@rosthq/cli 0.7.135 → 0.7.136

package/dist/index.js

@@ -52585,7 +52585,7 @@ The implementation method is split into stable sections so a CLI, MCP, or in-app
     order: 12,
     title: "Install the {{brand}} implementation Skill",
     summary: "Install the public implementation Skill through its signed, verified GitHub release so a general-purpose agent can run the {{brand}} implementation method.",
-    version: "2026-07-30.1",
+    version: "2026-07-30.2",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup"],
@@ -52639,7 +52639,7 @@ A fetched release can never introduce its own trust root. Any key material insid
 
 Files are placed under the client's skills directory as \`rost-implementation/\`, plus a \`.rost-skill-release.json\` provenance marker. The marker records source repository, tag, commit, manifest sha256, and signer fingerprint. The agent quotes this marker when reporting which implementation method ran.
 
-For Claude Code the directory is \`$CLAUDE_CONFIG_DIR/skills/\` when that variable is set, otherwise \`~/.claude/skills/\` \u2014 \`CLAUDE_CONFIG_DIR\` is the variable Claude Code itself reads. The legacy \`CLAUDE_HOME\` is still honoured as a fallback and prints a deprecation notice; prefer \`CLAUDE_CONFIG_DIR\`, because a Skill installed under a root the client does not read leaves the agent running without it. For Codex the directory is \`$CODEX_HOME/skills/\`, otherwise \`~/.codex/skills/\`. The installer prints the resolved directory \u2014 check it matches the configuration the client launches with.
+For Claude Code the directory is \`$CLAUDE_CONFIG_DIR/skills/\` when that variable is set, otherwise \`~/.claude/skills/\` \u2014 \`CLAUDE_CONFIG_DIR\` is the variable Claude Code itself reads. If \`CLAUDE_HOME\` is set without \`CLAUDE_CONFIG_DIR\`, the installer fails with a migration instruction (\`Set CLAUDE_CONFIG_DIR=<value> instead, or unset CLAUDE_HOME to install under the default ~/.claude\`); when both variables are set and name different directories, the installer uses \`CLAUDE_CONFIG_DIR\` and prints a notice that \`CLAUDE_HOME\` is ignored (an equivalent spelling prints no notice). For Codex the directory is \`$CODEX_HOME/skills/\`, otherwise \`~/.codex/skills/\`. The installer prints the resolved directory and a line such as \`Claude Code will load this from <path>\` \u2014 check it matches the configuration the client launches with.
 
 ## Update path
 
@@ -61863,567 +61863,122 @@ function ensureTrailingSlash2(value) {
 }
 
 // src/skills.ts
-import { existsSync, mkdirSync, readFileSync as readFileSync3, rmSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync as mkdirSync2, readFileSync as readFileSync4, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import os2 from "node:os";
+import path5 from "node:path";
+
+// src/skill-install.ts
+import { closeSync, constants, fstatSync, lstatSync, mkdirSync, openSync, readdirSync, readFileSync as readFileSync3, readSync, rmSync, statSync, writeFileSync } from "node:fs";
 import os from "node:os";
 import path4 from "node:path";
-var UsageError2 = class extends Error {
+
+// src/skill-trust.ts
+import { createHash as createHash2, createPublicKey, verify } from "node:crypto";
+var TRUSTED_SIGNER_PUBLIC_KEY = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOXSsKe/zFjaoAdZdvP/esPoeM1fsCGFmxv0INDlCxaW rost-implementation-skill-release";
+var TRUSTED_SIGNER_FINGERPRINT = "SHA256:ziSyU9vhGi0Q3GaeePB1R6BI3GqXutLhepnF/4Hx4rY";
+var RELEASE_REPOSITORY = {
+  owner: "agenticoperatingsystem",
+  name: "rost-implementation-skill"
 };
-var CLIENTS = /* @__PURE__ */ new Set(["claude-code", "codex", "cursor"]);
-function skillsUsage(binName = cliBrand.binName) {
-  return [
-    `${binName} skills list [--json]`,
-    `${binName} skills catalog [--json]`,
-    `${binName} skills get --slug <slug> [--json]`,
-    `${binName} skills file --slug <slug> --path SKILL.md`,
-    `${binName} skills enable rost/<slug> [--json]`,
-    `${binName} skills install <slug-or-rost/slug> [--seat-id <id>] [--client claude-code|codex|cursor] [--version <n>] [--local-only] [--json]`,
-    `${binName} skills install-implementation [--client claude-code|codex|cursor] [--tag <tag>] [--json]`,
-    `${binName} skills sync --seat-id <id> [--client claude-code|codex|cursor] [--json]`,
-    `${binName} skills assign --seat-id <id> (--skill <slug>|--slug <slug>|--skill-version-id <id>) [--approve] [--allow-blocked-proposal] [--json]`,
-    `${binName} skills revoke (--assignment-id <id>|--seat-id <id> --skill <slug>) [--json]`,
-    `${binName} skills publish (--slug <slug>|--skill-version-id <id>) [--allow-warnings] [--json]`
-  ].join("\n");
-}
-async function runSkills(context, args, env = process.env) {
-  try {
-    const [action, ...rest] = args;
-    if (action === "help" || action === "--help" || action === "-h" || action === void 0) {
-      context.io.stdout.write(`${skillsUsage(context.binName)}
-`);
-      return action === void 0 ? 1 : 0;
-    }
-    if (action === "list") {
-      return context.run(context.client, "skill.list", {}, void 0);
-    }
-    if (action === "catalog") {
-      const parsed = parseFlags2(rest, /* @__PURE__ */ new Set(["include-unentitled"]));
-      return context.run(context.client, "skill.catalog", {
-        ...parsed.flags.has("include-unentitled") ? { include_unentitled: true } : {}
-      }, parsed.json ? void 0 : formatCatalog);
-    }
-    if (action === "get") {
-      const parsed = parseFlags2(rest);
-      return context.run(context.client, "skill.get", { slug: requireValue3(parsed, "slug") }, parsed.json ? void 0 : formatSkillDetail);
-    }
-    if (action === "file") {
-      const parsed = parseFlags2(rest);
-      return context.run(context.client, "skill.file.get", {
-        slug: requireValue3(parsed, "slug"),
-        path: requireValue3(parsed, "path")
-      }, (output) => {
-        const content = asRecord4(output).content;
-        return typeof content === "string" ? content : JSON.stringify(output, null, 2);
-      });
-    }
-    if (action === "enable") {
-      const slug2 = rest[0];
-      if (!slug2 || slug2.startsWith("--")) {
-        throw new UsageError2(`Usage: ${context.binName} skills enable rost/<slug> [--json]`);
-      }
-      const parsed = parseFlags2(rest.slice(1));
-      return context.run(context.client, "skill.enable_catalog", { slug: slug2 }, parsed.json ? void 0 : formatEnable);
-    }
-    if (action === "install") {
-      return installOne(context, rest, env);
-    }
-    if (action === "sync") {
-      return syncAssigned(context, rest, env);
-    }
-    if (action === "assign") {
-      const parsed = parseFlags2(rest, /* @__PURE__ */ new Set(["approve", "allow-blocked-proposal"]));
-      const body = withDefined({
-        seat_id: requireValue3(parsed, "seat-id"),
-        status: parsed.flags.has("approve") ? "approved" : "proposed",
-        rationale: optionalValue2(parsed, "rationale") ?? "Skill selected for this Seat.",
-        allow_blocked_proposal: parsed.flags.has("allow-blocked-proposal")
-      }, {
-        slug: optionalValue2(parsed, "skill") ?? optionalValue2(parsed, "slug"),
-        skill_version_id: optionalValue2(parsed, "skill-version-id")
-      });
-      return context.run(context.client, "skill.assign_to_seat", body, parsed.json ? void 0 : formatAssignment, { targetSeatId: body.seat_id });
-    }
-    if (action === "revoke") {
-      const parsed = parseFlags2(rest);
-      const seatId = optionalValue2(parsed, "seat-id");
-      const body = withDefined({}, {
-        assignment_id: optionalValue2(parsed, "assignment-id"),
-        seat_id: seatId,
-        slug: optionalValue2(parsed, "skill") ?? optionalValue2(parsed, "slug"),
-        skill_version_id: optionalValue2(parsed, "skill-version-id"),
-        rationale: optionalValue2(parsed, "rationale")
-      });
-      return context.run(context.client, "skill.revoke_from_seat", body, parsed.json ? void 0 : formatRevoke, seatId ? { targetSeatId: seatId } : {});
-    }
-    if (action === "publish") {
-      const parsed = parseFlags2(rest, /* @__PURE__ */ new Set(["allow-warnings"]));
-      const body = withDefined({
-        allow_warnings: parsed.flags.has("allow-warnings")
-      }, {
-        slug: optionalValue2(parsed, "slug"),
-        skill_version_id: optionalValue2(parsed, "skill-version-id")
-      });
-      return context.run(context.client, "skill.publish", body, parsed.json ? void 0 : formatPublish);
-    }
-    throw new UsageError2(`Unknown skills action: ${action}`);
-  } catch (error51) {
-    if (error51 instanceof UsageError2) {
-      context.io.stderr.write(`${error51.message}
-`);
-      return 1;
-    }
-    if (error51 instanceof CommandClientError) {
-      return printCommandError2(context.io, error51);
-    }
-    throw error51;
+var DEFAULT_RELEASE_TAG = "v0.2.0";
+var EXPECTED_DEFAULT_MANIFEST_SHA256 = "bbd745e1a625c30773fac5505f32c5152925d2474ac22d2cb4a93aa5a034ca66";
+var SKILL_MANIFEST_PROTOCOL_VERSION = 1;
+var SKILL_INSTALL_DIR_NAME = "rost-implementation";
+var SkillTrustError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "SkillTrustError";
   }
+};
+function terminalSafe(value) {
+  return value.replace(/[\x00-\x1f\x7f-\x9f]/g, "?");
 }
-async function installOne(context, args, env) {
-  const slug2 = args[0];
-  if (!slug2 || slug2.startsWith("--")) {
-    throw new UsageError2(`Usage: ${context.binName} skills install <slug-or-rost/slug> [--seat-id <id>] [--client claude-code|codex|cursor] [--version <n>] [--local-only] [--json]`);
+var SUPPORTED_CLIENTS = ["claude-code", "codex", "cursor"];
+var skillManifestSchema = external_exports.object({
+  schemaVersion: external_exports.literal(1),
+  name: external_exports.literal("rost-implementation-skill"),
+  version: external_exports.string(),
+  repository: external_exports.object({
+    owner: external_exports.string(),
+    name: external_exports.string()
+  }).strict(),
+  protocol: external_exports.object({
+    skill: external_exports.number().int(),
+    minCli: external_exports.string(),
+    maxCli: external_exports.string().nullable()
+  }).strict(),
+  supportedClients: external_exports.array(external_exports.enum(SUPPORTED_CLIENTS)).min(1),
+  doctrine: external_exports.object({
+    guide: external_exports.string(),
+    version: external_exports.string()
+  }).strict(),
+  changelogUrl: external_exports.string().url(),
+  files: external_exports.array(
+    external_exports.object({
+      path: external_exports.string(),
+      sha256: external_exports.string().regex(/^[a-f0-9]{64}$/)
+    }).strict()
+  ).min(1)
+}).strict();
+function sha256Hex(content) {
+  return createHash2("sha256").update(content).digest("hex");
+}
+function readSshString(buffer, offset) {
+  if (offset + 4 > buffer.length) {
+    throw new SkillTrustError("Truncated SSH wire string");
   }
-  const parsed = parseFlags2(args.slice(1), /* @__PURE__ */ new Set(["local-only"]));
-  const client = parseClient2(optionalValue2(parsed, "client") ?? "codex");
-  const seatId = optionalValue2(parsed, "seat-id");
-  const body = withDefined({
-    slug: slug2,
-    client,
-    local_only: parsed.flags.has("local-only")
-  }, {
-    seat_id: seatId,
-    version: optionalNumber2(parsed, "version")
-  });
-  const options = seatId ? { targetSeatId: seatId } : {};
-  const output = await executeInstallCommand(context, body, options);
-  const summary = applyLocalSkillChanges(output, client, env, { removeRevoked: false });
-  const outputRecord = asRecord4(output);
-  context.io.stdout.write(parsed.json ? `${JSON.stringify({ ...outputRecord, local: summary }, null, 2)}
-` : `${formatLocalSummary(summary)}
-`);
-  return 0;
+  const length = buffer.readUInt32BE(offset);
+  offset += 4;
+  if (offset + length > buffer.length) {
+    throw new SkillTrustError("Truncated SSH wire string payload");
+  }
+  return { value: buffer.subarray(offset, offset + length), nextOffset: offset + length };
 }
-async function syncAssigned(context, args, env) {
-  const parsed = parseFlags2(args);
-  const seatId = requireValue3(parsed, "seat-id");
-  const client = parseClient2(optionalValue2(parsed, "client") ?? "codex");
-  const output = await executeSkillCommand(context, "skill.sync_local", {
-    seat_id: seatId,
-    client
-  }, { targetSeatId: seatId });
-  const summary = applyLocalSkillChanges(output, client, env, { removeRevoked: true });
-  const outputRecord = asRecord4(output);
-  context.io.stdout.write(parsed.json ? `${JSON.stringify({ ...outputRecord, local: summary }, null, 2)}
-` : `${formatLocalSummary(summary)}
-`);
-  return 0;
+function makeSshString(value) {
+  const length = Buffer.alloc(4);
+  length.writeUInt32BE(value.length);
+  return Buffer.concat([length, value]);
 }
-async function executeInstallCommand(context, body, options) {
-  const slug2 = typeof body.slug === "string" ? body.slug : "";
-  if (slug2.startsWith("rost/") && body.local_only !== true) {
-    try {
-      return await executeSkillCommand(context, "skill.install_local", { ...body, local_only: true }, options);
-    } catch (error51) {
-      if (!isCommandConflict(error51)) {
-        throw error51;
-      }
-    }
+function parseEd25519PublicKeyLine(line) {
+  const trimmed = line.trim();
+  const parts = trimmed.split(/\s+/);
+  if (parts.length < 2) {
+    throw new SkillTrustError("Malformed SSH public key line");
   }
-  return executeSkillCommand(context, "skill.install_local", body, options);
-}
-async function executeSkillCommand(context, commandId, body, options = {}) {
+  const keyType = parts[0];
+  const base643 = parts[1];
+  if (keyType === void 0 || base643 === void 0) {
+    throw new SkillTrustError("Malformed SSH public key line");
+  }
+  if (keyType !== "ssh-ed25519") {
+    throw new SkillTrustError(`Unsupported SSH public key type: ${keyType}`);
+  }
+  let blob;
   try {
-    const output = await context.client.execute(commandId, body, options);
-    return output.output;
-  } catch (error51) {
-    const pending = context.io.interactive === true ? pendingConfirmationFromError(error51) : null;
-    if (pending && pending.commandId === commandId) {
-      renderPendingConfirmationGate2(context.io, pending);
-      context.io.stderr.write(`Approving ${pending.commandId} confirmation ${pending.confirmationId} as the interactive CLI user.
-`);
-      const approved = await context.client.execute("confirmation.approve", { confirmation_id: pending.confirmationId, reviewed: true });
-      return asRecord4(approved.output).output ?? approved.output;
-    }
-    throw error51;
+    blob = Buffer.from(base643, "base64");
+  } catch {
+    throw new SkillTrustError("Invalid base64 in SSH public key");
   }
-}
-function applyLocalSkillChanges(output, client, env, options) {
-  const root = installRoot(client, env);
-  const changes = writeInstalls(output, root);
-  if (options.removeRevoked) {
-    changes.push(...removeRevokedInstalls(output, root));
+  let offset = 0;
+  const { value: typeBytes, nextOffset: afterType } = readSshString(blob, offset);
+  offset = afterType;
+  if (typeBytes.toString("utf8") !== "ssh-ed25519") {
+    throw new SkillTrustError("Public key blob key type mismatch");
   }
-  return changes;
-}
-function writeInstalls(output, root) {
-  const installs = asArray2(asRecord4(output).installs);
-  return installs.map((entry) => {
-    const install = asRecord4(entry);
-    const slug2 = safeLocalSlug(String(install.slug ?? ""));
-    const metadata = asRecord4(install.metadata);
-    const files = asArray2(install.files).map(asRecord4);
-    const dir = path4.join(root, slug2);
-    const metadataPath = path4.join(dir, ".rost-skill.json");
-    const expectedHash = String(metadata.content_sha256 ?? "");
-    if (existingHash(metadataPath) === expectedHash) {
-      return { slug: slug2, dir, status: "unchanged", files: files.length };
-    }
-    rmSync(dir, { recursive: true, force: true });
-    mkdirSync(dir, { recursive: true });
-    for (const file2 of files) {
-      const relativePath = safeRelativePath(String(file2.path ?? ""));
-      const content = String(file2.content ?? "");
-      const target = path4.join(dir, relativePath);
-      mkdirSync(path4.dirname(target), { recursive: true });
-      writeFileSync(target, content, "utf8");
-    }
-    writeFileSync(metadataPath, `${JSON.stringify(metadata, null, 2)}
-`, "utf8");
-    return { slug: slug2, dir, status: "installed", files: files.length };
-  });
-}
-function removeRevokedInstalls(output, root) {
-  const installs = new Set(asArray2(asRecord4(output).installs).map((entry) => {
-    const slug2 = asRecord4(entry).slug;
-    return typeof slug2 === "string" ? slug2 : "";
-  }));
-  const revoked = asArray2(asRecord4(output).revoked);
-  const changes = [];
-  for (const entry of revoked) {
-    const slug2 = safeLocalSlug(String(asRecord4(entry).slug ?? ""));
-    if (installs.has(slug2)) {
-      continue;
-    }
-    const dir = path4.join(root, slug2);
-    if (!existsSync(dir)) {
-      continue;
-    }
-    rmSync(dir, { recursive: true, force: true });
-    changes.push({ slug: slug2, dir, status: "removed", files: 0 });
-  }
-  return changes;
-}
-function installRoot(client, env) {
-  const override = env.ROST_SKILL_INSTALL_ROOT;
-  if (override && override.length > 0) {
-    return path4.resolve(override, client);
-  }
-  if (client === "codex") {
-    return path4.join(env.CODEX_HOME ?? path4.join(os.homedir(), ".codex"), "skills", "rost");
-  }
-  if (client === "claude-code") {
-    return path4.join(env.CLAUDE_HOME ?? path4.join(os.homedir(), ".claude"), "skills", "rost");
-  }
-  return path4.join(os.homedir(), ".cursor", "skills", "rost");
-}
-function safeRelativePath(value) {
-  const normalized = value.trim().replaceAll("\\", "/").replace(/^\.\/+/, "");
-  if (!normalized || normalized.startsWith("/") || normalized.includes("//") || normalized.split("/").includes("..")) {
-    throw new UsageError2("Server returned an invalid skill file path.");
-  }
-  return normalized;
-}
-function safeLocalSlug(value) {
-  if (!/^[a-z0-9][a-z0-9-]{1,80}$/.test(value)) {
-    throw new UsageError2("Server returned an invalid skill slug.");
-  }
-  return value;
-}
-function existingHash(metadataPath) {
-  if (!existsSync(metadataPath)) {
-    return null;
-  }
-  try {
-    const parsed = JSON.parse(readFileSync3(metadataPath, "utf8"));
-    const hash2 = asRecord4(parsed).content_sha256;
-    return typeof hash2 === "string" ? hash2 : null;
-  } catch {
-    return null;
-  }
-}
-function parseFlags2(args, booleanFlags = /* @__PURE__ */ new Set()) {
-  const values = /* @__PURE__ */ new Map();
-  const flags = /* @__PURE__ */ new Set();
-  let json2 = false;
-  for (let index = 0; index < args.length; index += 1) {
-    const token = args[index];
-    if (token === void 0) {
-      continue;
-    }
-    if (!token.startsWith("--")) {
-      throw new UsageError2(`Unexpected argument: ${token}`);
-    }
-    const key = token.slice(2);
-    if (key === "json") {
-      json2 = true;
-      continue;
-    }
-    if (booleanFlags.has(key)) {
-      flags.add(key);
-      continue;
-    }
-    const value = args[index + 1];
-    if (value === void 0 || value.startsWith("--")) {
-      flags.add(key);
-      continue;
-    }
-    values.set(key, value);
-    index += 1;
-  }
-  return { json: json2, values, flags };
-}
-function requireValue3(parsed, key) {
-  const value = optionalValue2(parsed, key);
-  if (value === void 0) {
-    throw new UsageError2(`Missing required --${key} value.`);
-  }
-  return value;
-}
-function optionalValue2(parsed, key) {
-  const value = parsed.values.get(key);
-  return value && value.length > 0 ? value : void 0;
-}
-function optionalNumber2(parsed, key) {
-  const value = optionalValue2(parsed, key);
-  if (value === void 0) {
-    return void 0;
-  }
-  const parsedNumber = Number(value);
-  if (!Number.isSafeInteger(parsedNumber) || parsedNumber <= 0) {
-    throw new UsageError2(`--${key} must be a positive integer.`);
-  }
-  return parsedNumber;
-}
-function parseClient2(value) {
-  if (!CLIENTS.has(value)) {
-    throw new UsageError2("--client must be claude-code, codex, or cursor.");
-  }
-  return value;
-}
-function isCommandConflict(error51) {
-  return error51 instanceof CommandClientError && error51.status === 409;
-}
-function withDefined(base, extra) {
-  const next = { ...base };
-  for (const [key, value] of Object.entries(extra)) {
-    if (value !== void 0) {
-      next[key] = value;
-    }
-  }
-  return next;
-}
-function asRecord4(value) {
-  return typeof value === "object" && value !== null ? value : {};
-}
-function asArray2(value) {
-  return Array.isArray(value) ? value : [];
-}
-function formatCatalog(output) {
-  const entries = asArray2(asRecord4(output).catalog);
-  if (entries.length === 0) {
-    return "No ROST catalog skills are available for this tenant.";
-  }
-  return entries.map((entry) => {
-    const record2 = asRecord4(entry);
-    return `${record2.catalog_slug} [${record2.tier}/${record2.entitlement_status}] ${record2.name}`;
-  }).join("\n");
-}
-function formatSkillDetail(output) {
-  const skill = asRecord4(asRecord4(output).skill);
-  return `${skill.slug} v${skill.latest_version ?? "\u2014"} [${skill.status}] ${skill.name}
-${skill.description}`;
-}
-function formatEnable(output) {
-  const skill = asRecord4(asRecord4(output).skill);
-  const catalog = asRecord4(asRecord4(output).catalog);
-  return `Enabled ${catalog.catalog_slug} as ${skill.slug} v${skill.version} (${skill.skill_version_id})`;
-}
-function formatAssignment(output) {
-  const assignment = asRecord4(asRecord4(output).assignment);
-  return `${assignment.status} ${assignment.slug} for seat ${assignment.seat_id}; sync: ${String(asRecord4(output).local_sync_next_step)}`;
-}
-function formatRevoke(output) {
-  const record2 = asRecord4(output);
-  return `Revoked ${record2.slug} for seat ${record2.seat_id}; sync: ${record2.local_sync_next_step}`;
-}
-function formatPublish(output) {
-  const skill = asRecord4(asRecord4(output).skill);
-  return `Published ${skill.slug} v${skill.version} (${skill.skill_version_id})`;
-}
-function formatLocalSummary(summary) {
-  if (summary.length === 0) {
-    return "No skills to install.";
-  }
-  return summary.map((entry) => `${entry.status} ${entry.slug} -> ${entry.dir} (${entry.files} files)`).join("\n");
-}
-function printCommandError2(io, error51) {
-  if (error51.response && !error51.response.ok) {
-    const payload = {
-      code: error51.response.error.code,
-      message: error51.response.error.message,
-      ...error51.response.error.details === void 0 ? {} : { details: error51.response.error.details },
-      ...error51.response.error.help === void 0 ? {} : { help: error51.response.error.help },
-      ...error51.response.requestId === void 0 ? {} : { requestId: error51.response.requestId }
-    };
-    io.stderr.write(`${redactForLog(payload)}
-`);
-    if (error51.response.error.help !== void 0) {
-      io.stderr.write(`\u2192 try: ${redactForLog(error51.response.error.help)}
-`);
-    }
-    return error51.status === 409 ? 3 : error51.status >= 400 && error51.status < 500 ? 1 : 2;
-  }
-  io.stderr.write(`${redactForLog(error51.message)}
-`);
-  return error51.status >= 400 && error51.status < 500 ? 1 : 2;
-}
-function pendingConfirmationFromError(error51) {
-  if (!(error51 instanceof CommandClientError) || !error51.response || error51.response.ok || error51.response.error.code !== "COMMAND_CONFIRMATION_REQUIRED") {
-    return null;
-  }
-  const details = asRecord4(error51.response.error.details);
-  const confirmationId = details.confirmationId;
-  const commandId = details.commandId;
-  if (typeof confirmationId !== "string" || confirmationId.length === 0 || typeof commandId !== "string" || commandId.length === 0) {
-    return null;
-  }
-  const summary = typeof details.summary === "string" ? details.summary : void 0;
-  const riskLevel = typeof details.riskLevel === "string" ? details.riskLevel : void 0;
-  return {
-    confirmationId,
-    commandId,
-    ...summary === void 0 ? {} : { summary },
-    ...riskLevel === void 0 ? {} : { riskLevel },
-    ...details.diff === void 0 ? {} : { diff: details.diff }
-  };
-}
-function renderPendingConfirmationGate2(io, pending) {
-  if (pending.summary !== void 0) {
-    io.stderr.write(`${redactForLog(pending.summary)}
-`);
-  }
-  if (pending.riskLevel !== void 0) {
-    io.stderr.write(`Risk level: ${pending.riskLevel}
-`);
-  }
-  if (pending.diff !== void 0) {
-    io.stderr.write(`Diff:
-${redactForLog(pending.diff)}
-`);
-  }
-}
-
-// src/skill-install.ts
-import { lstatSync, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync4, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import os2 from "node:os";
-import path5 from "node:path";
-
-// src/skill-trust.ts
-import { createHash as createHash2, createPublicKey, verify } from "node:crypto";
-var TRUSTED_SIGNER_PUBLIC_KEY = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOXSsKe/zFjaoAdZdvP/esPoeM1fsCGFmxv0INDlCxaW rost-implementation-skill-release";
-var TRUSTED_SIGNER_FINGERPRINT = "SHA256:ziSyU9vhGi0Q3GaeePB1R6BI3GqXutLhepnF/4Hx4rY";
-var RELEASE_REPOSITORY = {
-  owner: "agenticoperatingsystem",
-  name: "rost-implementation-skill"
-};
-var DEFAULT_RELEASE_TAG = "v0.2.0";
-var EXPECTED_DEFAULT_MANIFEST_SHA256 = "bbd745e1a625c30773fac5505f32c5152925d2474ac22d2cb4a93aa5a034ca66";
-var SKILL_MANIFEST_PROTOCOL_VERSION = 1;
-var SKILL_INSTALL_DIR_NAME = "rost-implementation";
-var SkillTrustError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "SkillTrustError";
-  }
-};
-function terminalSafe(value) {
-  return value.replace(/[\x00-\x1f\x7f-\x9f]/g, "?");
-}
-var SUPPORTED_CLIENTS = ["claude-code", "codex", "cursor"];
-var skillManifestSchema = external_exports.object({
-  schemaVersion: external_exports.literal(1),
-  name: external_exports.literal("rost-implementation-skill"),
-  version: external_exports.string(),
-  repository: external_exports.object({
-    owner: external_exports.string(),
-    name: external_exports.string()
-  }).strict(),
-  protocol: external_exports.object({
-    skill: external_exports.number().int(),
-    minCli: external_exports.string(),
-    maxCli: external_exports.string().nullable()
-  }).strict(),
-  supportedClients: external_exports.array(external_exports.enum(SUPPORTED_CLIENTS)).min(1),
-  doctrine: external_exports.object({
-    guide: external_exports.string(),
-    version: external_exports.string()
-  }).strict(),
-  changelogUrl: external_exports.string().url(),
-  files: external_exports.array(
-    external_exports.object({
-      path: external_exports.string(),
-      sha256: external_exports.string().regex(/^[a-f0-9]{64}$/)
-    }).strict()
-  ).min(1)
-}).strict();
-function sha256Hex(content) {
-  return createHash2("sha256").update(content).digest("hex");
-}
-function readSshString(buffer, offset) {
-  if (offset + 4 > buffer.length) {
-    throw new SkillTrustError("Truncated SSH wire string");
-  }
-  const length = buffer.readUInt32BE(offset);
-  offset += 4;
-  if (offset + length > buffer.length) {
-    throw new SkillTrustError("Truncated SSH wire string payload");
-  }
-  return { value: buffer.subarray(offset, offset + length), nextOffset: offset + length };
-}
-function makeSshString(value) {
-  const length = Buffer.alloc(4);
-  length.writeUInt32BE(value.length);
-  return Buffer.concat([length, value]);
-}
-function parseEd25519PublicKeyLine(line) {
-  const trimmed = line.trim();
-  const parts = trimmed.split(/\s+/);
-  if (parts.length < 2) {
-    throw new SkillTrustError("Malformed SSH public key line");
-  }
-  const keyType = parts[0];
-  const base643 = parts[1];
-  if (keyType === void 0 || base643 === void 0) {
-    throw new SkillTrustError("Malformed SSH public key line");
-  }
-  if (keyType !== "ssh-ed25519") {
-    throw new SkillTrustError(`Unsupported SSH public key type: ${keyType}`);
-  }
-  let blob;
-  try {
-    blob = Buffer.from(base643, "base64");
-  } catch {
-    throw new SkillTrustError("Invalid base64 in SSH public key");
-  }
-  let offset = 0;
-  const { value: typeBytes, nextOffset: afterType } = readSshString(blob, offset);
-  offset = afterType;
-  if (typeBytes.toString("utf8") !== "ssh-ed25519") {
-    throw new SkillTrustError("Public key blob key type mismatch");
-  }
-  const { value: keyBytes, nextOffset: afterKey } = readSshString(blob, offset);
-  offset = afterKey;
-  if (offset !== blob.length) {
-    throw new SkillTrustError("Trailing bytes in SSH public key blob");
-  }
-  if (keyBytes.length !== 32) {
-    throw new SkillTrustError(`Invalid ed25519 public key length: ${keyBytes.length}`);
-  }
-  const spki = Buffer.concat([
-    Buffer.from("302a300506032b6570032100", "hex"),
-    keyBytes
-  ]);
-  const key = createPublicKey({ key: spki, format: "der", type: "spki" });
-  return { key, blob };
+  const { value: keyBytes, nextOffset: afterKey } = readSshString(blob, offset);
+  offset = afterKey;
+  if (offset !== blob.length) {
+    throw new SkillTrustError("Trailing bytes in SSH public key blob");
+  }
+  if (keyBytes.length !== 32) {
+    throw new SkillTrustError(`Invalid ed25519 public key length: ${keyBytes.length}`);
+  }
+  const spki = Buffer.concat([
+    Buffer.from("302a300506032b6570032100", "hex"),
+    keyBytes
+  ]);
+  const key = createPublicKey({ key: spki, format: "der", type: "spki" });
+  return { key, blob };
 }
 function splitSignedTag(rawTagObject) {
   const marker = "-----BEGIN SSH SIGNATURE-----";
@@ -62535,7 +62090,7 @@ function verifyTagSignature(payload, signatureArmored, trustedPublicKeyLine = TR
   }
   return { ok: true, reason: "Verified" };
 }
-function safeRelativePath2(value) {
+function safeRelativePath(value) {
   if (value.includes("\\")) {
     throw new SkillTrustError("Manifest file path is not a safe relative path");
   }
@@ -62629,7 +62184,7 @@ function verifyReleaseManifest(manifest, options) {
   }
   let files;
   try {
-    files = parsed.files.map((file2) => ({ ...file2, path: safeRelativePath2(file2.path) }));
+    files = parsed.files.map((file2) => ({ ...file2, path: safeRelativePath(file2.path) }));
   } catch (error51) {
     const message = error51 instanceof Error ? error51.message : "Invalid path";
     return { ok: false, reason: message };
@@ -62639,13 +62194,13 @@ function verifyReleaseManifest(manifest, options) {
 function verifyFileChecksums(files, manifest) {
   const manifestMap = /* @__PURE__ */ new Map();
   for (const file2 of manifest.files) {
-    manifestMap.set(safeRelativePath2(file2.path), file2.sha256);
+    manifestMap.set(safeRelativePath(file2.path), file2.sha256);
   }
   const seen = /* @__PURE__ */ new Set();
   for (const file2 of files) {
     let normalized;
     try {
-      normalized = safeRelativePath2(file2.path);
+      normalized = safeRelativePath(file2.path);
     } catch (error51) {
       const message = error51 instanceof Error ? error51.message : "Invalid path";
       return { ok: false, reason: message };
@@ -62731,13 +62286,14 @@ function verifyReleaseTrust(input) {
 }
 
 // src/skill-install.ts
-var UsageError3 = class extends Error {
+var UsageError2 = class extends Error {
 };
+var O_NOFOLLOW_FLAG = typeof constants.O_NOFOLLOW === "number" ? constants.O_NOFOLLOW : 0;
 function writeErrorLine(io, message) {
   io.stderr.write(`${terminalSafe(message)}
 `);
 }
-var CLIENTS2 = /* @__PURE__ */ new Set(["claude-code", "codex", "cursor"]);
+var CLIENTS = /* @__PURE__ */ new Set(["claude-code", "codex", "cursor"]);
 var REPO_PATH = `${RELEASE_REPOSITORY.owner}/${RELEASE_REPOSITORY.name}`;
 var GITHUB_JSON_HEADERS = { "User-Agent": "rost-cli", "Accept": "application/vnd.github+json" };
 var GITHUB_RAW_HEADERS = { "User-Agent": "rost-cli", "Accept": "application/vnd.github.raw+json" };
@@ -62824,11 +62380,12 @@ async function runInstallImplementation(context, args) {
   let client;
   let tag;
   try {
-    parsed = parseFlags3(args);
-    client = parseClient3(optionalValue3(parsed, "client") ?? "codex");
-    tag = optionalValue3(parsed, "tag") ?? DEFAULT_RELEASE_TAG;
+    parsed = parseFlags2(args);
+    client = parseClient2(optionalValue2(parsed, "client") ?? "codex");
+    tag = optionalValue2(parsed, "tag") ?? DEFAULT_RELEASE_TAG;
+    installRoot(client, context.env);
   } catch (error51) {
-    if (error51 instanceof UsageError3) {
+    if (error51 instanceof UsageError2) {
       writeErrorLine(context.io, error51.message);
       return 1;
     }
@@ -62991,10 +62548,11 @@ async function installRelease(context, plan, testOverrides = {}) {
   }
   let root;
   let legacyNotice;
+  let viaOverride;
   try {
-    ({ root, legacyNotice } = installRoot2(plan.client, context.env));
+    ({ root, legacyNotice, viaOverride } = installRoot(plan.client, context.env));
   } catch (error51) {
-    if (error51 instanceof UsageError3) {
+    if (error51 instanceof UsageError2) {
       writeErrorLine(context.io, error51.message);
       return 1;
     }
@@ -63003,7 +62561,7 @@ async function installRelease(context, plan, testOverrides = {}) {
   if (legacyNotice !== null) {
     writeErrorLine(context.io, legacyNotice);
   }
-  const dir = path5.join(root, SKILL_INSTALL_DIR_NAME);
+  const dir = path4.join(root, SKILL_INSTALL_DIR_NAME);
   const manifestSha256 = sha256Hex(plan.manifestRaw);
   const existingMarker = readMarker(dir);
   const installedState = existingMarker?.manifestSha256 === manifestSha256 ? verifyInstalledTree(dir, manifest) : null;
@@ -63027,28 +62585,31 @@ async function installRelease(context, plan, testOverrides = {}) {
         })}
 `
       );
+      writeErrorLine(context.io, clientLoadLine(plan.client, dir, viaOverride));
     } else {
       context.io.stdout.write(
-        `installed rost-implementation ${plan.tag} (${commitSha.slice(0, 7)}) -> ${dir} (${plan.files.length} files)
+        `unchanged rost-implementation ${plan.tag} (${commitSha.slice(0, 7)}) -> ${humanPath(dir)} (${plan.files.length} files)
 `
       );
+      context.io.stdout.write(`${clientLoadLine(plan.client, dir, viaOverride)}
+`);
       context.io.stdout.write(`${verifiedSignerLine()}
 `);
     }
     return 0;
   }
-  rmSync2(dir, { recursive: true, force: true });
-  mkdirSync2(dir, { recursive: true });
+  rmSync(dir, { recursive: true, force: true });
+  mkdirSync(dir, { recursive: true });
   for (const file2 of plan.files) {
-    const target = path5.join(dir, file2.path);
-    const resolvedTarget = path5.resolve(target);
-    const resolvedDir = path5.resolve(dir);
-    if (!resolvedTarget.startsWith(`${resolvedDir}${path5.sep}`)) {
+    const target = path4.join(dir, file2.path);
+    const resolvedTarget = path4.resolve(target);
+    const resolvedDir = path4.resolve(dir);
+    if (!resolvedTarget.startsWith(`${resolvedDir}${path4.sep}`)) {
       writeErrorLine(context.io, `Refusing to write file outside target directory: ${file2.path}`);
       return 1;
     }
-    mkdirSync2(path5.dirname(target), { recursive: true });
-    writeFileSync2(target, file2.content, "utf8");
+    mkdirSync(path4.dirname(target), { recursive: true });
+    writeFileSync(target, file2.content, "utf8");
   }
   const writtenState = verifyInstalledTree(dir, manifest);
   if (!writtenState.ok) {
@@ -63071,11 +62632,14 @@ async function installRelease(context, plan, testOverrides = {}) {
       })}
 `
     );
+    writeErrorLine(context.io, clientLoadLine(plan.client, dir, viaOverride));
   } else {
     context.io.stdout.write(
-      `installed rost-implementation ${plan.tag} (${commitSha.slice(0, 7)}) -> ${dir} (${plan.files.length} files)
+      `installed rost-implementation ${plan.tag} (${commitSha.slice(0, 7)}) -> ${humanPath(dir)} (${plan.files.length} files)
 `
     );
+    context.io.stdout.write(`${clientLoadLine(plan.client, dir, viaOverride)}
+`);
     context.io.stdout.write(`${verifiedSignerLine()}
 `);
   }
@@ -63086,6 +62650,23 @@ function verifiedSignerLine() {
   const fingerprintBase = TRUSTED_SIGNER_FINGERPRINT.replace("SHA256:", "");
   return `verified signed release; signer SHA256:${fingerprintBase.slice(-12)} (last 12 chars)`;
 }
+function clientDisplay(client) {
+  if (client === "claude-code") return "Claude Code";
+  if (client === "codex") return "Codex";
+  return "Cursor";
+}
+function humanPath(dir) {
+  if (terminalSafe(dir) === dir) {
+    return dir;
+  }
+  return JSON.stringify(dir).replace(/[\x7f-\x9f]/gu, (char) => `\\u${char.charCodeAt(0).toString(16).padStart(4, "0")}`);
+}
+function clientLoadLine(client, dir, viaOverride) {
+  if (viaOverride) {
+    return `ROST_SKILL_INSTALL_ROOT chose ${humanPath(dir)} \u2014 ${clientDisplay(client)} loads from its own root, which may differ`;
+  }
+  return `${clientDisplay(client)} will load this from ${humanPath(dir)}`;
+}
 function writeMarker(dir, input) {
   const marker = {
     source: `github.com/${REPO_PATH}`,
@@ -63097,7 +62678,7 @@ function writeMarker(dir, input) {
     // operator's evidence that the pre-launch re-run actually happened.
     installedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  writeFileSync2(path5.join(dir, SKILL_MARKER_FILE), `${JSON.stringify(marker, null, 2)}
+  writeFileSync(path4.join(dir, SKILL_MARKER_FILE), `${JSON.stringify(marker, null, 2)}
 `, "utf8");
 }
 function listInstalledFiles(dir) {
@@ -63105,7 +62686,7 @@ function listInstalledFiles(dir) {
   const walk = (current, prefix) => {
     for (const name of readdirSync(current)) {
       const relative = prefix === "" ? name : `${prefix}/${name}`;
-      const absolute = path5.join(current, name);
+      const absolute = path4.join(current, name);
       const stats = lstatSync(absolute);
       if (stats.isSymbolicLink() || !stats.isFile() && !stats.isDirectory()) {
         throw new Error(`refusing to verify a symlink or special file: ${relative}`);
@@ -63117,7 +62698,7 @@ function listInstalledFiles(dir) {
       if (relative === SKILL_MARKER_FILE) {
         continue;
       }
-      files.push({ path: relative, absolute });
+      files.push({ path: relative, absolute, dev: stats.dev, ino: stats.ino });
     }
   };
   walk(dir, "");
@@ -63138,70 +62719,445 @@ function verifyInstalledTree(dir, manifest) {
   if (present.length !== manifestPaths.size) {
     return { ok: false, reason: "the installed tree is missing files listed in the signed manifest" };
   }
+  for (const file2 of present) {
+    try {
+      if (statSync(file2.absolute).size > MAX_RESPONSE_BYTES) {
+        return { ok: false, reason: `an installed file exceeds the ${MAX_RESPONSE_BYTES}-byte verification cap: ${file2.path}` };
+      }
+    } catch (error51) {
+      return { ok: false, reason: error51 instanceof Error ? error51.message : "an installed file is unreadable" };
+    }
+  }
   function* readEach() {
     for (const file2 of present) {
-      yield { path: file2.path, content: readFileSync4(file2.absolute) };
+      const fd = openSync(file2.absolute, constants.O_RDONLY | O_NOFOLLOW_FLAG);
+      try {
+        const opened = fstatSync(fd);
+        if (opened.dev !== file2.dev || opened.ino !== file2.ino) {
+          throw new Error(`an installed file changed between enumeration and verification: ${file2.path}`);
+        }
+        const size = opened.size;
+        if (size > MAX_RESPONSE_BYTES) {
+          throw new Error(`an installed file exceeds the ${MAX_RESPONSE_BYTES}-byte verification cap: ${file2.path}`);
+        }
+        const buffer = Buffer.alloc(size + 1);
+        let bytesRead = 0;
+        while (bytesRead < buffer.length) {
+          const chunk = readSync(fd, buffer, bytesRead, buffer.length - bytesRead, null);
+          if (chunk === 0) {
+            break;
+          }
+          bytesRead += chunk;
+        }
+        if (bytesRead > MAX_RESPONSE_BYTES) {
+          throw new Error(`an installed file exceeds the ${MAX_RESPONSE_BYTES}-byte verification cap: ${file2.path}`);
+        }
+        yield { path: file2.path, content: buffer.subarray(0, bytesRead) };
+      } finally {
+        closeSync(fd);
+      }
+    }
+  }
+  try {
+    return verifyFileChecksums(readEach(), manifest);
+  } catch (error51) {
+    return { ok: false, reason: error51 instanceof Error ? error51.message : "an installed file is unreadable" };
+  }
+}
+function readMarker(dir) {
+  try {
+    const content = readFileSync3(path4.join(dir, SKILL_MARKER_FILE), "utf8");
+    const parsed = JSON.parse(content);
+    if (typeof parsed === "object" && parsed !== null) {
+      return parsed;
+    }
+  } catch {
+  }
+  return null;
+}
+function resolveClaudeSkillInstallRoot(env) {
+  const configDir = requireNonBlank("CLAUDE_CONFIG_DIR", env.CLAUDE_CONFIG_DIR);
+  const legacyHome = requireNonBlank("CLAUDE_HOME", env.CLAUDE_HOME);
+  if (configDir !== null) {
+    const disagrees = legacyHome !== null && path4.resolve(legacyHome) !== path4.resolve(configDir);
+    return {
+      root: path4.resolve(path4.join(configDir, "skills")),
+      legacyNotice: disagrees ? `NOTICE: CLAUDE_HOME (${humanPath(legacyHome)}) is ignored; Claude Code reads CLAUDE_CONFIG_DIR (${humanPath(configDir)}).` : null
+    };
+  }
+  if (legacyHome !== null) {
+    throw new UsageError2(
+      `CLAUDE_HOME (${humanPath(legacyHome)}) is set, but Claude Code does not read it \u2014 the Skill would install where Claude Code never loads it. Set CLAUDE_CONFIG_DIR=${humanPath(legacyHome)} instead, or unset CLAUDE_HOME to install under the default ~/.claude.`
+    );
+  }
+  const home = resolveHome(env);
+  return { root: path4.resolve(path4.join(home, ".claude", "skills")), legacyNotice: null };
+}
+function requireNonBlank(name, value) {
+  if (value === void 0 || value === "") {
+    return null;
+  }
+  if (value.trim().length === 0) {
+    throw new UsageError2(`${name} is set to a blank value; unset it or give it a real path.`);
+  }
+  return value;
+}
+function resolveHome(env) {
+  const explicit = requireNonBlank("HOME", env.HOME);
+  if (explicit !== null) {
+    return explicit;
+  }
+  let osHome = "";
+  try {
+    osHome = os.userInfo().homedir;
+  } catch {
+  }
+  if (osHome.trim().length === 0) {
+    throw new UsageError2("HOME is unset or blank and the OS reports no home directory for this user; set HOME to a real path.");
+  }
+  return osHome;
+}
+function resolveCodexSkillsRoot(env) {
+  const codexHome = requireNonBlank("CODEX_HOME", env.CODEX_HOME);
+  return path4.resolve(path4.join(codexHome ?? path4.join(resolveHome(env), ".codex"), "skills"));
+}
+function installRoot(client, env) {
+  const override = requireNonBlank("ROST_SKILL_INSTALL_ROOT", env.ROST_SKILL_INSTALL_ROOT);
+  if (override !== null) {
+    return { root: path4.resolve(override, client), legacyNotice: null, viaOverride: true };
+  }
+  if (client === "codex") {
+    return { root: resolveCodexSkillsRoot(env), legacyNotice: null, viaOverride: false };
+  }
+  if (client === "claude-code") {
+    return { ...resolveClaudeSkillInstallRoot(env), viaOverride: false };
+  }
+  return { root: path4.resolve(path4.join(resolveHome(env), ".cursor", "skills")), legacyNotice: null, viaOverride: false };
+}
+function parseFlags2(args) {
+  const values = /* @__PURE__ */ new Map();
+  const flags = /* @__PURE__ */ new Set();
+  let json2 = false;
+  for (let index = 0; index < args.length; index += 1) {
+    const token = args[index];
+    if (token === void 0) {
+      continue;
+    }
+    if (!token.startsWith("--")) {
+      throw new UsageError2(`Unexpected argument: ${token}`);
+    }
+    const key = token.slice(2);
+    if (key === "json") {
+      json2 = true;
+      continue;
+    }
+    if (key === "client" || key === "tag") {
+      const value = args[index + 1];
+      if (value === void 0 || value.startsWith("--")) {
+        throw new UsageError2(`--${key} requires a value.`);
+      }
+      values.set(key, value);
+      index += 1;
+      continue;
+    }
+    throw new UsageError2(`Unexpected flag: --${key}`);
+  }
+  return { json: json2, values, flags };
+}
+function optionalValue2(parsed, key) {
+  const value = parsed.values.get(key);
+  return value !== void 0 && value.length > 0 ? value : void 0;
+}
+function parseClient2(value) {
+  if (!CLIENTS.has(value)) {
+    throw new UsageError2("--client must be claude-code, codex, or cursor.");
+  }
+  return value;
+}
+
+// src/skills.ts
+var UsageError3 = class extends Error {
+};
+var CLIENTS2 = /* @__PURE__ */ new Set(["claude-code", "codex", "cursor"]);
+function skillsUsage(binName = cliBrand.binName) {
+  return [
+    `${binName} skills list [--json]`,
+    `${binName} skills catalog [--json]`,
+    `${binName} skills get --slug <slug> [--json]`,
+    `${binName} skills file --slug <slug> --path SKILL.md`,
+    `${binName} skills enable rost/<slug> [--json]`,
+    `${binName} skills install <slug-or-rost/slug> [--seat-id <id>] [--client claude-code|codex|cursor] [--version <n>] [--local-only] [--json]`,
+    `${binName} skills install-implementation [--client claude-code|codex|cursor] [--tag <tag>] [--json]`,
+    `${binName} skills sync --seat-id <id> [--client claude-code|codex|cursor] [--json]`,
+    `${binName} skills assign --seat-id <id> (--skill <slug>|--slug <slug>|--skill-version-id <id>) [--approve] [--allow-blocked-proposal] [--json]`,
+    `${binName} skills revoke (--assignment-id <id>|--seat-id <id> --skill <slug>) [--json]`,
+    `${binName} skills publish (--slug <slug>|--skill-version-id <id>) [--allow-warnings] [--json]`
+  ].join("\n");
+}
+async function runSkills(context, args, env = process.env) {
+  try {
+    const [action, ...rest] = args;
+    if (action === "help" || action === "--help" || action === "-h" || action === void 0) {
+      context.io.stdout.write(`${skillsUsage(context.binName)}
+`);
+      return action === void 0 ? 1 : 0;
+    }
+    if (action === "list") {
+      return context.run(context.client, "skill.list", {}, void 0);
+    }
+    if (action === "catalog") {
+      const parsed = parseFlags3(rest, /* @__PURE__ */ new Set(["include-unentitled"]));
+      return context.run(context.client, "skill.catalog", {
+        ...parsed.flags.has("include-unentitled") ? { include_unentitled: true } : {}
+      }, parsed.json ? void 0 : formatCatalog);
+    }
+    if (action === "get") {
+      const parsed = parseFlags3(rest);
+      return context.run(context.client, "skill.get", { slug: requireValue3(parsed, "slug") }, parsed.json ? void 0 : formatSkillDetail);
+    }
+    if (action === "file") {
+      const parsed = parseFlags3(rest);
+      return context.run(context.client, "skill.file.get", {
+        slug: requireValue3(parsed, "slug"),
+        path: requireValue3(parsed, "path")
+      }, (output) => {
+        const content = asRecord4(output).content;
+        return typeof content === "string" ? content : JSON.stringify(output, null, 2);
+      });
+    }
+    if (action === "enable") {
+      const slug2 = rest[0];
+      if (!slug2 || slug2.startsWith("--")) {
+        throw new UsageError3(`Usage: ${context.binName} skills enable rost/<slug> [--json]`);
+      }
+      const parsed = parseFlags3(rest.slice(1));
+      return context.run(context.client, "skill.enable_catalog", { slug: slug2 }, parsed.json ? void 0 : formatEnable);
+    }
+    if (action === "install") {
+      return await installOne(context, rest, env);
+    }
+    if (action === "sync") {
+      return await syncAssigned(context, rest, env);
+    }
+    if (action === "assign") {
+      const parsed = parseFlags3(rest, /* @__PURE__ */ new Set(["approve", "allow-blocked-proposal"]));
+      const body = withDefined({
+        seat_id: requireValue3(parsed, "seat-id"),
+        status: parsed.flags.has("approve") ? "approved" : "proposed",
+        rationale: optionalValue3(parsed, "rationale") ?? "Skill selected for this Seat.",
+        allow_blocked_proposal: parsed.flags.has("allow-blocked-proposal")
+      }, {
+        slug: optionalValue3(parsed, "skill") ?? optionalValue3(parsed, "slug"),
+        skill_version_id: optionalValue3(parsed, "skill-version-id")
+      });
+      return context.run(context.client, "skill.assign_to_seat", body, parsed.json ? void 0 : formatAssignment, { targetSeatId: body.seat_id });
+    }
+    if (action === "revoke") {
+      const parsed = parseFlags3(rest);
+      const seatId = optionalValue3(parsed, "seat-id");
+      const body = withDefined({}, {
+        assignment_id: optionalValue3(parsed, "assignment-id"),
+        seat_id: seatId,
+        slug: optionalValue3(parsed, "skill") ?? optionalValue3(parsed, "slug"),
+        skill_version_id: optionalValue3(parsed, "skill-version-id"),
+        rationale: optionalValue3(parsed, "rationale")
+      });
+      return context.run(context.client, "skill.revoke_from_seat", body, parsed.json ? void 0 : formatRevoke, seatId ? { targetSeatId: seatId } : {});
+    }
+    if (action === "publish") {
+      const parsed = parseFlags3(rest, /* @__PURE__ */ new Set(["allow-warnings"]));
+      const body = withDefined({
+        allow_warnings: parsed.flags.has("allow-warnings")
+      }, {
+        slug: optionalValue3(parsed, "slug"),
+        skill_version_id: optionalValue3(parsed, "skill-version-id")
+      });
+      return context.run(context.client, "skill.publish", body, parsed.json ? void 0 : formatPublish);
+    }
+    throw new UsageError3(`Unknown skills action: ${action}`);
+  } catch (error51) {
+    if (error51 instanceof UsageError3) {
+      context.io.stderr.write(`${error51.message}
+`);
+      return 1;
+    }
+    if (error51 instanceof CommandClientError) {
+      return printCommandError2(context.io, error51);
+    }
+    throw error51;
+  }
+}
+async function installOne(context, args, env) {
+  const slug2 = args[0];
+  if (!slug2 || slug2.startsWith("--")) {
+    throw new UsageError3(`Usage: ${context.binName} skills install <slug-or-rost/slug> [--seat-id <id>] [--client claude-code|codex|cursor] [--version <n>] [--local-only] [--json]`);
+  }
+  const parsed = parseFlags3(args.slice(1), /* @__PURE__ */ new Set(["local-only"]));
+  const client = parseClient3(optionalValue3(parsed, "client") ?? "codex");
+  const seatId = optionalValue3(parsed, "seat-id");
+  const body = withDefined({
+    slug: slug2,
+    client,
+    local_only: parsed.flags.has("local-only")
+  }, {
+    seat_id: seatId,
+    version: optionalNumber2(parsed, "version")
+  });
+  const options = seatId ? { targetSeatId: seatId } : {};
+  const output = await executeInstallCommand(context, body, options);
+  const summary = applyLocalSkillChanges(output, client, env, { removeRevoked: false });
+  const outputRecord = asRecord4(output);
+  context.io.stdout.write(parsed.json ? `${JSON.stringify({ ...outputRecord, local: summary }, null, 2)}
+` : `${formatLocalSummary(summary)}
+`);
+  return 0;
+}
+async function syncAssigned(context, args, env) {
+  const parsed = parseFlags3(args);
+  const seatId = requireValue3(parsed, "seat-id");
+  const client = parseClient3(optionalValue3(parsed, "client") ?? "codex");
+  const output = await executeSkillCommand(context, "skill.sync_local", {
+    seat_id: seatId,
+    client
+  }, { targetSeatId: seatId });
+  const summary = applyLocalSkillChanges(output, client, env, { removeRevoked: true });
+  const outputRecord = asRecord4(output);
+  context.io.stdout.write(parsed.json ? `${JSON.stringify({ ...outputRecord, local: summary }, null, 2)}
+` : `${formatLocalSummary(summary)}
+`);
+  return 0;
+}
+async function executeInstallCommand(context, body, options) {
+  const slug2 = typeof body.slug === "string" ? body.slug : "";
+  if (slug2.startsWith("rost/") && body.local_only !== true) {
+    try {
+      return await executeSkillCommand(context, "skill.install_local", { ...body, local_only: true }, options);
+    } catch (error51) {
+      if (!isCommandConflict(error51)) {
+        throw error51;
+      }
     }
   }
+  return executeSkillCommand(context, "skill.install_local", body, options);
+}
+async function executeSkillCommand(context, commandId, body, options = {}) {
   try {
-    return verifyFileChecksums(readEach(), manifest);
+    const output = await context.client.execute(commandId, body, options);
+    return output.output;
   } catch (error51) {
-    return { ok: false, reason: error51 instanceof Error ? error51.message : "an installed file is unreadable" };
+    const pending = context.io.interactive === true ? pendingConfirmationFromError(error51) : null;
+    if (pending && pending.commandId === commandId) {
+      renderPendingConfirmationGate2(context.io, pending);
+      context.io.stderr.write(`Approving ${pending.commandId} confirmation ${pending.confirmationId} as the interactive CLI user.
+`);
+      const approved = await context.client.execute("confirmation.approve", { confirmation_id: pending.confirmationId, reviewed: true });
+      return asRecord4(approved.output).output ?? approved.output;
+    }
+    throw error51;
   }
 }
-function readMarker(dir) {
-  try {
-    const content = readFileSync4(path5.join(dir, SKILL_MARKER_FILE), "utf8");
-    const parsed = JSON.parse(content);
-    if (typeof parsed === "object" && parsed !== null) {
-      return parsed;
+function applyLocalSkillChanges(output, client, env, options) {
+  const root = installRoot2(client, env);
+  const changes = writeInstalls(output, root);
+  if (options.removeRevoked) {
+    changes.push(...removeRevokedInstalls(output, root));
+  }
+  return changes;
+}
+function writeInstalls(output, root) {
+  const installs = asArray2(asRecord4(output).installs);
+  return installs.map((entry) => {
+    const install = asRecord4(entry);
+    const slug2 = safeLocalSlug(String(install.slug ?? ""));
+    const metadata = asRecord4(install.metadata);
+    const files = asArray2(install.files).map(asRecord4);
+    const dir = path5.join(root, slug2);
+    const metadataPath = path5.join(dir, ".rost-skill.json");
+    const expectedHash = String(metadata.content_sha256 ?? "");
+    if (existingHash(metadataPath) === expectedHash) {
+      return { slug: slug2, dir, status: "unchanged", files: files.length };
     }
-  } catch {
+    rmSync2(dir, { recursive: true, force: true });
+    mkdirSync2(dir, { recursive: true });
+    for (const file2 of files) {
+      const relativePath = safeRelativePath2(String(file2.path ?? ""));
+      const content = String(file2.content ?? "");
+      const target = path5.join(dir, relativePath);
+      mkdirSync2(path5.dirname(target), { recursive: true });
+      writeFileSync2(target, content, "utf8");
+    }
+    writeFileSync2(metadataPath, `${JSON.stringify(metadata, null, 2)}
+`, "utf8");
+    return { slug: slug2, dir, status: "installed", files: files.length };
+  });
+}
+function removeRevokedInstalls(output, root) {
+  const installs = new Set(asArray2(asRecord4(output).installs).map((entry) => {
+    const slug2 = asRecord4(entry).slug;
+    return typeof slug2 === "string" ? slug2 : "";
+  }));
+  const revoked = asArray2(asRecord4(output).revoked);
+  const changes = [];
+  for (const entry of revoked) {
+    const slug2 = safeLocalSlug(String(asRecord4(entry).slug ?? ""));
+    if (installs.has(slug2)) {
+      continue;
+    }
+    const dir = path5.join(root, slug2);
+    if (!existsSync(dir)) {
+      continue;
+    }
+    rmSync2(dir, { recursive: true, force: true });
+    changes.push({ slug: slug2, dir, status: "removed", files: 0 });
   }
-  return null;
+  return changes;
 }
-function resolveClaudeSkillInstallRoot(env) {
-  const configDir = requireNonBlank("CLAUDE_CONFIG_DIR", env.CLAUDE_CONFIG_DIR);
-  const legacyHome = requireNonBlank("CLAUDE_HOME", env.CLAUDE_HOME);
-  if (configDir !== null) {
-    const disagrees = legacyHome !== null && path5.resolve(legacyHome) !== path5.resolve(configDir);
-    return {
-      root: path5.join(configDir, "skills"),
-      legacyNotice: disagrees ? `NOTICE: CLAUDE_HOME (${legacyHome}) is ignored; Claude Code reads CLAUDE_CONFIG_DIR (${configDir}).` : null
-    };
+function installRoot2(client, env) {
+  const override = env.ROST_SKILL_INSTALL_ROOT;
+  if (override && override.length > 0) {
+    return path5.resolve(override, client);
   }
-  if (legacyHome !== null) {
-    return {
-      root: path5.join(legacyHome, "skills"),
-      legacyNotice: "NOTICE: CLAUDE_HOME is deprecated and Claude Code does not read it; set CLAUDE_CONFIG_DIR instead."
-    };
+  if (client === "codex") {
+    try {
+      return path5.join(resolveCodexSkillsRoot(env), "rost");
+    } catch (error51) {
+      if (error51 instanceof UsageError2) {
+        throw new UsageError3(error51.message);
+      }
+      throw error51;
+    }
+  }
+  if (client === "claude-code") {
+    return path5.join(env.CLAUDE_HOME ?? path5.join(os2.homedir(), ".claude"), "skills", "rost");
   }
-  const home = requireNonBlank("HOME", env.HOME) ?? os2.homedir();
-  return { root: path5.join(home, ".claude", "skills"), legacyNotice: null };
+  return path5.join(os2.homedir(), ".cursor", "skills", "rost");
 }
-function requireNonBlank(name, value) {
-  if (value === void 0 || value === "") {
-    return null;
+function safeRelativePath2(value) {
+  const normalized = value.trim().replaceAll("\\", "/").replace(/^\.\/+/, "");
+  if (!normalized || normalized.startsWith("/") || normalized.includes("//") || normalized.split("/").includes("..")) {
+    throw new UsageError3("Server returned an invalid skill file path.");
   }
-  if (value.trim().length === 0) {
-    throw new UsageError3(`${name} is set to a blank value; unset it or give it a real path.`);
+  return normalized;
+}
+function safeLocalSlug(value) {
+  if (!/^[a-z0-9][a-z0-9-]{1,80}$/.test(value)) {
+    throw new UsageError3("Server returned an invalid skill slug.");
   }
   return value;
 }
-function installRoot2(client, env) {
-  const override = requireNonBlank("ROST_SKILL_INSTALL_ROOT", env.ROST_SKILL_INSTALL_ROOT);
-  if (override !== null) {
-    return { root: path5.resolve(override, client), legacyNotice: null };
-  }
-  if (client === "codex") {
-    return { root: path5.join(env.CODEX_HOME ?? path5.join(os2.homedir(), ".codex"), "skills"), legacyNotice: null };
+function existingHash(metadataPath) {
+  if (!existsSync(metadataPath)) {
+    return null;
   }
-  if (client === "claude-code") {
-    return resolveClaudeSkillInstallRoot(env);
+  try {
+    const parsed = JSON.parse(readFileSync4(metadataPath, "utf8"));
+    const hash2 = asRecord4(parsed).content_sha256;
+    return typeof hash2 === "string" ? hash2 : null;
+  } catch {
+    return null;
   }
-  return { root: path5.join(os2.homedir(), ".cursor", "skills"), legacyNotice: null };
 }
-function parseFlags3(args) {
+function parseFlags3(args, booleanFlags = /* @__PURE__ */ new Set()) {
   const values = /* @__PURE__ */ new Map();
   const flags = /* @__PURE__ */ new Set();
   let json2 = false;
@@ -63218,22 +63174,41 @@ function parseFlags3(args) {
       json2 = true;
       continue;
     }
-    if (key === "client" || key === "tag") {
-      const value = args[index + 1];
-      if (value === void 0 || value.startsWith("--")) {
-        throw new UsageError3(`--${key} requires a value.`);
-      }
-      values.set(key, value);
-      index += 1;
+    if (booleanFlags.has(key)) {
+      flags.add(key);
+      continue;
+    }
+    const value = args[index + 1];
+    if (value === void 0 || value.startsWith("--")) {
+      flags.add(key);
       continue;
     }
-    throw new UsageError3(`Unexpected flag: --${key}`);
+    values.set(key, value);
+    index += 1;
   }
   return { json: json2, values, flags };
 }
+function requireValue3(parsed, key) {
+  const value = optionalValue3(parsed, key);
+  if (value === void 0) {
+    throw new UsageError3(`Missing required --${key} value.`);
+  }
+  return value;
+}
 function optionalValue3(parsed, key) {
   const value = parsed.values.get(key);
-  return value !== void 0 && value.length > 0 ? value : void 0;
+  return value && value.length > 0 ? value : void 0;
+}
+function optionalNumber2(parsed, key) {
+  const value = optionalValue3(parsed, key);
+  if (value === void 0) {
+    return void 0;
+  }
+  const parsedNumber = Number(value);
+  if (!Number.isSafeInteger(parsedNumber) || parsedNumber <= 0) {
+    throw new UsageError3(`--${key} must be a positive integer.`);
+  }
+  return parsedNumber;
 }
 function parseClient3(value) {
   if (!CLIENTS2.has(value)) {
@@ -63241,6 +63216,118 @@ function parseClient3(value) {
   }
   return value;
 }
+function isCommandConflict(error51) {
+  return error51 instanceof CommandClientError && error51.status === 409;
+}
+function withDefined(base, extra) {
+  const next = { ...base };
+  for (const [key, value] of Object.entries(extra)) {
+    if (value !== void 0) {
+      next[key] = value;
+    }
+  }
+  return next;
+}
+function asRecord4(value) {
+  return typeof value === "object" && value !== null ? value : {};
+}
+function asArray2(value) {
+  return Array.isArray(value) ? value : [];
+}
+function formatCatalog(output) {
+  const entries = asArray2(asRecord4(output).catalog);
+  if (entries.length === 0) {
+    return "No ROST catalog skills are available for this tenant.";
+  }
+  return entries.map((entry) => {
+    const record2 = asRecord4(entry);
+    return `${record2.catalog_slug} [${record2.tier}/${record2.entitlement_status}] ${record2.name}`;
+  }).join("\n");
+}
+function formatSkillDetail(output) {
+  const skill = asRecord4(asRecord4(output).skill);
+  return `${skill.slug} v${skill.latest_version ?? "\u2014"} [${skill.status}] ${skill.name}
+${skill.description}`;
+}
+function formatEnable(output) {
+  const skill = asRecord4(asRecord4(output).skill);
+  const catalog = asRecord4(asRecord4(output).catalog);
+  return `Enabled ${catalog.catalog_slug} as ${skill.slug} v${skill.version} (${skill.skill_version_id})`;
+}
+function formatAssignment(output) {
+  const assignment = asRecord4(asRecord4(output).assignment);
+  return `${assignment.status} ${assignment.slug} for seat ${assignment.seat_id}; sync: ${String(asRecord4(output).local_sync_next_step)}`;
+}
+function formatRevoke(output) {
+  const record2 = asRecord4(output);
+  return `Revoked ${record2.slug} for seat ${record2.seat_id}; sync: ${record2.local_sync_next_step}`;
+}
+function formatPublish(output) {
+  const skill = asRecord4(asRecord4(output).skill);
+  return `Published ${skill.slug} v${skill.version} (${skill.skill_version_id})`;
+}
+function formatLocalSummary(summary) {
+  if (summary.length === 0) {
+    return "No skills to install.";
+  }
+  return summary.map((entry) => `${entry.status} ${entry.slug} -> ${entry.dir} (${entry.files} files)`).join("\n");
+}
+function printCommandError2(io, error51) {
+  if (error51.response && !error51.response.ok) {
+    const payload = {
+      code: error51.response.error.code,
+      message: error51.response.error.message,
+      ...error51.response.error.details === void 0 ? {} : { details: error51.response.error.details },
+      ...error51.response.error.help === void 0 ? {} : { help: error51.response.error.help },
+      ...error51.response.requestId === void 0 ? {} : { requestId: error51.response.requestId }
+    };
+    io.stderr.write(`${redactForLog(payload)}
+`);
+    if (error51.response.error.help !== void 0) {
+      io.stderr.write(`\u2192 try: ${redactForLog(error51.response.error.help)}
+`);
+    }
+    return error51.status === 409 ? 3 : error51.status >= 400 && error51.status < 500 ? 1 : 2;
+  }
+  io.stderr.write(`${redactForLog(error51.message)}
+`);
+  return error51.status >= 400 && error51.status < 500 ? 1 : 2;
+}
+function pendingConfirmationFromError(error51) {
+  if (!(error51 instanceof CommandClientError) || !error51.response || error51.response.ok || error51.response.error.code !== "COMMAND_CONFIRMATION_REQUIRED") {
+    return null;
+  }
+  const details = asRecord4(error51.response.error.details);
+  const confirmationId = details.confirmationId;
+  const commandId = details.commandId;
+  if (typeof confirmationId !== "string" || confirmationId.length === 0 || typeof commandId !== "string" || commandId.length === 0) {
+    return null;
+  }
+  const summary = typeof details.summary === "string" ? details.summary : void 0;
+  const riskLevel = typeof details.riskLevel === "string" ? details.riskLevel : void 0;
+  return {
+    confirmationId,
+    commandId,
+    ...summary === void 0 ? {} : { summary },
+    ...riskLevel === void 0 ? {} : { riskLevel },
+    ...details.diff === void 0 ? {} : { diff: details.diff }
+  };
+}
+function renderPendingConfirmationGate2(io, pending) {
+  if (pending.summary !== void 0) {
+    io.stderr.write(`${redactForLog(pending.summary)}
+`);
+  }
+  if (pending.riskLevel !== void 0) {
+    io.stderr.write(`Risk level: ${pending.riskLevel}
+`);
+  }
+  if (pending.diff !== void 0) {
+    io.stderr.write(`Diff:
+${redactForLog(pending.diff)}
+`);
+  }
+}
 
 // src/doctor.ts
 import { execFile as execFileCallback3 } from "node:child_process";