+  if (parsed.values.has("input") || parsed.values.has("body") || parsed.flags.has("input") || parsed.flags.has("body")) {
+    throw new UsageError("Use only one of --input, --body, or --input-file.");
+  }
+  let text;
+  try {
+    text = await readFile6(inputFile, "utf8");
+  } catch (error51) {
+    throw new UsageError(
+      `Could not read --input-file ${inputFile}: ${error51 instanceof Error ? error51.message : String(error51)}`
+    );
+  }
+  let fileJson;
+  try {
+    fileJson = JSON.parse(text);
+  } catch {
+    throw new UsageError(`--input-file ${inputFile} must be valid JSON.`);
+  }
+  if (typeof fileJson !== "object" || fileJson === null || Array.isArray(fileJson)) {
+    throw new UsageError(`--input-file ${inputFile} must contain a JSON object.`);
+  }
+  parsed.values.set("input", text);
+  parsed.values.delete("input-file");
+}
 function makeVerb(commandId, verbSpec) {
-  if (verbSpec.handler) {
+  if (hasBespokeHandler(verbSpec)) {
     return verbSpec.handler;
   }
-  return (context, rest) => {
+  return async (context, rest) => {
     const entry = MANIFEST_BY_ID.get(commandId);
     if (!entry) {
       throw new UsageError(`Unknown command ${commandId}.`);
@@ -60105,6 +60168,11 @@ function makeVerb(commandId, verbSpec) {
     const positional = hasPositional ? rest[0] : void 0;
     const flagArgs = hasPositional ? rest.slice(1) : rest;
     const parsed = parseFlags(flagArgs, booleanFlagsFor(entry, overrides));
+    assertKnownFlags(entry, parsed, overrides, INPUT_FILE_FLAG);
+    if (flagArgs.filter((token) => token === "--input-file").length > 1) {
+      throw new UsageError("Pass --input-file at most once.");
+    }
+    await resolveInputFileFlag(parsed);
     const body = buildBodyFromFlags(entry, parsed, positional, overrides);
     const render = verbSpec.render ?? renderCommandOutput;
     return execute(context, parsed, commandId, body, render);
@@ -61795,540 +61863,95 @@ function ensureTrailingSlash2(value) {
 }
 
 // src/skills.ts
-import { existsSync, mkdirSync, readFileSync as readFileSync3, rmSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync as mkdirSync2, readFileSync as readFileSync4, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import os2 from "node:os";
+import path5 from "node:path";
+
+// src/skill-install.ts
+import { closeSync, constants, fstatSync, lstatSync, mkdirSync, openSync, readdirSync, readFileSync as readFileSync3, readSync, rmSync, statSync, writeFileSync } from "node:fs";
 import os from "node:os";
 import path4 from "node:path";
-var UsageError2 = class extends Error {
+
+// src/skill-trust.ts
+import { createHash as createHash2, createPublicKey, verify } from "node:crypto";
+var TRUSTED_SIGNER_PUBLIC_KEY = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOXSsKe/zFjaoAdZdvP/esPoeM1fsCGFmxv0INDlCxaW rost-implementation-skill-release";
+var TRUSTED_SIGNER_FINGERPRINT = "SHA256:ziSyU9vhGi0Q3GaeePB1R6BI3GqXutLhepnF/4Hx4rY";
+var RELEASE_REPOSITORY = {
+  owner: "agenticoperatingsystem",
+  name: "rost-implementation-skill"
 };
-var CLIENTS = /* @__PURE__ */ new Set(["claude-code", "codex", "cursor"]);
-function skillsUsage(binName = cliBrand.binName) {
-  return [
-    `${binName} skills list [--json]`,
-    `${binName} skills catalog [--json]`,
-    `${binName} skills get --slug <slug> [--json]`,
-    `${binName} skills file --slug <slug> --path SKILL.md`,
-    `${binName} skills enable rost/<slug> [--json]`,
-    `${binName} skills install <slug-or-rost/slug> [--seat-id <id>] [--client claude-code|codex|cursor] [--version <n>] [--local-only] [--json]`,
-    `${binName} skills install-implementation [--client claude-code|codex|cursor] [--tag <tag>] [--json]`,
-    `${binName} skills sync --seat-id <id> [--client claude-code|codex|cursor] [--json]`,
-    `${binName} skills assign --seat-id <id> (--skill <slug>|--slug <slug>|--skill-version-id <id>) [--approve] [--allow-blocked-proposal] [--json]`,
-    `${binName} skills revoke (--assignment-id <id>|--seat-id <id> --skill <slug>) [--json]`,
-    `${binName} skills publish (--slug <slug>|--skill-version-id <id>) [--allow-warnings] [--json]`
-  ].join("\n");
-}
-async function runSkills(context, args, env = process.env) {
-  try {
-    const [action, ...rest] = args;
-    if (action === "help" || action === "--help" || action === "-h" || action === void 0) {
-      context.io.stdout.write(`${skillsUsage(context.binName)}
-`);
-      return action === void 0 ? 1 : 0;
-    }
-    if (action === "list") {
-      return context.run(context.client, "skill.list", {}, void 0);
-    }
-    if (action === "catalog") {
-      const parsed = parseFlags2(rest, /* @__PURE__ */ new Set(["include-unentitled"]));
-      return context.run(context.client, "skill.catalog", {
-        ...parsed.flags.has("include-unentitled") ? { include_unentitled: true } : {}
-      }, parsed.json ? void 0 : formatCatalog);
-    }
-    if (action === "get") {
-      const parsed = parseFlags2(rest);
-      return context.run(context.client, "skill.get", { slug: requireValue3(parsed, "slug") }, parsed.json ? void 0 : formatSkillDetail);
-    }
-    if (action === "file") {
-      const parsed = parseFlags2(rest);
-      return context.run(context.client, "skill.file.get", {
-        slug: requireValue3(parsed, "slug"),
-        path: requireValue3(parsed, "path")
-      }, (output) => {
-        const content = asRecord4(output).content;
-        return typeof content === "string" ? content : JSON.stringify(output, null, 2);
-      });
-    }
-    if (action === "enable") {
-      const slug2 = rest[0];
-      if (!slug2 || slug2.startsWith("--")) {
-        throw new UsageError2(`Usage: ${context.binName} skills enable rost/<slug> [--json]`);
-      }
-      const parsed = parseFlags2(rest.slice(1));
-      return context.run(context.client, "skill.enable_catalog", { slug: slug2 }, parsed.json ? void 0 : formatEnable);
-    }
-    if (action === "install") {
-      return installOne(context, rest, env);
-    }
-    if (action === "sync") {
-      return syncAssigned(context, rest, env);
-    }
-    if (action === "assign") {
-      const parsed = parseFlags2(rest, /* @__PURE__ */ new Set(["approve", "allow-blocked-proposal"]));
-      const body = withDefined({
-        seat_id: requireValue3(parsed, "seat-id"),
-        status: parsed.flags.has("approve") ? "approved" : "proposed",
-        rationale: optionalValue2(parsed, "rationale") ?? "Skill selected for this Seat.",
-        allow_blocked_proposal: parsed.flags.has("allow-blocked-proposal")
-      }, {
-        slug: optionalValue2(parsed, "skill") ?? optionalValue2(parsed, "slug"),
-        skill_version_id: optionalValue2(parsed, "skill-version-id")
-      });
-      return context.run(context.client, "skill.assign_to_seat", body, parsed.json ? void 0 : formatAssignment, { targetSeatId: body.seat_id });
-    }
-    if (action === "revoke") {
-      const parsed = parseFlags2(rest);
-      const seatId = optionalValue2(parsed, "seat-id");
-      const body = withDefined({}, {
-        assignment_id: optionalValue2(parsed, "assignment-id"),
-        seat_id: seatId,
-        slug: optionalValue2(parsed, "skill") ?? optionalValue2(parsed, "slug"),
-        skill_version_id: optionalValue2(parsed, "skill-version-id"),
-        rationale: optionalValue2(parsed, "rationale")
-      });
-      return context.run(context.client, "skill.revoke_from_seat", body, parsed.json ? void 0 : formatRevoke, seatId ? { targetSeatId: seatId } : {});
-    }
-    if (action === "publish") {
-      const parsed = parseFlags2(rest, /* @__PURE__ */ new Set(["allow-warnings"]));
-      const body = withDefined({
-        allow_warnings: parsed.flags.has("allow-warnings")
-      }, {
-        slug: optionalValue2(parsed, "slug"),
-        skill_version_id: optionalValue2(parsed, "skill-version-id")
-      });
-      return context.run(context.client, "skill.publish", body, parsed.json ? void 0 : formatPublish);
-    }
-    throw new UsageError2(`Unknown skills action: ${action}`);
-  } catch (error51) {
-    if (error51 instanceof UsageError2) {
-      context.io.stderr.write(`${error51.message}
-`);
-      return 1;
-    }
-    if (error51 instanceof CommandClientError) {
-      return printCommandError2(context.io, error51);
-    }
-    throw error51;
+var DEFAULT_RELEASE_TAG = "v0.2.0";
+var EXPECTED_DEFAULT_MANIFEST_SHA256 = "bbd745e1a625c30773fac5505f32c5152925d2474ac22d2cb4a93aa5a034ca66";
+var SKILL_MANIFEST_PROTOCOL_VERSION = 1;
+var SKILL_INSTALL_DIR_NAME = "rost-implementation";
+var SkillTrustError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "SkillTrustError";
   }
+};
+function terminalSafe(value) {
+  return value.replace(/[\x00-\x1f\x7f-\x9f]/g, "?");
 }
-async function installOne(context, args, env) {
-  const slug2 = args[0];
-  if (!slug2 || slug2.startsWith("--")) {
-    throw new UsageError2(`Usage: ${context.binName} skills install <slug-or-rost/slug> [--seat-id <id>] [--client claude-code|codex|cursor] [--version <n>] [--local-only] [--json]`);
+var SUPPORTED_CLIENTS = ["claude-code", "codex", "cursor"];
+var skillManifestSchema = external_exports.object({
+  schemaVersion: external_exports.literal(1),
+  name: external_exports.literal("rost-implementation-skill"),
+  version: external_exports.string(),
+  repository: external_exports.object({
+    owner: external_exports.string(),
+    name: external_exports.string()
+  }).strict(),
+  protocol: external_exports.object({
+    skill: external_exports.number().int(),
+    minCli: external_exports.string(),
+    maxCli: external_exports.string().nullable()
+  }).strict(),
+  supportedClients: external_exports.array(external_exports.enum(SUPPORTED_CLIENTS)).min(1),
+  doctrine: external_exports.object({
+    guide: external_exports.string(),
+    version: external_exports.string()
+  }).strict(),
+  changelogUrl: external_exports.string().url(),
+  files: external_exports.array(
+    external_exports.object({
+      path: external_exports.string(),
+      sha256: external_exports.string().regex(/^[a-f0-9]{64}$/)
+    }).strict()
+  ).min(1)
+}).strict();
+function sha256Hex(content) {
+  return createHash2("sha256").update(content).digest("hex");
+}
+function readSshString(buffer, offset) {
+  if (offset + 4 > buffer.length) {
+    throw new SkillTrustError("Truncated SSH wire string");
   }
-  const parsed = parseFlags2(args.slice(1), /* @__PURE__ */ new Set(["local-only"]));
-  const client = parseClient2(optionalValue2(parsed, "client") ?? "codex");
-  const seatId = optionalValue2(parsed, "seat-id");
-  const body = withDefined({
-    slug: slug2,
-    client,
-    local_only: parsed.flags.has("local-only")
-  }, {
-    seat_id: seatId,
-    version: optionalNumber2(parsed, "version")
-  });
-  const options = seatId ? { targetSeatId: seatId } : {};
-  const output = await executeInstallCommand(context, body, options);
-  const summary = applyLocalSkillChanges(output, client, env, { removeRevoked: false });
-  const outputRecord = asRecord4(output);
-  context.io.stdout.write(parsed.json ? `${JSON.stringify({ ...outputRecord, local: summary }, null, 2)}
-` : `${formatLocalSummary(summary)}
-`);
-  return 0;
+  const length = buffer.readUInt32BE(offset);
+  offset += 4;
+  if (offset + length > buffer.length) {
+    throw new SkillTrustError("Truncated SSH wire string payload");
+  }
+  return { value: buffer.subarray(offset, offset + length), nextOffset: offset + length };
 }
-async function syncAssigned(context, args, env) {
-  const parsed = parseFlags2(args);
-  const seatId = requireValue3(parsed, "seat-id");
-  const client = parseClient2(optionalValue2(parsed, "client") ?? "codex");
-  const output = await executeSkillCommand(context, "skill.sync_local", {
-    seat_id: seatId,
-    client
-  }, { targetSeatId: seatId });
-  const summary = applyLocalSkillChanges(output, client, env, { removeRevoked: true });
-  const outputRecord = asRecord4(output);
-  context.io.stdout.write(parsed.json ? `${JSON.stringify({ ...outputRecord, local: summary }, null, 2)}
-` : `${formatLocalSummary(summary)}
-`);
-  return 0;
+function makeSshString(value) {
+  const length = Buffer.alloc(4);
+  length.writeUInt32BE(value.length);
+  return Buffer.concat([length, value]);
 }
-async function executeInstallCommand(context, body, options) {
-  const slug2 = typeof body.slug === "string" ? body.slug : "";
-  if (slug2.startsWith("rost/") && body.local_only !== true) {
-    try {
-      return await executeSkillCommand(context, "skill.install_local", { ...body, local_only: true }, options);
-    } catch (error51) {
-      if (!isCommandConflict(error51)) {
-        throw error51;
-      }
-    }
+function parseEd25519PublicKeyLine(line) {
+  const trimmed = line.trim();
+  const parts = trimmed.split(/\s+/);
+  if (parts.length < 2) {
+    throw new SkillTrustError("Malformed SSH public key line");
   }
-  return executeSkillCommand(context, "skill.install_local", body, options);
-}
-async function executeSkillCommand(context, commandId, body, options = {}) {
-  try {
-    const output = await context.client.execute(commandId, body, options);
-    return output.output;
-  } catch (error51) {
-    const pending = context.io.interactive === true ? pendingConfirmationFromError(error51) : null;
-    if (pending && pending.commandId === commandId) {
-      renderPendingConfirmationGate2(context.io, pending);
-      context.io.stderr.write(`Approving ${pending.commandId} confirmation ${pending.confirmationId} as the interactive CLI user.
-`);
-      const approved = await context.client.execute("confirmation.approve", { confirmation_id: pending.confirmationId, reviewed: true });
-      return asRecord4(approved.output).output ?? approved.output;
-    }
-    throw error51;
+  const keyType = parts[0];
+  const base643 = parts[1];
+  if (keyType === void 0 || base643 === void 0) {
+    throw new SkillTrustError("Malformed SSH public key line");
   }
-}
-function applyLocalSkillChanges(output, client, env, options) {
-  const root = installRoot(client, env);
-  const changes = writeInstalls(output, root);
-  if (options.removeRevoked) {
-    changes.push(...removeRevokedInstalls(output, root));
-  }
-  return changes;
-}
-function writeInstalls(output, root) {
-  const installs = asArray2(asRecord4(output).installs);
-  return installs.map((entry) => {
-    const install = asRecord4(entry);
-    const slug2 = safeLocalSlug(String(install.slug ?? ""));
-    const metadata = asRecord4(install.metadata);
-    const files = asArray2(install.files).map(asRecord4);
-    const dir = path4.join(root, slug2);
-    const metadataPath = path4.join(dir, ".rost-skill.json");
-    const expectedHash = String(metadata.content_sha256 ?? "");
-    if (existingHash(metadataPath) === expectedHash) {
-      return { slug: slug2, dir, status: "unchanged", files: files.length };
-    }
-    rmSync(dir, { recursive: true, force: true });
-    mkdirSync(dir, { recursive: true });
-    for (const file2 of files) {
-      const relativePath = safeRelativePath(String(file2.path ?? ""));
-      const content = String(file2.content ?? "");
-      const target = path4.join(dir, relativePath);
-      mkdirSync(path4.dirname(target), { recursive: true });
-      writeFileSync(target, content, "utf8");
-    }
-    writeFileSync(metadataPath, `${JSON.stringify(metadata, null, 2)}
-`, "utf8");
-    return { slug: slug2, dir, status: "installed", files: files.length };
-  });
-}
-function removeRevokedInstalls(output, root) {
-  const installs = new Set(asArray2(asRecord4(output).installs).map((entry) => {
-    const slug2 = asRecord4(entry).slug;
-    return typeof slug2 === "string" ? slug2 : "";
-  }));
-  const revoked = asArray2(asRecord4(output).revoked);
-  const changes = [];
-  for (const entry of revoked) {
-    const slug2 = safeLocalSlug(String(asRecord4(entry).slug ?? ""));
-    if (installs.has(slug2)) {
-      continue;
-    }
-    const dir = path4.join(root, slug2);
-    if (!existsSync(dir)) {
-      continue;
-    }
-    rmSync(dir, { recursive: true, force: true });
-    changes.push({ slug: slug2, dir, status: "removed", files: 0 });
-  }
-  return changes;
-}
-function installRoot(client, env) {
-  const override = env.ROST_SKILL_INSTALL_ROOT;
-  if (override && override.length > 0) {
-    return path4.resolve(override, client);
-  }
-  if (client === "codex") {
-    return path4.join(env.CODEX_HOME ?? path4.join(os.homedir(), ".codex"), "skills", "rost");
-  }
-  if (client === "claude-code") {
-    return path4.join(env.CLAUDE_HOME ?? path4.join(os.homedir(), ".claude"), "skills", "rost");
-  }
-  return path4.join(os.homedir(), ".cursor", "skills", "rost");
-}
-function safeRelativePath(value) {
-  const normalized = value.trim().replaceAll("\\", "/").replace(/^\.\/+/, "");
-  if (!normalized || normalized.startsWith("/") || normalized.includes("//") || normalized.split("/").includes("..")) {
-    throw new UsageError2("Server returned an invalid skill file path.");
-  }
-  return normalized;
-}
-function safeLocalSlug(value) {
-  if (!/^[a-z0-9][a-z0-9-]{1,80}$/.test(value)) {
-    throw new UsageError2("Server returned an invalid skill slug.");
-  }
-  return value;
-}
-function existingHash(metadataPath) {
-  if (!existsSync(metadataPath)) {
-    return null;
-  }
-  try {
-    const parsed = JSON.parse(readFileSync3(metadataPath, "utf8"));
-    const hash2 = asRecord4(parsed).content_sha256;
-    return typeof hash2 === "string" ? hash2 : null;
-  } catch {
-    return null;
-  }
-}
-function parseFlags2(args, booleanFlags = /* @__PURE__ */ new Set()) {
-  const values = /* @__PURE__ */ new Map();
-  const flags = /* @__PURE__ */ new Set();
-  let json2 = false;
-  for (let index = 0; index < args.length; index += 1) {
-    const token = args[index];
-    if (token === void 0) {
-      continue;
-    }
-    if (!token.startsWith("--")) {
-      throw new UsageError2(`Unexpected argument: ${token}`);
-    }
-    const key = token.slice(2);
-    if (key === "json") {
-      json2 = true;
-      continue;
-    }
-    if (booleanFlags.has(key)) {
-      flags.add(key);
-      continue;
-    }
-    const value = args[index + 1];
-    if (value === void 0 || value.startsWith("--")) {
-      flags.add(key);
-      continue;
-    }
-    values.set(key, value);
-    index += 1;
-  }
-  return { json: json2, values, flags };
-}
-function requireValue3(parsed, key) {
-  const value = optionalValue2(parsed, key);
-  if (value === void 0) {
-    throw new UsageError2(`Missing required --${key} value.`);
-  }
-  return value;
-}
-function optionalValue2(parsed, key) {
-  const value = parsed.values.get(key);
-  return value && value.length > 0 ? value : void 0;
-}
-function optionalNumber2(parsed, key) {
-  const value = optionalValue2(parsed, key);
-  if (value === void 0) {
-    return void 0;
-  }
-  const parsedNumber = Number(value);
-  if (!Number.isSafeInteger(parsedNumber) || parsedNumber <= 0) {
-    throw new UsageError2(`--${key} must be a positive integer.`);
-  }
-  return parsedNumber;
-}
-function parseClient2(value) {
-  if (!CLIENTS.has(value)) {
-    throw new UsageError2("--client must be claude-code, codex, or cursor.");
-  }
-  return value;
-}
-function isCommandConflict(error51) {
-  return error51 instanceof CommandClientError && error51.status === 409;
-}
-function withDefined(base, extra) {
-  const next = { ...base };
-  for (const [key, value] of Object.entries(extra)) {
-    if (value !== void 0) {
-      next[key] = value;
-    }
-  }
-  return next;
-}
-function asRecord4(value) {
-  return typeof value === "object" && value !== null ? value : {};
-}
-function asArray2(value) {
-  return Array.isArray(value) ? value : [];
-}
-function formatCatalog(output) {
-  const entries = asArray2(asRecord4(output).catalog);
-  if (entries.length === 0) {
-    return "No ROST catalog skills are available for this tenant.";
-  }
-  return entries.map((entry) => {
-    const record2 = asRecord4(entry);
-    return `${record2.catalog_slug} [${record2.tier}/${record2.entitlement_status}] ${record2.name}`;
-  }).join("\n");
-}
-function formatSkillDetail(output) {
-  const skill = asRecord4(asRecord4(output).skill);
-  return `${skill.slug} v${skill.latest_version ?? "\u2014"} [${skill.status}] ${skill.name}
-${skill.description}`;
-}
-function formatEnable(output) {
-  const skill = asRecord4(asRecord4(output).skill);
-  const catalog = asRecord4(asRecord4(output).catalog);
-  return `Enabled ${catalog.catalog_slug} as ${skill.slug} v${skill.version} (${skill.skill_version_id})`;
-}
-function formatAssignment(output) {
-  const assignment = asRecord4(asRecord4(output).assignment);
-  return `${assignment.status} ${assignment.slug} for seat ${assignment.seat_id}; sync: ${String(asRecord4(output).local_sync_next_step)}`;
-}
-function formatRevoke(output) {
-  const record2 = asRecord4(output);
-  return `Revoked ${record2.slug} for seat ${record2.seat_id}; sync: ${record2.local_sync_next_step}`;
-}
-function formatPublish(output) {
-  const skill = asRecord4(asRecord4(output).skill);
-  return `Published ${skill.slug} v${skill.version} (${skill.skill_version_id})`;
-}
-function formatLocalSummary(summary) {
-  if (summary.length === 0) {
-    return "No skills to install.";
-  }
-  return summary.map((entry) => `${entry.status} ${entry.slug} -> ${entry.dir} (${entry.files} files)`).join("\n");
-}
-function printCommandError2(io, error51) {
-  if (error51.response && !error51.response.ok) {
-    const payload = {
-      code: error51.response.error.code,
-      message: error51.response.error.message,
-      ...error51.response.error.details === void 0 ? {} : { details: error51.response.error.details },
-      ...error51.response.error.help === void 0 ? {} : { help: error51.response.error.help },
-      ...error51.response.requestId === void 0 ? {} : { requestId: error51.response.requestId }
-    };
-    io.stderr.write(`${redactForLog(payload)}
-`);
-    if (error51.response.error.help !== void 0) {
-      io.stderr.write(`\u2192 try: ${redactForLog(error51.response.error.help)}
-`);
-    }
-    return error51.status === 409 ? 3 : error51.status >= 400 && error51.status < 500 ? 1 : 2;
-  }
-  io.stderr.write(`${redactForLog(error51.message)}
-`);
-  return error51.status >= 400 && error51.status < 500 ? 1 : 2;
-}
-function pendingConfirmationFromError(error51) {
-  if (!(error51 instanceof CommandClientError) || !error51.response || error51.response.ok || error51.response.error.code !== "COMMAND_CONFIRMATION_REQUIRED") {
-    return null;
-  }
-  const details = asRecord4(error51.response.error.details);
-  const confirmationId = details.confirmationId;
-  const commandId = details.commandId;
-  if (typeof confirmationId !== "string" || confirmationId.length === 0 || typeof commandId !== "string" || commandId.length === 0) {
-    return null;
-  }
-  const summary = typeof details.summary === "string" ? details.summary : void 0;
-  const riskLevel = typeof details.riskLevel === "string" ? details.riskLevel : void 0;
-  return {
-    confirmationId,
-    commandId,
-    ...summary === void 0 ? {} : { summary },
-    ...riskLevel === void 0 ? {} : { riskLevel },
-    ...details.diff === void 0 ? {} : { diff: details.diff }
-  };
-}
-function renderPendingConfirmationGate2(io, pending) {
-  if (pending.summary !== void 0) {
-    io.stderr.write(`${redactForLog(pending.summary)}
-`);
-  }
-  if (pending.riskLevel !== void 0) {
-    io.stderr.write(`Risk level: ${pending.riskLevel}
-`);
-  }
-  if (pending.diff !== void 0) {
-    io.stderr.write(`Diff:
-${redactForLog(pending.diff)}
-`);
-  }
-}
-
-// src/skill-install.ts
-import { lstatSync, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync4, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import os2 from "node:os";
-import path5 from "node:path";
-
-// src/skill-trust.ts
-import { createHash as createHash2, createPublicKey, verify } from "node:crypto";
-var TRUSTED_SIGNER_PUBLIC_KEY = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOXSsKe/zFjaoAdZdvP/esPoeM1fsCGFmxv0INDlCxaW rost-implementation-skill-release";
-var TRUSTED_SIGNER_FINGERPRINT = "SHA256:ziSyU9vhGi0Q3GaeePB1R6BI3GqXutLhepnF/4Hx4rY";
-var RELEASE_REPOSITORY = {
-  owner: "agenticoperatingsystem",
-  name: "rost-implementation-skill"
-};
-var DEFAULT_RELEASE_TAG = "v0.2.0";
-var EXPECTED_DEFAULT_MANIFEST_SHA256 = "bbd745e1a625c30773fac5505f32c5152925d2474ac22d2cb4a93aa5a034ca66";
-var SKILL_MANIFEST_PROTOCOL_VERSION = 1;
-var SKILL_INSTALL_DIR_NAME = "rost-implementation";
-var SkillTrustError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "SkillTrustError";
-  }
-};
-function terminalSafe(value) {
-  return value.replace(/[\x00-\x1f\x7f-\x9f]/g, "?");
-}
-var SUPPORTED_CLIENTS = ["claude-code", "codex", "cursor"];
-var skillManifestSchema = external_exports.object({
-  schemaVersion: external_exports.literal(1),
-  name: external_exports.literal("rost-implementation-skill"),
-  version: external_exports.string(),
-  repository: external_exports.object({
-    owner: external_exports.string(),
-    name: external_exports.string()
-  }).strict(),
-  protocol: external_exports.object({
-    skill: external_exports.number().int(),
-    minCli: external_exports.string(),
-    maxCli: external_exports.string().nullable()
-  }).strict(),
-  supportedClients: external_exports.array(external_exports.enum(SUPPORTED_CLIENTS)).min(1),
-  doctrine: external_exports.object({
-    guide: external_exports.string(),
-    version: external_exports.string()
-  }).strict(),
-  changelogUrl: external_exports.string().url(),
-  files: external_exports.array(
-    external_exports.object({
-      path: external_exports.string(),
-      sha256: external_exports.string().regex(/^[a-f0-9]{64}$/)
-    }).strict()
-  ).min(1)
-}).strict();
-function sha256Hex(content) {
-  return createHash2("sha256").update(content).digest("hex");
-}
-function readSshString(buffer, offset) {
-  if (offset + 4 > buffer.length) {
-    throw new SkillTrustError("Truncated SSH wire string");
-  }
-  const length = buffer.readUInt32BE(offset);
-  offset += 4;
-  if (offset + length > buffer.length) {
-    throw new SkillTrustError("Truncated SSH wire string payload");
-  }
-  return { value: buffer.subarray(offset, offset + length), nextOffset: offset + length };
-}
-function makeSshString(value) {
-  const length = Buffer.alloc(4);
-  length.writeUInt32BE(value.length);
-  return Buffer.concat([length, value]);
-}
-function parseEd25519PublicKeyLine(line) {
-  const trimmed = line.trim();
-  const parts = trimmed.split(/\s+/);
-  if (parts.length < 2) {
-    throw new SkillTrustError("Malformed SSH public key line");
-  }
-  const keyType = parts[0];
-  const base643 = parts[1];
-  if (keyType === void 0 || base643 === void 0) {
-    throw new SkillTrustError("Malformed SSH public key line");
-  }
-  if (keyType !== "ssh-ed25519") {
-    throw new SkillTrustError(`Unsupported SSH public key type: ${keyType}`);
+  if (keyType !== "ssh-ed25519") {
+    throw new SkillTrustError(`Unsupported SSH public key type: ${keyType}`);
   }
   let blob;
   try {
@@ -62467,7 +62090,7 @@ function verifyTagSignature(payload, signatureArmored, trustedPublicKeyLine = TR
   }
   return { ok: true, reason: "Verified" };
 }
-function safeRelativePath2(value) {
+function safeRelativePath(value) {
   if (value.includes("\\")) {
     throw new SkillTrustError("Manifest file path is not a safe relative path");
   }
@@ -62561,7 +62184,7 @@ function verifyReleaseManifest(manifest, options) {
   }
   let files;
   try {
-    files = parsed.files.map((file2) => ({ ...file2, path: safeRelativePath2(file2.path) }));
+    files = parsed.files.map((file2) => ({ ...file2, path: safeRelativePath(file2.path) }));
   } catch (error51) {
     const message = error51 instanceof Error ? error51.message : "Invalid path";
     return { ok: false, reason: message };
@@ -62571,13 +62194,13 @@ function verifyReleaseManifest(manifest, options) {
 function verifyFileChecksums(files, manifest) {
   const manifestMap = /* @__PURE__ */ new Map();
   for (const file2 of manifest.files) {
-    manifestMap.set(safeRelativePath2(file2.path), file2.sha256);
+    manifestMap.set(safeRelativePath(file2.path), file2.sha256);
   }
   const seen = /* @__PURE__ */ new Set();
   for (const file2 of files) {
     let normalized;
     try {
-      normalized = safeRelativePath2(file2.path);
+      normalized = safeRelativePath(file2.path);
     } catch (error51) {
       const message = error51 instanceof Error ? error51.message : "Invalid path";
       return { ok: false, reason: message };
@@ -62663,13 +62286,14 @@ function verifyReleaseTrust(input) {
 }
 
 // src/skill-install.ts
-var UsageError3 = class extends Error {
+var UsageError2 = class extends Error {
 };
+var O_NOFOLLOW_FLAG = typeof constants.O_NOFOLLOW === "number" ? constants.O_NOFOLLOW : 0;
 function writeErrorLine(io, message) {
   io.stderr.write(`${terminalSafe(message)}
 `);
 }
-var CLIENTS2 = /* @__PURE__ */ new Set(["claude-code", "codex", "cursor"]);
+var CLIENTS = /* @__PURE__ */ new Set(["claude-code", "codex", "cursor"]);
 var REPO_PATH = `${RELEASE_REPOSITORY.owner}/${RELEASE_REPOSITORY.name}`;
 var GITHUB_JSON_HEADERS = { "User-Agent": "rost-cli", "Accept": "application/vnd.github+json" };
 var GITHUB_RAW_HEADERS = { "User-Agent": "rost-cli", "Accept": "application/vnd.github.raw+json" };
@@ -62756,11 +62380,12 @@ async function runInstallImplementation(context, args) {
   let client;
   let tag;
   try {
-    parsed = parseFlags3(args);
-    client = parseClient3(optionalValue3(parsed, "client") ?? "codex");
-    tag = optionalValue3(parsed, "tag") ?? DEFAULT_RELEASE_TAG;
+    parsed = parseFlags2(args);
+    client = parseClient2(optionalValue2(parsed, "client") ?? "codex");
+    tag = optionalValue2(parsed, "tag") ?? DEFAULT_RELEASE_TAG;
+    installRoot(client, context.env);
   } catch (error51) {
-    if (error51 instanceof UsageError3) {
+    if (error51 instanceof UsageError2) {
       writeErrorLine(context.io, error51.message);
       return 1;
     }
@@ -62923,10 +62548,11 @@ async function installRelease(context, plan, testOverrides = {}) {
   }
   let root;
   let legacyNotice;
+  let viaOverride;
   try {
-    ({ root, legacyNotice } = installRoot2(plan.client, context.env));
+    ({ root, legacyNotice, viaOverride } = installRoot(plan.client, context.env));
   } catch (error51) {
-    if (error51 instanceof UsageError3) {
+    if (error51 instanceof UsageError2) {
       writeErrorLine(context.io, error51.message);
       return 1;
     }
@@ -62935,7 +62561,7 @@ async function installRelease(context, plan, testOverrides = {}) {
   if (legacyNotice !== null) {
     writeErrorLine(context.io, legacyNotice);
   }
-  const dir = path5.join(root, SKILL_INSTALL_DIR_NAME);
+  const dir = path4.join(root, SKILL_INSTALL_DIR_NAME);
   const manifestSha256 = sha256Hex(plan.manifestRaw);
   const existingMarker = readMarker(dir);
   const installedState = existingMarker?.manifestSha256 === manifestSha256 ? verifyInstalledTree(dir, manifest) : null;
@@ -62959,28 +62585,31 @@ async function installRelease(context, plan, testOverrides = {}) {
         })}
 `
       );
+      writeErrorLine(context.io, clientLoadLine(plan.client, dir, viaOverride));
     } else {
       context.io.stdout.write(
-        `installed rost-implementation ${plan.tag} (${commitSha.slice(0, 7)}) -> ${dir} (${plan.files.length} files)
+        `unchanged rost-implementation ${plan.tag} (${commitSha.slice(0, 7)}) -> ${humanPath(dir)} (${plan.files.length} files)
 `
       );
+      context.io.stdout.write(`${clientLoadLine(plan.client, dir, viaOverride)}
+`);
       context.io.stdout.write(`${verifiedSignerLine()}
 `);
     }
     return 0;
   }
-  rmSync2(dir, { recursive: true, force: true });
-  mkdirSync2(dir, { recursive: true });
+  rmSync(dir, { recursive: true, force: true });
+  mkdirSync(dir, { recursive: true });
   for (const file2 of plan.files) {
-    const target = path5.join(dir, file2.path);
-    const resolvedTarget = path5.resolve(target);
-    const resolvedDir = path5.resolve(dir);
-    if (!resolvedTarget.startsWith(`${resolvedDir}${path5.sep}`)) {
+    const target = path4.join(dir, file2.path);
+    const resolvedTarget = path4.resolve(target);
+    const resolvedDir = path4.resolve(dir);
+    if (!resolvedTarget.startsWith(`${resolvedDir}${path4.sep}`)) {
       writeErrorLine(context.io, `Refusing to write file outside target directory: ${file2.path}`);
       return 1;
     }
-    mkdirSync2(path5.dirname(target), { recursive: true });
-    writeFileSync2(target, file2.content, "utf8");
+    mkdirSync(path4.dirname(target), { recursive: true });
+    writeFileSync(target, file2.content, "utf8");
   }
   const writtenState = verifyInstalledTree(dir, manifest);
   if (!writtenState.ok) {
@@ -63003,11 +62632,14 @@ async function installRelease(context, plan, testOverrides = {}) {
       })}
 `
     );
+    writeErrorLine(context.io, clientLoadLine(plan.client, dir, viaOverride));
   } else {
     context.io.stdout.write(
-      `installed rost-implementation ${plan.tag} (${commitSha.slice(0, 7)}) -> ${dir} (${plan.files.length} files)
+      `installed rost-implementation ${plan.tag} (${commitSha.slice(0, 7)}) -> ${humanPath(dir)} (${plan.files.length} files)
 `
     );
+    context.io.stdout.write(`${clientLoadLine(plan.client, dir, viaOverride)}
+`);
     context.io.stdout.write(`${verifiedSignerLine()}
 `);
   }
@@ -63018,6 +62650,23 @@ function verifiedSignerLine() {
   const fingerprintBase = TRUSTED_SIGNER_FINGERPRINT.replace("SHA256:", "");
   return `verified signed release; signer SHA256:${fingerprintBase.slice(-12)} (last 12 chars)`;
 }
+function clientDisplay(client) {
+  if (client === "claude-code") return "Claude Code";
+  if (client === "codex") return "Codex";
+  return "Cursor";
+}
+function humanPath(dir) {
+  if (terminalSafe(dir) === dir) {
+    return dir;
+  }
+  return JSON.stringify(dir).replace(/[\x7f-\x9f]/gu, (char) => `\\u${char.charCodeAt(0).toString(16).padStart(4, "0")}`);
+}
+function clientLoadLine(client, dir, viaOverride) {
+  if (viaOverride) {
+    return `ROST_SKILL_INSTALL_ROOT chose ${humanPath(dir)} \u2014 ${clientDisplay(client)} loads from its own root, which may differ`;
+  }
+  return `${clientDisplay(client)} will load this from ${humanPath(dir)}`;
+}
 function writeMarker(dir, input) {
   const marker = {
     source: `github.com/${REPO_PATH}`,
@@ -63029,7 +62678,7 @@ function writeMarker(dir, input) {
     // operator's evidence that the pre-launch re-run actually happened.
     installedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  writeFileSync2(path5.join(dir, SKILL_MARKER_FILE), `${JSON.stringify(marker, null, 2)}
+  writeFileSync(path4.join(dir, SKILL_MARKER_FILE), `${JSON.stringify(marker, null, 2)}
 `, "utf8");
 }
 function listInstalledFiles(dir) {
@@ -63037,7 +62686,7 @@ function listInstalledFiles(dir) {
   const walk = (current, prefix) => {
     for (const name of readdirSync(current)) {
       const relative = prefix === "" ? name : `${prefix}/${name}`;
-      const absolute = path5.join(current, name);
+      const absolute = path4.join(current, name);
       const stats = lstatSync(absolute);
       if (stats.isSymbolicLink() || !stats.isFile() && !stats.isDirectory()) {
         throw new Error(`refusing to verify a symlink or special file: ${relative}`);
@@ -63049,7 +62698,7 @@ function listInstalledFiles(dir) {
       if (relative === SKILL_MARKER_FILE) {
         continue;
       }
-      files.push({ path: relative, absolute });
+      files.push({ path: relative, absolute, dev: stats.dev, ino: stats.ino });
     }
   };
   walk(dir, "");
@@ -63070,70 +62719,445 @@ function verifyInstalledTree(dir, manifest) {
   if (present.length !== manifestPaths.size) {
     return { ok: false, reason: "the installed tree is missing files listed in the signed manifest" };
   }
+  for (const file2 of present) {
+    try {
+      if (statSync(file2.absolute).size > MAX_RESPONSE_BYTES) {
+        return { ok: false, reason: `an installed file exceeds the ${MAX_RESPONSE_BYTES}-byte verification cap: ${file2.path}` };
+      }
+    } catch (error51) {
+      return { ok: false, reason: error51 instanceof Error ? error51.message : "an installed file is unreadable" };
+    }
+  }
   function* readEach() {
     for (const file2 of present) {
-      yield { path: file2.path, content: readFileSync4(file2.absolute) };
+      const fd = openSync(file2.absolute, constants.O_RDONLY | O_NOFOLLOW_FLAG);
+      try {
+        const opened = fstatSync(fd);
+        if (opened.dev !== file2.dev || opened.ino !== file2.ino) {
+          throw new Error(`an installed file changed between enumeration and verification: ${file2.path}`);
+        }
+        const size = opened.size;
+        if (size > MAX_RESPONSE_BYTES) {
+          throw new Error(`an installed file exceeds the ${MAX_RESPONSE_BYTES}-byte verification cap: ${file2.path}`);
+        }
+        const buffer = Buffer.alloc(size + 1);
+        let bytesRead = 0;
+        while (bytesRead < buffer.length) {
+          const chunk = readSync(fd, buffer, bytesRead, buffer.length - bytesRead, null);
+          if (chunk === 0) {
+            break;
+          }
+          bytesRead += chunk;
+        }
+        if (bytesRead > MAX_RESPONSE_BYTES) {
+          throw new Error(`an installed file exceeds the ${MAX_RESPONSE_BYTES}-byte verification cap: ${file2.path}`);
+        }
+        yield { path: file2.path, content: buffer.subarray(0, bytesRead) };
+      } finally {
+        closeSync(fd);
+      }
+    }
+  }
+  try {
+    return verifyFileChecksums(readEach(), manifest);
+  } catch (error51) {
+    return { ok: false, reason: error51 instanceof Error ? error51.message : "an installed file is unreadable" };
+  }
+}
+function readMarker(dir) {
+  try {
+    const content = readFileSync3(path4.join(dir, SKILL_MARKER_FILE), "utf8");
+    const parsed = JSON.parse(content);
+    if (typeof parsed === "object" && parsed !== null) {
+      return parsed;
+    }
+  } catch {
+  }
+  return null;
+}
+function resolveClaudeSkillInstallRoot(env) {
+  const configDir = requireNonBlank("CLAUDE_CONFIG_DIR", env.CLAUDE_CONFIG_DIR);
+  const legacyHome = requireNonBlank("CLAUDE_HOME", env.CLAUDE_HOME);
+  if (configDir !== null) {
+    const disagrees = legacyHome !== null && path4.resolve(legacyHome) !== path4.resolve(configDir);
+    return {
+      root: path4.resolve(path4.join(configDir, "skills")),
+      legacyNotice: disagrees ? `NOTICE: CLAUDE_HOME (${humanPath(legacyHome)}) is ignored; Claude Code reads CLAUDE_CONFIG_DIR (${humanPath(configDir)}).` : null
+    };
+  }
+  if (legacyHome !== null) {
+    throw new UsageError2(
+      `CLAUDE_HOME (${humanPath(legacyHome)}) is set, but Claude Code does not read it \u2014 the Skill would install where Claude Code never loads it. Set CLAUDE_CONFIG_DIR=${humanPath(legacyHome)} instead, or unset CLAUDE_HOME to install under the default ~/.claude.`
+    );
+  }
+  const home = resolveHome(env);
+  return { root: path4.resolve(path4.join(home, ".claude", "skills")), legacyNotice: null };
+}
+function requireNonBlank(name, value) {
+  if (value === void 0 || value === "") {
+    return null;
+  }
+  if (value.trim().length === 0) {
+    throw new UsageError2(`${name} is set to a blank value; unset it or give it a real path.`);
+  }
+  return value;
+}
+function resolveHome(env) {
+  const explicit = requireNonBlank("HOME", env.HOME);
+  if (explicit !== null) {
+    return explicit;
+  }
+  let osHome = "";
+  try {
+    osHome = os.userInfo().homedir;
+  } catch {
+  }
+  if (osHome.trim().length === 0) {
+    throw new UsageError2("HOME is unset or blank and the OS reports no home directory for this user; set HOME to a real path.");
+  }
+  return osHome;
+}
+function resolveCodexSkillsRoot(env) {
+  const codexHome = requireNonBlank("CODEX_HOME", env.CODEX_HOME);
+  return path4.resolve(path4.join(codexHome ?? path4.join(resolveHome(env), ".codex"), "skills"));
+}
+function installRoot(client, env) {
+  const override = requireNonBlank("ROST_SKILL_INSTALL_ROOT", env.ROST_SKILL_INSTALL_ROOT);
+  if (override !== null) {
+    return { root: path4.resolve(override, client), legacyNotice: null, viaOverride: true };
+  }
+  if (client === "codex") {
+    return { root: resolveCodexSkillsRoot(env), legacyNotice: null, viaOverride: false };
+  }
+  if (client === "claude-code") {
+    return { ...resolveClaudeSkillInstallRoot(env), viaOverride: false };
+  }
+  return { root: path4.resolve(path4.join(resolveHome(env), ".cursor", "skills")), legacyNotice: null, viaOverride: false };
+}
+function parseFlags2(args) {
+  const values = /* @__PURE__ */ new Map();
+  const flags = /* @__PURE__ */ new Set();
+  let json2 = false;
+  for (let index = 0; index < args.length; index += 1) {
+    const token = args[index];
+    if (token === void 0) {
+      continue;
+    }
+    if (!token.startsWith("--")) {
+      throw new UsageError2(`Unexpected argument: ${token}`);
+    }
+    const key = token.slice(2);
+    if (key === "json") {
+      json2 = true;
+      continue;
+    }
+    if (key === "client" || key === "tag") {
+      const value = args[index + 1];
+      if (value === void 0 || value.startsWith("--")) {
+        throw new UsageError2(`--${key} requires a value.`);
+      }
+      values.set(key, value);
+      index += 1;
+      continue;
+    }
+    throw new UsageError2(`Unexpected flag: --${key}`);
+  }
+  return { json: json2, values, flags };
+}
+function optionalValue2(parsed, key) {
+  const value = parsed.values.get(key);
+  return value !== void 0 && value.length > 0 ? value : void 0;
+}
+function parseClient2(value) {
+  if (!CLIENTS.has(value)) {
+    throw new UsageError2("--client must be claude-code, codex, or cursor.");
+  }
+  return value;
+}
+
+// src/skills.ts
+var UsageError3 = class extends Error {
+};
+var CLIENTS2 = /* @__PURE__ */ new Set(["claude-code", "codex", "cursor"]);
+function skillsUsage(binName = cliBrand.binName) {
+  return [
+    `${binName} skills list [--json]`,
+    `${binName} skills catalog [--json]`,
+    `${binName} skills get --slug <slug> [--json]`,
+    `${binName} skills file --slug <slug> --path SKILL.md`,
+    `${binName} skills enable rost/<slug> [--json]`,
+    `${binName} skills install <slug-or-rost/slug> [--seat-id <id>] [--client claude-code|codex|cursor] [--version <n>] [--local-only] [--json]`,
+    `${binName} skills install-implementation [--client claude-code|codex|cursor] [--tag <tag>] [--json]`,
+    `${binName} skills sync --seat-id <id> [--client claude-code|codex|cursor] [--json]`,
+    `${binName} skills assign --seat-id <id> (--skill <slug>|--slug <slug>|--skill-version-id <id>) [--approve] [--allow-blocked-proposal] [--json]`,
+    `${binName} skills revoke (--assignment-id <id>|--seat-id <id> --skill <slug>) [--json]`,
+    `${binName} skills publish (--slug <slug>|--skill-version-id <id>) [--allow-warnings] [--json]`
+  ].join("\n");
+}
+async function runSkills(context, args, env = process.env) {
+  try {
+    const [action, ...rest] = args;
+    if (action === "help" || action === "--help" || action === "-h" || action === void 0) {
+      context.io.stdout.write(`${skillsUsage(context.binName)}
+`);
+      return action === void 0 ? 1 : 0;
+    }
+    if (action === "list") {
+      return context.run(context.client, "skill.list", {}, void 0);
+    }
+    if (action === "catalog") {
+      const parsed = parseFlags3(rest, /* @__PURE__ */ new Set(["include-unentitled"]));
+      return context.run(context.client, "skill.catalog", {
+        ...parsed.flags.has("include-unentitled") ? { include_unentitled: true } : {}
+      }, parsed.json ? void 0 : formatCatalog);
+    }
+    if (action === "get") {
+      const parsed = parseFlags3(rest);
+      return context.run(context.client, "skill.get", { slug: requireValue3(parsed, "slug") }, parsed.json ? void 0 : formatSkillDetail);
+    }
+    if (action === "file") {
+      const parsed = parseFlags3(rest);
+      return context.run(context.client, "skill.file.get", {
+        slug: requireValue3(parsed, "slug"),
+        path: requireValue3(parsed, "path")
+      }, (output) => {
+        const content = asRecord4(output).content;
+        return typeof content === "string" ? content : JSON.stringify(output, null, 2);
+      });
+    }
+    if (action === "enable") {
+      const slug2 = rest[0];
+      if (!slug2 || slug2.startsWith("--")) {
+        throw new UsageError3(`Usage: ${context.binName} skills enable rost/<slug> [--json]`);
+      }
+      const parsed = parseFlags3(rest.slice(1));
+      return context.run(context.client, "skill.enable_catalog", { slug: slug2 }, parsed.json ? void 0 : formatEnable);
+    }
+    if (action === "install") {
+      return await installOne(context, rest, env);
+    }
+    if (action === "sync") {
+      return await syncAssigned(context, rest, env);
+    }
+    if (action === "assign") {
+      const parsed = parseFlags3(rest, /* @__PURE__ */ new Set(["approve", "allow-blocked-proposal"]));
+      const body = withDefined({
+        seat_id: requireValue3(parsed, "seat-id"),
+        status: parsed.flags.has("approve") ? "approved" : "proposed",
+        rationale: optionalValue3(parsed, "rationale") ?? "Skill selected for this Seat.",
+        allow_blocked_proposal: parsed.flags.has("allow-blocked-proposal")
+      }, {
+        slug: optionalValue3(parsed, "skill") ?? optionalValue3(parsed, "slug"),
+        skill_version_id: optionalValue3(parsed, "skill-version-id")
+      });
+      return context.run(context.client, "skill.assign_to_seat", body, parsed.json ? void 0 : formatAssignment, { targetSeatId: body.seat_id });
+    }
+    if (action === "revoke") {
+      const parsed = parseFlags3(rest);
+      const seatId = optionalValue3(parsed, "seat-id");
+      const body = withDefined({}, {
+        assignment_id: optionalValue3(parsed, "assignment-id"),
+        seat_id: seatId,
+        slug: optionalValue3(parsed, "skill") ?? optionalValue3(parsed, "slug"),
+        skill_version_id: optionalValue3(parsed, "skill-version-id"),
+        rationale: optionalValue3(parsed, "rationale")
+      });
+      return context.run(context.client, "skill.revoke_from_seat", body, parsed.json ? void 0 : formatRevoke, seatId ? { targetSeatId: seatId } : {});
+    }
+    if (action === "publish") {
+      const parsed = parseFlags3(rest, /* @__PURE__ */ new Set(["allow-warnings"]));
+      const body = withDefined({
+        allow_warnings: parsed.flags.has("allow-warnings")
+      }, {
+        slug: optionalValue3(parsed, "slug"),
+        skill_version_id: optionalValue3(parsed, "skill-version-id")
+      });
+      return context.run(context.client, "skill.publish", body, parsed.json ? void 0 : formatPublish);
+    }
+    throw new UsageError3(`Unknown skills action: ${action}`);
+  } catch (error51) {
+    if (error51 instanceof UsageError3) {
+      context.io.stderr.write(`${error51.message}
+`);
+      return 1;
+    }
+    if (error51 instanceof CommandClientError) {
+      return printCommandError2(context.io, error51);
+    }
+    throw error51;
+  }
+}
+async function installOne(context, args, env) {
+  const slug2 = args[0];
+  if (!slug2 || slug2.startsWith("--")) {
+    throw new UsageError3(`Usage: ${context.binName} skills install <slug-or-rost/slug> [--seat-id <id>] [--client claude-code|codex|cursor] [--version <n>] [--local-only] [--json]`);
+  }
+  const parsed = parseFlags3(args.slice(1), /* @__PURE__ */ new Set(["local-only"]));
+  const client = parseClient3(optionalValue3(parsed, "client") ?? "codex");
+  const seatId = optionalValue3(parsed, "seat-id");
+  const body = withDefined({
+    slug: slug2,
+    client,
+    local_only: parsed.flags.has("local-only")
+  }, {
+    seat_id: seatId,
+    version: optionalNumber2(parsed, "version")
+  });
+  const options = seatId ? { targetSeatId: seatId } : {};
+  const output = await executeInstallCommand(context, body, options);
+  const summary = applyLocalSkillChanges(output, client, env, { removeRevoked: false });
+  const outputRecord = asRecord4(output);
+  context.io.stdout.write(parsed.json ? `${JSON.stringify({ ...outputRecord, local: summary }, null, 2)}
+` : `${formatLocalSummary(summary)}
+`);
+  return 0;
+}
+async function syncAssigned(context, args, env) {
+  const parsed = parseFlags3(args);
+  const seatId = requireValue3(parsed, "seat-id");
+  const client = parseClient3(optionalValue3(parsed, "client") ?? "codex");
+  const output = await executeSkillCommand(context, "skill.sync_local", {
+    seat_id: seatId,
+    client
+  }, { targetSeatId: seatId });
+  const summary = applyLocalSkillChanges(output, client, env, { removeRevoked: true });
+  const outputRecord = asRecord4(output);
+  context.io.stdout.write(parsed.json ? `${JSON.stringify({ ...outputRecord, local: summary }, null, 2)}
+` : `${formatLocalSummary(summary)}
+`);
+  return 0;
+}
+async function executeInstallCommand(context, body, options) {
+  const slug2 = typeof body.slug === "string" ? body.slug : "";
+  if (slug2.startsWith("rost/") && body.local_only !== true) {
+    try {
+      return await executeSkillCommand(context, "skill.install_local", { ...body, local_only: true }, options);
+    } catch (error51) {
+      if (!isCommandConflict(error51)) {
+        throw error51;
+      }
     }
   }
+  return executeSkillCommand(context, "skill.install_local", body, options);
+}
+async function executeSkillCommand(context, commandId, body, options = {}) {
   try {
-    return verifyFileChecksums(readEach(), manifest);
+    const output = await context.client.execute(commandId, body, options);
+    return output.output;
   } catch (error51) {
-    return { ok: false, reason: error51 instanceof Error ? error51.message : "an installed file is unreadable" };
+    const pending = context.io.interactive === true ? pendingConfirmationFromError(error51) : null;
+    if (pending && pending.commandId === commandId) {
+      renderPendingConfirmationGate2(context.io, pending);
+      context.io.stderr.write(`Approving ${pending.commandId} confirmation ${pending.confirmationId} as the interactive CLI user.
+`);
+      const approved = await context.client.execute("confirmation.approve", { confirmation_id: pending.confirmationId, reviewed: true });
+      return asRecord4(approved.output).output ?? approved.output;
+    }
+    throw error51;
   }
 }
-function readMarker(dir) {
-  try {
-    const content = readFileSync4(path5.join(dir, SKILL_MARKER_FILE), "utf8");
-    const parsed = JSON.parse(content);
-    if (typeof parsed === "object" && parsed !== null) {
-      return parsed;
+function applyLocalSkillChanges(output, client, env, options) {
+  const root = installRoot2(client, env);
+  const changes = writeInstalls(output, root);
+  if (options.removeRevoked) {
+    changes.push(...removeRevokedInstalls(output, root));
+  }
+  return changes;
+}
+function writeInstalls(output, root) {
+  const installs = asArray2(asRecord4(output).installs);
+  return installs.map((entry) => {
+    const install = asRecord4(entry);
+    const slug2 = safeLocalSlug(String(install.slug ?? ""));
+    const metadata = asRecord4(install.metadata);
+    const files = asArray2(install.files).map(asRecord4);
+    const dir = path5.join(root, slug2);
+    const metadataPath = path5.join(dir, ".rost-skill.json");
+    const expectedHash = String(metadata.content_sha256 ?? "");
+    if (existingHash(metadataPath) === expectedHash) {
+      return { slug: slug2, dir, status: "unchanged", files: files.length };
     }
-  } catch {
+    rmSync2(dir, { recursive: true, force: true });
+    mkdirSync2(dir, { recursive: true });
+    for (const file2 of files) {
+      const relativePath = safeRelativePath2(String(file2.path ?? ""));
+      const content = String(file2.content ?? "");
+      const target = path5.join(dir, relativePath);
+      mkdirSync2(path5.dirname(target), { recursive: true });
+      writeFileSync2(target, content, "utf8");
+    }
+    writeFileSync2(metadataPath, `${JSON.stringify(metadata, null, 2)}
+`, "utf8");
+    return { slug: slug2, dir, status: "installed", files: files.length };
+  });
+}
+function removeRevokedInstalls(output, root) {
+  const installs = new Set(asArray2(asRecord4(output).installs).map((entry) => {
+    const slug2 = asRecord4(entry).slug;
+    return typeof slug2 === "string" ? slug2 : "";
+  }));
+  const revoked = asArray2(asRecord4(output).revoked);
+  const changes = [];
+  for (const entry of revoked) {
+    const slug2 = safeLocalSlug(String(asRecord4(entry).slug ?? ""));
+    if (installs.has(slug2)) {
+      continue;
+    }
+    const dir = path5.join(root, slug2);
+    if (!existsSync(dir)) {
+      continue;
+    }
+    rmSync2(dir, { recursive: true, force: true });
+    changes.push({ slug: slug2, dir, status: "removed", files: 0 });
   }
-  return null;
+  return changes;
 }
-function resolveClaudeSkillInstallRoot(env) {
-  const configDir = requireNonBlank("CLAUDE_CONFIG_DIR", env.CLAUDE_CONFIG_DIR);
-  const legacyHome = requireNonBlank("CLAUDE_HOME", env.CLAUDE_HOME);
-  if (configDir !== null) {
-    const disagrees = legacyHome !== null && path5.resolve(legacyHome) !== path5.resolve(configDir);
-    return {
-      root: path5.join(configDir, "skills"),
-      legacyNotice: disagrees ? `NOTICE: CLAUDE_HOME (${legacyHome}) is ignored; Claude Code reads CLAUDE_CONFIG_DIR (${configDir}).` : null
-    };
+function installRoot2(client, env) {
+  const override = env.ROST_SKILL_INSTALL_ROOT;
+  if (override && override.length > 0) {
+    return path5.resolve(override, client);
   }
-  if (legacyHome !== null) {
-    return {
-      root: path5.join(legacyHome, "skills"),
-      legacyNotice: "NOTICE: CLAUDE_HOME is deprecated and Claude Code does not read it; set CLAUDE_CONFIG_DIR instead."
-    };
+  if (client === "codex") {
+    try {
+      return path5.join(resolveCodexSkillsRoot(env), "rost");
+    } catch (error51) {
+      if (error51 instanceof UsageError2) {
+        throw new UsageError3(error51.message);
+      }
+      throw error51;
+    }
+  }
+  if (client === "claude-code") {
+    return path5.join(env.CLAUDE_HOME ?? path5.join(os2.homedir(), ".claude"), "skills", "rost");
   }
-  const home = requireNonBlank("HOME", env.HOME) ?? os2.homedir();
-  return { root: path5.join(home, ".claude", "skills"), legacyNotice: null };
+  return path5.join(os2.homedir(), ".cursor", "skills", "rost");
 }
-function requireNonBlank(name, value) {
-  if (value === void 0 || value === "") {
-    return null;
+function safeRelativePath2(value) {
+  const normalized = value.trim().replaceAll("\\", "/").replace(/^\.\/+/, "");
+  if (!normalized || normalized.startsWith("/") || normalized.includes("//") || normalized.split("/").includes("..")) {
+    throw new UsageError3("Server returned an invalid skill file path.");
   }
-  if (value.trim().length === 0) {
-    throw new UsageError3(`${name} is set to a blank value; unset it or give it a real path.`);
+  return normalized;
+}
+function safeLocalSlug(value) {
+  if (!/^[a-z0-9][a-z0-9-]{1,80}$/.test(value)) {
+    throw new UsageError3("Server returned an invalid skill slug.");
   }
   return value;
 }
-function installRoot2(client, env) {
-  const override = requireNonBlank("ROST_SKILL_INSTALL_ROOT", env.ROST_SKILL_INSTALL_ROOT);
-  if (override !== null) {
-    return { root: path5.resolve(override, client), legacyNotice: null };
-  }
-  if (client === "codex") {
-    return { root: path5.join(env.CODEX_HOME ?? path5.join(os2.homedir(), ".codex"), "skills"), legacyNotice: null };
+function existingHash(metadataPath) {
+  if (!existsSync(metadataPath)) {
+    return null;
   }
-  if (client === "claude-code") {
-    return resolveClaudeSkillInstallRoot(env);
+  try {
+    const parsed = JSON.parse(readFileSync4(metadataPath, "utf8"));
+    const hash2 = asRecord4(parsed).content_sha256;
+    return typeof hash2 === "string" ? hash2 : null;
+  } catch {
+    return null;
   }
-  return { root: path5.join(os2.homedir(), ".cursor", "skills"), legacyNotice: null };
 }
-function parseFlags3(args) {
+function parseFlags3(args, booleanFlags = /* @__PURE__ */ new Set()) {
   const values = /* @__PURE__ */ new Map();
   const flags = /* @__PURE__ */ new Set();
   let json2 = false;
@@ -63150,22 +63174,41 @@ function parseFlags3(args) {
       json2 = true;
       continue;
     }
-    if (key === "client" || key === "tag") {
-      const value = args[index + 1];
-      if (value === void 0 || value.startsWith("--")) {
-        throw new UsageError3(`--${key} requires a value.`);
-      }
-      values.set(key, value);
-      index += 1;
+    if (booleanFlags.has(key)) {
+      flags.add(key);
+      continue;
+    }
+    const value = args[index + 1];
+    if (value === void 0 || value.startsWith("--")) {
+      flags.add(key);
       continue;
     }
-    throw new UsageError3(`Unexpected flag: --${key}`);
+    values.set(key, value);
+    index += 1;
   }
   return { json: json2, values, flags };
 }
+function requireValue3(parsed, key) {
+  const value = optionalValue3(parsed, key);
+  if (value === void 0) {
+    throw new UsageError3(`Missing required --${key} value.`);
+  }
+  return value;
+}
 function optionalValue3(parsed, key) {
   const value = parsed.values.get(key);
-  return value !== void 0 && value.length > 0 ? value : void 0;
+  return value && value.length > 0 ? value : void 0;
+}
+function optionalNumber2(parsed, key) {
+  const value = optionalValue3(parsed, key);
+  if (value === void 0) {
+    return void 0;
+  }
+  const parsedNumber = Number(value);
+  if (!Number.isSafeInteger(parsedNumber) || parsedNumber <= 0) {
+    throw new UsageError3(`--${key} must be a positive integer.`);
+  }
+  return parsedNumber;
 }
 function parseClient3(value) {
   if (!CLIENTS2.has(value)) {
@@ -63173,6 +63216,118 @@ function parseClient3(value) {
   }
   return value;
 }
+function isCommandConflict(error51) {
+  return error51 instanceof CommandClientError && error51.status === 409;
+}
+function withDefined(base, extra) {
+  const next = { ...base };
+  for (const [key, value] of Object.entries(extra)) {
+    if (value !== void 0) {
+      next[key] = value;
+    }
+  }
+  return next;
+}
+function asRecord4(value) {
+  return typeof value === "object" && value !== null ? value : {};
+}
+function asArray2(value) {
+  return Array.isArray(value) ? value : [];
+}
+function formatCatalog(output) {
+  const entries = asArray2(asRecord4(output).catalog);
+  if (entries.length === 0) {
+    return "No ROST catalog skills are available for this tenant.";
+  }
+  return entries.map((entry) => {
+    const record2 = asRecord4(entry);
+    return `${record2.catalog_slug} [${record2.tier}/${record2.entitlement_status}] ${record2.name}`;
+  }).join("\n");
+}
+function formatSkillDetail(output) {
+  const skill = asRecord4(asRecord4(output).skill);
+  return `${skill.slug} v${skill.latest_version ?? "\u2014"} [${skill.status}] ${skill.name}
+${skill.description}`;
+}
+function formatEnable(output) {
+  const skill = asRecord4(asRecord4(output).skill);
+  const catalog = asRecord4(asRecord4(output).catalog);
+  return `Enabled ${catalog.catalog_slug} as ${skill.slug} v${skill.version} (${skill.skill_version_id})`;
+}
+function formatAssignment(output) {
+  const assignment = asRecord4(asRecord4(output).assignment);
+  return `${assignment.status} ${assignment.slug} for seat ${assignment.seat_id}; sync: ${String(asRecord4(output).local_sync_next_step)}`;
+}
+function formatRevoke(output) {
+  const record2 = asRecord4(output);
+  return `Revoked ${record2.slug} for seat ${record2.seat_id}; sync: ${record2.local_sync_next_step}`;
+}
+function formatPublish(output) {
+  const skill = asRecord4(asRecord4(output).skill);
+  return `Published ${skill.slug} v${skill.version} (${skill.skill_version_id})`;
+}
+function formatLocalSummary(summary) {
+  if (summary.length === 0) {
+    return "No skills to install.";
+  }
+  return summary.map((entry) => `${entry.status} ${entry.slug} -> ${entry.dir} (${entry.files} files)`).join("\n");
+}
+function printCommandError2(io, error51) {
+  if (error51.response && !error51.response.ok) {
+    const payload = {
+      code: error51.response.error.code,
+      message: error51.response.error.message,
+      ...error51.response.error.details === void 0 ? {} : { details: error51.response.error.details },
+      ...error51.response.error.help === void 0 ? {} : { help: error51.response.error.help },
+      ...error51.response.requestId === void 0 ? {} : { requestId: error51.response.requestId }
+    };
+    io.stderr.write(`${redactForLog(payload)}
+`);
+    if (error51.response.error.help !== void 0) {
+      io.stderr.write(`\u2192 try: ${redactForLog(error51.response.error.help)}
+`);
+    }
+    return error51.status === 409 ? 3 : error51.status >= 400 && error51.status < 500 ? 1 : 2;
+  }
+  io.stderr.write(`${redactForLog(error51.message)}
+`);
+  return error51.status >= 400 && error51.status < 500 ? 1 : 2;
+}
+function pendingConfirmationFromError(error51) {
+  if (!(error51 instanceof CommandClientError) || !error51.response || error51.response.ok || error51.response.error.code !== "COMMAND_CONFIRMATION_REQUIRED") {
+    return null;
+  }
+  const details = asRecord4(error51.response.error.details);
+  const confirmationId = details.confirmationId;
+  const commandId = details.commandId;
+  if (typeof confirmationId !== "string" || confirmationId.length === 0 || typeof commandId !== "string" || commandId.length === 0) {
+    return null;
+  }
+  const summary = typeof details.summary === "string" ? details.summary : void 0;
+  const riskLevel = typeof details.riskLevel === "string" ? details.riskLevel : void 0;
+  return {
+    confirmationId,
+    commandId,
+    ...summary === void 0 ? {} : { summary },
+    ...riskLevel === void 0 ? {} : { riskLevel },
+    ...details.diff === void 0 ? {} : { diff: details.diff }
+  };
+}
+function renderPendingConfirmationGate2(io, pending) {
+  if (pending.summary !== void 0) {
+    io.stderr.write(`${redactForLog(pending.summary)}
+`);
+  }
+  if (pending.riskLevel !== void 0) {
+    io.stderr.write(`Risk level: ${pending.riskLevel}
+`);
+  }
+  if (pending.diff !== void 0) {
+    io.stderr.write(`Diff:
+${redactForLog(pending.diff)}
+`);
+  }
+}
 
 // src/doctor.ts
 import { execFile as execFileCallback3 } from "node:child_process";
@@ -63575,7 +63730,7 @@ async function sweepStaleRunnerTempFiles(dir, options = {}) {
 // src/runner-service.ts
 import { execFile as execFileCallback2 } from "node:child_process";
 import { realpathSync as realpathSync2 } from "node:fs";
-import { access, mkdir as mkdir4, readFile as readFile6, readdir as readdir2, rm as rm4, writeFile as writeFile4 } from "node:fs/promises";
+import { access, mkdir as mkdir4, readFile as readFile7, readdir as readdir2, rm as rm4, writeFile as writeFile4 } from "node:fs/promises";
 import { homedir as homedir4 } from "node:os";
 import path7 from "node:path";
 import { promisify as promisify2 } from "node:util";
@@ -63989,7 +64144,7 @@ async function inspectRunnerService(options) {
   const paths = runnerServicePaths(options.homeDir, safeName);
   const label = serviceLabel(safeName);
   const installed = await fileExists(paths.launchAgentPath);
-  const plist = installed ? await readFile6(paths.launchAgentPath, "utf8").catch(() => null) : null;
+  const plist = installed ? await readFile7(paths.launchAgentPath, "utf8").catch(() => null) : null;
   const programArgs = plist ? extractProgramArguments(plist) : [];
   const appUrl2 = plist ? extractPlistEnvironmentValue(plist, `${cliBrand.envPrefix}_APP_URL`) : null;
   const urlPolicyEnv = extractPlistEnvironmentValue(plist ?? "", allowInsecureAppUrlEnv) === "1" ? "set" : "unset";
@@ -64257,7 +64412,7 @@ async function fileExists(file2) {
 }
 async function readTail(file2, maxBytes) {
   try {
-    const content = await readFile6(file2, "utf8");
+    const content = await readFile7(file2, "utf8");
     return content.length > maxBytes ? content.slice(content.length - maxBytes) : content;
   } catch {
     return null;
@@ -64405,7 +64560,7 @@ function parseSemver2(value) {
 import { execFile as execFileCallback5, spawn } from "node:child_process";
 import { createHash as createHash4, randomUUID } from "node:crypto";
 import { constants as fsConstants4 } from "node:fs";
-import { access as access3, chmod as chmod2, lstat as lstat2, mkdir as mkdir6, open as open2, readFile as readFile8, rename as rename2, rm as rm6, statfs, writeFile as writeFile6 } from "node:fs/promises";
+import { access as access3, chmod as chmod2, lstat as lstat2, mkdir as mkdir6, open as open2, readFile as readFile9, rename as rename2, rm as rm6, statfs, writeFile as writeFile6 } from "node:fs/promises";
 import { cpus, homedir as homedir5, hostname as hostname3, platform, totalmem, tmpdir as tmpdir2 } from "node:os";
 import path10 from "node:path";
 import { setTimeout as sleep3 } from "node:timers/promises";
@@ -64415,7 +64570,7 @@ import { promisify as promisify5 } from "node:util";
 import { execFile as execFileCallback4 } from "node:child_process";
 import { createHash as createHash3, randomBytes } from "node:crypto";
 import { constants as fsConstants3 } from "node:fs";
-import { chmod, link, lstat, mkdir as mkdir5, mkdtemp, open, readdir as readdir3, readFile as readFile7, realpath, rename, rm as rm5, stat as stat4, writeFile as writeFile5 } from "node:fs/promises";
+import { chmod, link, lstat, mkdir as mkdir5, mkdtemp, open, readdir as readdir3, readFile as readFile8, realpath, rename, rm as rm5, stat as stat4, writeFile as writeFile5 } from "node:fs/promises";
 import os3 from "node:os";
 import path8 from "node:path";
 import { setTimeout as sleep2 } from "node:timers/promises";
@@ -64527,7 +64682,7 @@ async function provisionIsolatedClaudeConfigDir(base, configDir, onRepair) {
   const source = resolveSourceClaudeConfigDir(base);
   for (const file2 of CLAUDE_CONFIG_AUTH_FILES) {
     try {
-      const data = await readFile7(path8.join(source, file2));
+      const data = await readFile8(path8.join(source, file2));
       await writeFileAtomicNoFollow(path8.join(configDir, file2), data, { mode: 384 });
     } catch {
     }
@@ -64730,7 +64885,7 @@ trust_level = "untrusted"
     await rm5(dest, { recursive: true, force: true });
   }
   const source = resolveSourceCodexHomeDir(base);
-  const data = await readFile7(path8.join(source, CODEX_HOME_AUTH_FILE)).catch(() => null);
+  const data = await readFile8(path8.join(source, CODEX_HOME_AUTH_FILE)).catch(() => null);
   if (data === null) {
     return homeDir;
   }
@@ -64813,7 +64968,7 @@ async function acquireCodexHomeLock(homeDir, options = {}) {
       ino = String((await handle.stat()).ino);
     } catch (error51) {
       await handle.close().catch(() => void 0);
-      const stillOurs = await readFile7(lockPath, "utf8").then((raw) => JSON.parse(raw).nonce === nonce).catch(() => false);
+      const stillOurs = await readFile8(lockPath, "utf8").then((raw) => JSON.parse(raw).nonce === nonce).catch(() => false);
       if (stillOurs) {
         await rm5(lockPath, { force: true }).catch(() => void 0);
       }
@@ -64856,7 +65011,7 @@ async function breakCodexHomeLock(lockPath, expected) {
   }
   let raw;
   try {
-    raw = await readFile7(lockPath, "utf8");
+    raw = await readFile8(lockPath, "utf8");
   } catch {
     return;
   }
@@ -64873,7 +65028,7 @@ async function judgeCodexHomeLock(lockPath, staleMs) {
   }
   let raw;
   try {
-    raw = await readFile7(lockPath, "utf8");
+    raw = await readFile8(lockPath, "utf8");
   } catch (error51) {
     if (error51.code === "ENOENT") {
       return { stale: false, identity: null };
@@ -66436,7 +66591,7 @@ async function migrateOneLegacyCodexHome(legacyHome, newHome, io) {
 }
 async function loadState(filePath, expectedTenantId) {
   try {
-    const parsed = JSON.parse(await readFile8(filePath, "utf8"));
+    const parsed = JSON.parse(await readFile9(filePath, "utf8"));
     if (typeof parsed.runner_id === "string" && typeof parsed.runner_secret === "string") {
       if (expectedTenantId && parsed.tenant_id !== expectedTenantId) {
         return null;
@@ -68259,7 +68414,7 @@ async function reconcileOrphanedInFlightWorkOrders(deps) {
         const transcriptPath = await findClaudeTranscriptPath(entry.claude_config_dir, entry.claude_session_id);
         if (transcriptPath) {
           try {
-            const content = await readFile8(transcriptPath, "utf8");
+            const content = await readFile9(transcriptPath, "utf8");
             verdict = classifyClaudeTranscript(content);
           } catch {
             verdict = { kind: "missing" };