@skrr-ai/cli 0.1.44 → 0.1.46

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/harnessSkillLayout.js

@@ -0,0 +1,99 @@
+"use strict";
+/**
+ * OSK-10409 — which harnesses resolve the `.claude/skills/<name>/SKILL.md`
+ * layout, shared by the server and the daemon.
+ *
+ * ── Why this lives in auth-core ────────────────────────────────────────────
+ *
+ * The same reason `harnessTrust.ts` does: it is a DECLARED per-harness fact
+ * that several processes have to agree on, and the cost of them disagreeing is
+ * silent. It is not auth, and it does not pretend to be — auth-core is where
+ * this repo already keeps the small tables that a harness's identity answers.
+ *
+ * ── What the fact IS ───────────────────────────────────────────────────────
+ *
+ * The daemon materializes a session's skills at
+ * `<root>/.claude/skills/<name>/SKILL.md` and hands `<root>` to the harness —
+ * `--add-dir` for the Claude CLI, ACP `additionalDirectories` for Devin. A
+ * harness on this list READS that layout: it enumerates the tree, surfaces the
+ * manifest line, and resolves the body from disk. A harness that is not on it
+ * ignores the tree entirely, so nothing laid there ever reaches its model.
+ *
+ * It is a capability with EVIDENCE, never a brand check. The gate this replaced
+ * read `provider !== 'claude'` on the stated premise that every other harness
+ * ignores the layout, and the premise was false for Devin (OSK-10264): the
+ * daemon lays the same tree, passes it on `additionalDirectories`, and Devin
+ * loads it — measured live on 3000.10.31. Add a harness here only with the same
+ * kind of evidence, that its sessions actually surface a skill laid out this
+ * way. A harness that ignores the layout gains nothing and pays for the wire.
+ *
+ * ── Three readers, in three directions ─────────────────────────────────────
+ *
+ *  1. The server's PUSH gate (`buildDaemonServerSkills`): a harness on this
+ *     list is one a pushed skill should be sent to.
+ *  2. The server's INVOKED-BODY gate (`buildInvokedSkillsPrompt`, OSK-10361):
+ *     a harness on this list must NOT also have the body pasted into its
+ *     prompt — it already has it from the tree, and on ACP the paste lands in
+ *     the transcript at full skill size on every invoked turn.
+ *  3. The daemon's SHADOWING protection (`skill-shadowing.ts`, OSK-10044): a
+ *     harness on this list resolves `/<name>` from its own `.claude/skills`
+ *     roots, so a picked skill can be shadowed there by a same-named one — and
+ *     the daemon is the only place that collision can be seen. That gate spelled
+ *     `claude` and so never reached Devin, which the server-side paste was
+ *     accidentally masking until (2) stopped pasting.
+ *
+ * Reader 3 is why the table moved out of the API: the daemon cannot require an
+ * api-side module, and a second copy of a table whose whole value is that every
+ * reader agrees is worse than no table at all.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HARNESSES_LOADING_CLAUDE_SKILLS_LAYOUT = void 0;
+exports.harnessLoadsClaudeSkillsLayout = harnessLoadsClaudeSkillsLayout;
+exports.claudeSkillsLayoutEvidence = claudeSkillsLayoutEvidence;
+const firstPartyHarness_js_1 = require("./firstPartyHarness.js");
+/**
+ * Harness provider → the evidence that its sessions load the layout.
+ *
+ * The reason string is part of the entry, not decoration: an entry added
+ * without one is an entry nobody can audit later.
+ */
+exports.HARNESSES_LOADING_CLAUDE_SKILLS_LAYOUT = new Map([
+    ['claude', 'Claude Code reads .claude/skills natively from --add-dir'],
+    [
+        'devin',
+        'Devin imports the Claude convention from additionalDirectories ' +
+            '(read_config_from.claude, on by default) — verified live on 3000.10.31',
+    ],
+]);
+/**
+ * Canonicalise the way every reader of this table must.
+ *
+ * The provider is lower-cased and trimmed, then passed through
+ * `canonicalHarnessProvider` so an accepted alias of the first-party harness
+ * resolves to the same decision as its canonical slug rather than falling
+ * through to "not a native resolver". Callers with a RICHER normalizer (the API
+ * has `normalizeSessionProvider`, which also folds `claude-code`) apply theirs
+ * first; this is the floor, not a replacement.
+ */
+function canonicalize(provider) {
+    return String((0, firstPartyHarness_js_1.canonicalHarnessProvider)(provider.trim().toLowerCase()));
+}
+/**
+ * Whether this harness resolves a skill from the `.claude/skills` tree the
+ * daemon materializes, so the body reaches it without being pasted anywhere.
+ *
+ * An absent provider is NOT a native resolver. "We do not know what this is"
+ * must never mean "it reads the layout" — that direction withholds the body
+ * from a harness that needed it, which is a turn that looks like the skill ran.
+ */
+function harnessLoadsClaudeSkillsLayout(provider) {
+    if (!provider || typeof provider !== 'string')
+        return false;
+    return exports.HARNESSES_LOADING_CLAUDE_SKILLS_LAYOUT.has(canonicalize(provider));
+}
+/** The stated evidence for a harness on the list, or `null` when it is not. */
+function claudeSkillsLayoutEvidence(provider) {
+    if (!provider || typeof provider !== 'string')
+        return null;
+    return exports.HARNESSES_LOADING_CLAUDE_SKILLS_LAYOUT.get(canonicalize(provider)) ?? null;
+}

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/index.d.ts

@@ -27,11 +27,12 @@ export { formatRecoveryCode, parseRecoveryCode, normalizeRecoveryCode, isValidRe
 export { buildCredentialAad, decrypt as credEnvelopeDecrypt, deserialize as credEnvelopeDeserialize, encrypt as credEnvelopeEncrypt, ENVELOPE_MAGIC as CRED_ENVELOPE_MAGIC, generateDek, isEnvelopeString as isCredEnvelopeString, KEY_LEN as CRED_KEY_LEN, openBuffer as credOpenBuffer, sealBuffer as credSealBuffer, serialize as credEnvelopeSerialize, unwrap as credEnvelopeUnwrap, wrap as credEnvelopeWrap, type SealedBlob as CredSealedBlob, } from './credentialEnvelope.js';
 export { __setKekStrategyForTest, getKekStrategy, InMemoryKek, UnavailableKek, KekUnavailableError, LinuxKek, MacosKek, registerZeroizeHook, WindowsKek, zeroizeKekCaches, type KekStrategy, } from './kek/index.js';
 export { buildProof as buildDeviceProof, generateDeviceKeyPair, jwkThumbprint, normalizeHtu, publicJwkFromX, tokenHash, verifyProof as verifyDeviceProof, type DeviceKeyPair, type DeviceProofClaims, type DeviceProofHeader, type Ed25519PrivateJwk, type Ed25519PublicJwk, type VerifyFailureReason as DeviceProofVerifyFailureReason, type VerifyFailure as DeviceProofVerifyFailure, type VerifyOptions as DeviceProofVerifyOptions, type VerifySuccess as DeviceProofVerifySuccess, } from './deviceKey.js';
-export { initCredEnvelope, resetCredEnvelope, shutdownCredEnvelope, isCredEnvelopeActive, describeCredEnvelopeState, maybeEncryptForWrite, maybeDecryptOnRead, __wrappedDekFilePathForTest, __setStateForTest as __setCredEnvelopeStateForTest, __getStateForTest as __getCredEnvelopeStateForTest, __resetShutdownGuardForTest, type ReadTransformResult, } from './credentialEnvelopeBridge.js';
+export { initCredEnvelope, resetCredEnvelope, shutdownCredEnvelope, isCredEnvelopeActive, hasCredEnvelopePathConflict, describeCredEnvelopeState, maybeEncryptForWrite, maybeDecryptOnRead, __wrappedDekFilePathForTest, __setStateForTest as __setCredEnvelopeStateForTest, __getStateForTest as __getCredEnvelopeStateForTest, __resetShutdownGuardForTest, type ReadTransformResult, } from './credentialEnvelopeBridge.js';
 export { initDeviceIdentity, resetDeviceIdentity, signServerRequest, enrollWithServer, clearEnrollmentMarker, isDeviceIdentityActive, getDevicePublicKey, describeDeviceIdentityState, __publicKeyPathForTest, __privateKeyPathForTest, __enrollmentMarkerPathForTest, __enrollmentBackoffPathForTest, __setStateForTest as __setDeviceIdentityStateForTest, __getStateForTest as __getDeviceIdentityStateForTest, type EnrollmentResult, } from './deviceIdentityBridge.js';
 export { ensureMachineDaemonId, legacyDaemonUuids, __resetCachedDaemonIdForTest, } from './machineId.js';
 export { PAIR_AAD_PREFIX, PAIR_AAD_MAX_LEN, PAIR_BUNDLE_MAX_BASE64_LEN, PAIR_NONCE_LEN, PAIR_PUBKEY_LEN, PAIR_SECRET_LEN, PairBundleError, assemblePairBundleBase64, base64ToUint8Array as pairBase64ToUint8Array, base64UrlToUint8Array as pairBase64UrlToUint8Array, buildPairAad, buildPairUrl, generatePairKeyPair, openPairBundleBase64, parsePairBundle, parsePairPlaintext, parsePairUrl, uint8ArrayToBase64 as pairUint8ArrayToBase64, uint8ArrayToBase64Url as pairUint8ArrayToBase64Url, type AssembleBundleOptions as PairAssembleBundleOptions, type OpenBundleOptions as PairOpenBundleOptions, type PairBundle, type PairBundleErrorCode, type PairKeyPair, type PairPlaintextV1, type PairUrlFields, } from './daemonPair.js';
 export { HARNESS_TIERS, getHarnessTier, credentialPolicyForTier, tierPermitsConfiguredAutoMode, type HarnessTrustTier, type CredentialDeliveryPolicy, type CredentialMode, } from './harnessTrust.js';
+export { HARNESSES_LOADING_CLAUDE_SKILLS_LAYOUT, claudeSkillsLayoutEvidence, harnessLoadsClaudeSkillsLayout, } from './harnessSkillLayout.js';
 export { sanitizeSpawnEnv, SENSITIVE_ENV_VARS, SENSITIVE_ENV_PREFIXES, SENSITIVE_ENV_SUFFIXES, SENSITIVE_ENV_NAME_TOKENS, SENSITIVE_ENV_PREFIX_EXCEPTIONS, } from './spawnEnv.js';
 export { CONFIG_DIR_NAME, LEGACY_CONFIG_DIR_NAMES, NATIVE_ID_PREFIX, LEGACY_NATIVE_ID_PREFIXES, DEFAULT_BINARY_NAME, } from './localIdentity.js';
 export { findLegacyLocalState, describeLegacyState, type LegacyStateFinding, type LegacyStateReport, } from './legacyStatePreflight.js';
@@ -41,3 +42,4 @@ export { DEFAULT_FIRST_PARTY_HARNESS_CHANNEL, FIRST_PARTY_HARNESS_CHANNELS, firs
 export { OVERSKY_RELEASE_PUBLIC_KEYS, type ReleaseKey } from './releaseKeys.js';
 export { MAX_SIGS, buildArtifactMessage, buildManifestMessage, getDeltaFor, verifyArtifact, verifyManifest, type DaemonVersionManifest, type DeltaDescriptor, type ManifestSignature, type PlatformArtifact, type VerifyResult, } from './releaseManifest.js';
 export { resolveConfigRoot, configRootPath, isConfigRootOverridden } from './configRoot.js';
+export { PROFILES_SEGMENT, SUPERSEDED_MARKER_SUFFIX, SUPERSEDED_COPY_SUFFIX, profileStateDir, legacyProfileStateDir, resolveProfileStateDir, resolveProfileStateFile, profileStateFileLocations, profileStateFilePathsToClear, consolidateProfileState, type ResolvedProfileStateDir, type ConsolidationSpec, type ConsolidationStatus, type ConsolidationOutcome, } from './profileStateDir.js';

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/index.js

@@ -24,8 +24,9 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.challenge = exports.generateVerifier = exports.invalidateHeadersHelperCache = exports.runHeadersHelper = exports.SENTINEL_TRIGGERING_FAILURES = exports.__resetAuthHelperFailureReasonForTest = exports.getLastAuthHelperFailureReason = exports.getDefaultHelperTtlMs = exports.invokeAuthHelper = exports.AuthHelperUnavailableError = exports.AuthHelperUntrustedError = exports.CI_TOKEN_PREFIX = exports.classifyTokenKind = exports.invalidateAuthHelperCache = exports.__resetCredentialResolverForTest = exports.CREDENTIAL_PRECEDENCE = exports.CredentialResolver = exports.__setFdReaderForTest = exports.readAuthFromFd = exports.createRefreshScheduler = exports.UNKNOWN_401_BUDGET = exports.__resetUnknown401StreaksForTest = exports.__refreshDiagnostics = exports.installLockExitHandlers = exports.clearReauthState = exports.needsReauthState = exports.persistReauthState = exports.withAuthLock = exports.revokeDaemonRefreshSession = exports.refreshDaemonToken = exports.classifyRefreshResponse = exports.EXIT_NEEDS_REAUTH = exports.formatReauthMessage = exports.handleMidStreamAuthExpiry = exports.isAuthExpiredSseEvent = exports.decodeJwtPayload = exports.decodeJwtExpiry = exports.TransientAuthFailure = exports.PermanentAuthFailure = exports.emitAuthTelemetry = exports.getAuthBinaryName = exports.getAuthKillSwitches = exports.getAuthConfigDir = exports.getAuthLogger = exports.configureAuthCore = exports.OAUTH_CLI_SCOPE = exports.isDaemonScope = exports.VALID_DAEMON_SCOPE_SET = exports.ALL_DAEMON_SCOPES = exports.SCOPES = void 0;
 exports.tokenHash = exports.publicJwkFromX = exports.normalizeHtu = exports.jwkThumbprint = exports.generateDeviceKeyPair = exports.buildDeviceProof = exports.zeroizeKekCaches = exports.WindowsKek = exports.registerZeroizeHook = exports.MacosKek = exports.LinuxKek = exports.KekUnavailableError = exports.UnavailableKek = exports.InMemoryKek = exports.getKekStrategy = exports.__setKekStrategyForTest = exports.credEnvelopeWrap = exports.credEnvelopeUnwrap = exports.credEnvelopeSerialize = exports.credSealBuffer = exports.credOpenBuffer = exports.CRED_KEY_LEN = exports.isCredEnvelopeString = exports.generateDek = exports.CRED_ENVELOPE_MAGIC = exports.credEnvelopeEncrypt = exports.credEnvelopeDeserialize = exports.credEnvelopeDecrypt = exports.buildCredentialAad = exports.isValidRecoveryCode = exports.normalizeRecoveryCode = exports.parseRecoveryCode = exports.formatRecoveryCode = exports.MAX_TTL_DAYS = exports.MIN_TTL_DAYS = exports.parseTtlDays = exports.LoginExchangeError = exports.LoginInitError = exports.loginWithLocalhost = exports.LocalCallbackMalformedError = exports.LocalCallbackDeniedError = exports.LocalCallbackStateMismatchError = exports.LocalCallbackTimeoutError = exports.LocalCallbackBindError = exports.LocalCallbackError = exports.DEFAULT_LOGIN_TIMEOUT_MS = exports.startLocalCallback = exports.verifyChallenge = exports.safeEqual = exports.generateState = void 0;
-exports.getHarnessTier = exports.HARNESS_TIERS = exports.pairUint8ArrayToBase64Url = exports.pairUint8ArrayToBase64 = exports.parsePairUrl = exports.parsePairPlaintext = exports.parsePairBundle = exports.openPairBundleBase64 = exports.generatePairKeyPair = exports.buildPairUrl = exports.buildPairAad = exports.pairBase64UrlToUint8Array = exports.pairBase64ToUint8Array = exports.assemblePairBundleBase64 = exports.PairBundleError = exports.PAIR_SECRET_LEN = exports.PAIR_PUBKEY_LEN = exports.PAIR_NONCE_LEN = exports.PAIR_BUNDLE_MAX_BASE64_LEN = exports.PAIR_AAD_MAX_LEN = exports.PAIR_AAD_PREFIX = exports.__resetCachedDaemonIdForTest = exports.legacyDaemonUuids = exports.ensureMachineDaemonId = exports.__getDeviceIdentityStateForTest = exports.__setDeviceIdentityStateForTest = exports.__enrollmentBackoffPathForTest = exports.__enrollmentMarkerPathForTest = exports.__privateKeyPathForTest = exports.__publicKeyPathForTest = exports.describeDeviceIdentityState = exports.getDevicePublicKey = exports.isDeviceIdentityActive = exports.clearEnrollmentMarker = exports.enrollWithServer = exports.signServerRequest = exports.resetDeviceIdentity = exports.initDeviceIdentity = exports.__resetShutdownGuardForTest = exports.__getCredEnvelopeStateForTest = exports.__setCredEnvelopeStateForTest = exports.__wrappedDekFilePathForTest = exports.maybeDecryptOnRead = exports.maybeEncryptForWrite = exports.describeCredEnvelopeState = exports.isCredEnvelopeActive = exports.shutdownCredEnvelope = exports.resetCredEnvelope = exports.initCredEnvelope = exports.verifyDeviceProof = void 0;
-exports.isConfigRootOverridden = exports.configRootPath = exports.resolveConfigRoot = exports.verifyManifest = exports.verifyArtifact = exports.getDeltaFor = exports.buildManifestMessage = exports.buildArtifactMessage = exports.MAX_SIGS = exports.OVERSKY_RELEASE_PUBLIC_KEYS = exports.resolveFirstPartyHarnessChannel = exports.resolveChannelManifestUrl = exports.isFirstPartyHarnessChannel = exports.firstPartyHarnessFeedCandidates = exports.firstPartyHarnessFeedBase = exports.firstPartyHarnessChannelPrefix = exports.FIRST_PARTY_HARNESS_CHANNELS = exports.DEFAULT_FIRST_PARTY_HARNESS_CHANNEL = exports.migrateFirstPartyHarnessHome = exports.linkFirstPartyHarnessAliases = exports.firstPartyHarnessInstalledBinaryPath = exports.firstPartyHarnessHomeDir = exports.firstPartyHarnessBinDir = exports.FIRST_PARTY_HARNESS_PROVENANCE_SUFFIX = exports.FIRST_PARTY_HARNESS_PREVIOUS_SUFFIX = exports.describeLegacyState = exports.findLegacyLocalState = exports.DEFAULT_BINARY_NAME = exports.LEGACY_NATIVE_ID_PREFIXES = exports.NATIVE_ID_PREFIX = exports.LEGACY_CONFIG_DIR_NAMES = exports.CONFIG_DIR_NAME = exports.SENSITIVE_ENV_PREFIX_EXCEPTIONS = exports.SENSITIVE_ENV_NAME_TOKENS = exports.SENSITIVE_ENV_SUFFIXES = exports.SENSITIVE_ENV_PREFIXES = exports.SENSITIVE_ENV_VARS = exports.sanitizeSpawnEnv = exports.tierPermitsConfiguredAutoMode = exports.credentialPolicyForTier = void 0;
+exports.HARNESS_TIERS = exports.pairUint8ArrayToBase64Url = exports.pairUint8ArrayToBase64 = exports.parsePairUrl = exports.parsePairPlaintext = exports.parsePairBundle = exports.openPairBundleBase64 = exports.generatePairKeyPair = exports.buildPairUrl = exports.buildPairAad = exports.pairBase64UrlToUint8Array = exports.pairBase64ToUint8Array = exports.assemblePairBundleBase64 = exports.PairBundleError = exports.PAIR_SECRET_LEN = exports.PAIR_PUBKEY_LEN = exports.PAIR_NONCE_LEN = exports.PAIR_BUNDLE_MAX_BASE64_LEN = exports.PAIR_AAD_MAX_LEN = exports.PAIR_AAD_PREFIX = exports.__resetCachedDaemonIdForTest = exports.legacyDaemonUuids = exports.ensureMachineDaemonId = exports.__getDeviceIdentityStateForTest = exports.__setDeviceIdentityStateForTest = exports.__enrollmentBackoffPathForTest = exports.__enrollmentMarkerPathForTest = exports.__privateKeyPathForTest = exports.__publicKeyPathForTest = exports.describeDeviceIdentityState = exports.getDevicePublicKey = exports.isDeviceIdentityActive = exports.clearEnrollmentMarker = exports.enrollWithServer = exports.signServerRequest = exports.resetDeviceIdentity = exports.initDeviceIdentity = exports.__resetShutdownGuardForTest = exports.__getCredEnvelopeStateForTest = exports.__setCredEnvelopeStateForTest = exports.__wrappedDekFilePathForTest = exports.maybeDecryptOnRead = exports.maybeEncryptForWrite = exports.describeCredEnvelopeState = exports.hasCredEnvelopePathConflict = exports.isCredEnvelopeActive = exports.shutdownCredEnvelope = exports.resetCredEnvelope = exports.initCredEnvelope = exports.verifyDeviceProof = void 0;
+exports.resolveProfileStateDir = exports.legacyProfileStateDir = exports.profileStateDir = exports.SUPERSEDED_COPY_SUFFIX = exports.SUPERSEDED_MARKER_SUFFIX = exports.PROFILES_SEGMENT = exports.isConfigRootOverridden = exports.configRootPath = exports.resolveConfigRoot = exports.verifyManifest = exports.verifyArtifact = exports.getDeltaFor = exports.buildManifestMessage = exports.buildArtifactMessage = exports.MAX_SIGS = exports.OVERSKY_RELEASE_PUBLIC_KEYS = exports.resolveFirstPartyHarnessChannel = exports.resolveChannelManifestUrl = exports.isFirstPartyHarnessChannel = exports.firstPartyHarnessFeedCandidates = exports.firstPartyHarnessFeedBase = exports.firstPartyHarnessChannelPrefix = exports.FIRST_PARTY_HARNESS_CHANNELS = exports.DEFAULT_FIRST_PARTY_HARNESS_CHANNEL = exports.migrateFirstPartyHarnessHome = exports.linkFirstPartyHarnessAliases = exports.firstPartyHarnessInstalledBinaryPath = exports.firstPartyHarnessHomeDir = exports.firstPartyHarnessBinDir = exports.FIRST_PARTY_HARNESS_PROVENANCE_SUFFIX = exports.FIRST_PARTY_HARNESS_PREVIOUS_SUFFIX = exports.describeLegacyState = exports.findLegacyLocalState = exports.DEFAULT_BINARY_NAME = exports.LEGACY_NATIVE_ID_PREFIXES = exports.NATIVE_ID_PREFIX = exports.LEGACY_CONFIG_DIR_NAMES = exports.CONFIG_DIR_NAME = exports.SENSITIVE_ENV_PREFIX_EXCEPTIONS = exports.SENSITIVE_ENV_NAME_TOKENS = exports.SENSITIVE_ENV_SUFFIXES = exports.SENSITIVE_ENV_PREFIXES = exports.SENSITIVE_ENV_VARS = exports.sanitizeSpawnEnv = exports.harnessLoadsClaudeSkillsLayout = exports.claudeSkillsLayoutEvidence = exports.HARNESSES_LOADING_CLAUDE_SKILLS_LAYOUT = exports.tierPermitsConfiguredAutoMode = exports.credentialPolicyForTier = exports.getHarnessTier = void 0;
+exports.consolidateProfileState = exports.profileStateFilePathsToClear = exports.profileStateFileLocations = exports.resolveProfileStateFile = void 0;
 // Daemon scope vocabulary — single source of truth for non-Mongoose tiers
 // (daemon, desktop, cli). Schema-bound canonical lives in
 // `@skrr-ai/data-schemas/common/daemonScopes`; the two are kept byte-equal
@@ -228,6 +229,7 @@ Object.defineProperty(exports, "initCredEnvelope", { enumerable: true, get: func
 Object.defineProperty(exports, "resetCredEnvelope", { enumerable: true, get: function () { return credentialEnvelopeBridge_js_1.resetCredEnvelope; } });
 Object.defineProperty(exports, "shutdownCredEnvelope", { enumerable: true, get: function () { return credentialEnvelopeBridge_js_1.shutdownCredEnvelope; } });
 Object.defineProperty(exports, "isCredEnvelopeActive", { enumerable: true, get: function () { return credentialEnvelopeBridge_js_1.isCredEnvelopeActive; } });
+Object.defineProperty(exports, "hasCredEnvelopePathConflict", { enumerable: true, get: function () { return credentialEnvelopeBridge_js_1.hasCredEnvelopePathConflict; } });
 Object.defineProperty(exports, "describeCredEnvelopeState", { enumerable: true, get: function () { return credentialEnvelopeBridge_js_1.describeCredEnvelopeState; } });
 Object.defineProperty(exports, "maybeEncryptForWrite", { enumerable: true, get: function () { return credentialEnvelopeBridge_js_1.maybeEncryptForWrite; } });
 Object.defineProperty(exports, "maybeDecryptOnRead", { enumerable: true, get: function () { return credentialEnvelopeBridge_js_1.maybeDecryptOnRead; } });
@@ -293,6 +295,14 @@ Object.defineProperty(exports, "HARNESS_TIERS", { enumerable: true, get: functio
 Object.defineProperty(exports, "getHarnessTier", { enumerable: true, get: function () { return harnessTrust_js_1.getHarnessTier; } });
 Object.defineProperty(exports, "credentialPolicyForTier", { enumerable: true, get: function () { return harnessTrust_js_1.credentialPolicyForTier; } });
 Object.defineProperty(exports, "tierPermitsConfiguredAutoMode", { enumerable: true, get: function () { return harnessTrust_js_1.tierPermitsConfiguredAutoMode; } });
+// OSK-10409 — which harnesses resolve the `.claude/skills` layout the daemon
+// materializes. One declared table with per-harness evidence, read by the
+// server's two skill gates and by the daemon's shadowing protection. See
+// harnessSkillLayout.ts for why a second copy would be worse than none.
+var harnessSkillLayout_js_1 = require("./harnessSkillLayout.js");
+Object.defineProperty(exports, "HARNESSES_LOADING_CLAUDE_SKILLS_LAYOUT", { enumerable: true, get: function () { return harnessSkillLayout_js_1.HARNESSES_LOADING_CLAUDE_SKILLS_LAYOUT; } });
+Object.defineProperty(exports, "claudeSkillsLayoutEvidence", { enumerable: true, get: function () { return harnessSkillLayout_js_1.claudeSkillsLayoutEvidence; } });
+Object.defineProperty(exports, "harnessLoadsClaudeSkillsLayout", { enumerable: true, get: function () { return harnessSkillLayout_js_1.harnessLoadsClaudeSkillsLayout; } });
 // OSK-3892 — spawn-env sanitization, shared by the daemon (which has stripped
 // its own credentials before every harness spawn all along) and the CLI (which
 // spawns the SAME engine and did not). `daemon/src/env-sanitize.ts` re-exports
@@ -361,3 +371,17 @@ var configRoot_js_1 = require("./configRoot.js");
 Object.defineProperty(exports, "resolveConfigRoot", { enumerable: true, get: function () { return configRoot_js_1.resolveConfigRoot; } });
 Object.defineProperty(exports, "configRootPath", { enumerable: true, get: function () { return configRoot_js_1.configRootPath; } });
 Object.defineProperty(exports, "isConfigRootOverridden", { enumerable: true, get: function () { return configRoot_js_1.isConfigRootOverridden; } });
+// The one definition of where a PROFILE's auth state lives under that root, and
+// the migration for a machine that ended up with two. Same lesson, one level
+// down: two modules spelled the rule themselves and the two consumers disagreed.
+var profileStateDir_js_1 = require("./profileStateDir.js");
+Object.defineProperty(exports, "PROFILES_SEGMENT", { enumerable: true, get: function () { return profileStateDir_js_1.PROFILES_SEGMENT; } });
+Object.defineProperty(exports, "SUPERSEDED_MARKER_SUFFIX", { enumerable: true, get: function () { return profileStateDir_js_1.SUPERSEDED_MARKER_SUFFIX; } });
+Object.defineProperty(exports, "SUPERSEDED_COPY_SUFFIX", { enumerable: true, get: function () { return profileStateDir_js_1.SUPERSEDED_COPY_SUFFIX; } });
+Object.defineProperty(exports, "profileStateDir", { enumerable: true, get: function () { return profileStateDir_js_1.profileStateDir; } });
+Object.defineProperty(exports, "legacyProfileStateDir", { enumerable: true, get: function () { return profileStateDir_js_1.legacyProfileStateDir; } });
+Object.defineProperty(exports, "resolveProfileStateDir", { enumerable: true, get: function () { return profileStateDir_js_1.resolveProfileStateDir; } });
+Object.defineProperty(exports, "resolveProfileStateFile", { enumerable: true, get: function () { return profileStateDir_js_1.resolveProfileStateFile; } });
+Object.defineProperty(exports, "profileStateFileLocations", { enumerable: true, get: function () { return profileStateDir_js_1.profileStateFileLocations; } });
+Object.defineProperty(exports, "profileStateFilePathsToClear", { enumerable: true, get: function () { return profileStateDir_js_1.profileStateFilePathsToClear; } });
+Object.defineProperty(exports, "consolidateProfileState", { enumerable: true, get: function () { return profileStateDir_js_1.consolidateProfileState; } });

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/loginLocalhost.js

@@ -318,10 +318,30 @@ async function startLocalCallback(opts) {
         },
     };
 }
-// ---------------------------------------------------------------------
-// Static HTML responses — no user-controlled fields anywhere.
-// ---------------------------------------------------------------------
-function htmlShell(title, accent, headline, body) {
+/**
+ * The machine end of the handshake. Deliberately a display rather than
+ * a terminal window: the user just came from a browser, and a monitor
+ * outline is the one glyph that reads as "the computer in front of
+ * you" without needing a caption.
+ */
+const DISPLAY_GLYPH = `<svg class="glyph" viewBox="0 0 24 24" aria-hidden="true">
+        <rect x="2.25" y="3.5" width="19.5" height="13.5" rx="2.5"/>
+        <path d="M12 17v3.25"/>
+        <path d="M8.5 20.5h7"/>
+      </svg>`;
+/** Badge interiors, one per verdict. Stroked, never filled. */
+const VERDICT_MARK = {
+    success: '<path d="M5.5 12.5 10 17l8.5-9"/>',
+    declined: '<path d="M7 7l10 10M17 7 7 17"/>',
+    error: '<path d="M12 7v6.25"/><path d="M12 16.75h.01"/>',
+};
+/**
+ * Renders the shared page. `verdict` selects the badge palette via a
+ * class — no interpolated colour, so the template stays a constant
+ * string per state and there is nothing for a caller to smuggle CSS
+ * through.
+ */
+function htmlShell(title, verdict, headline, body) {
     // Single inline template — keeps the binary self-contained (no
     // bundled assets) and survives offline/firewalled environments.
     return `<!doctype html>
@@ -330,39 +350,170 @@ function htmlShell(title, accent, headline, body) {
   <meta charset="utf-8">
   <title>${title}</title>
   <meta name="viewport" content="width=device-width,initial-scale=1">
+  <link rel="icon" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect width='32' height='32' rx='8' fill='%230d0d0d'/%3E%3Ctext x='16' y='21' font-family='system-ui,sans-serif' font-size='11' font-weight='700' fill='%23fff' text-anchor='middle'%3ESkrr%3C/text%3E%3C/svg%3E">
   <style>
-    body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", system-ui, sans-serif;
-           background: #0b0d12; color: #f4f6fb; margin: 0; min-height: 100vh;
-           display: grid; place-items: center; }
-    .card { max-width: 24rem; padding: 2rem; text-align: center; }
-    h1 { font-size: 1.4rem; margin: 0 0 0.5rem 0; font-weight: 600; }
-    p  { margin: 0; color: #94a3b8; line-height: 1.5; font-size: 0.95rem; }
-    .badge { width: 56px; height: 56px; margin: 0 auto 1.25rem; border-radius: 50%;
-             background: ${accent}; display: grid; place-items: center; }
-    .badge svg { width: 28px; height: 28px; stroke: white; stroke-width: 3; fill: none;
-                 stroke-linecap: round; stroke-linejoin: round; }
+    :root {
+      color-scheme: light dark;
+      --bg: #ffffff;
+      --ink: #0d0d0d;
+      --muted: #6b7280;
+      --stroke: #111111;
+      --tile-bg: #0d0d0d;
+      --tile-ink: #ffffff;
+      --ok-bg: #e7f6ec;
+      --ok-ink: #16a34a;
+      --neutral-bg: #f1f3f5;
+      --neutral-ink: #6b7280;
+      --bad-bg: #fdeceb;
+      --bad-ink: #dc2626;
+    }
+    @media (prefers-color-scheme: dark) {
+      :root {
+        --bg: #0b0d12;
+        --ink: #f4f6fb;
+        --muted: #9aa4b5;
+        --stroke: #e7eaf1;
+        --tile-bg: #f4f6fb;
+        --tile-ink: #0b0d12;
+        --ok-bg: rgba(52, 211, 153, 0.14);
+        --ok-ink: #34d399;
+        --neutral-bg: rgba(148, 163, 184, 0.16);
+        --neutral-ink: #94a3b8;
+        --bad-bg: rgba(248, 113, 113, 0.16);
+        --bad-ink: #f87171;
+      }
+    }
+
+    * { box-sizing: border-box; }
+    html, body { height: 100%; }
+    body {
+      margin: 0;
+      background: var(--bg);
+      color: var(--ink);
+      font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Inter, Roboto,
+                   system-ui, "Helvetica Neue", Arial, sans-serif;
+      -webkit-font-smoothing: antialiased;
+      text-rendering: optimizeLegibility;
+      display: grid;
+      place-items: center;
+      padding: 32px 24px;
+    }
+
+    .card { width: 100%; max-width: 32rem; text-align: center; }
+
+    /* The handshake row. */
+    .stage {
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      gap: 18px;
+      margin-bottom: 56px;
+    }
+    .glyph, .badge, .tile { flex: 0 0 auto; }
+
+    .glyph {
+      width: 46px; height: 46px;
+      fill: none;
+      stroke: var(--stroke);
+      stroke-width: 1.85;
+      stroke-linecap: round;
+      stroke-linejoin: round;
+    }
+
+    .badge {
+      width: 48px; height: 48px;
+      border-radius: 50%;
+      display: grid;
+      place-items: center;
+      background: var(--neutral-bg);
+    }
+    .badge svg {
+      width: 23px; height: 23px;
+      fill: none;
+      stroke: var(--neutral-ink);
+      stroke-width: 2.6;
+      stroke-linecap: round;
+      stroke-linejoin: round;
+    }
+    .badge.is-success { background: var(--ok-bg); }
+    .badge.is-success svg { stroke: var(--ok-ink); }
+    .badge.is-error { background: var(--bad-bg); }
+    .badge.is-error svg { stroke: var(--bad-ink); }
+
+    .tile {
+      width: 46px; height: 46px;
+      border-radius: 12px;
+      background: var(--tile-bg);
+      color: var(--tile-ink);
+      display: grid;
+      place-items: center;
+      font-size: 13.5px;
+      font-weight: 700;
+      letter-spacing: -0.03em;
+    }
+
+    h1 {
+      margin: 0 0 12px;
+      font-size: clamp(27px, 6.2vw, 36px);
+      font-weight: 700;
+      letter-spacing: -0.021em;
+      line-height: 1.15;
+    }
+    p {
+      margin: 0;
+      color: var(--muted);
+      font-size: clamp(15px, 3.2vw, 19px);
+      font-weight: 400;
+      line-height: 1.5;
+    }
+
+    /* Entrance: one short rise, staggered. Nothing loops, nothing
+       moves after ~0.4s — this page is read once and closed. */
+    @keyframes rise {
+      from { opacity: 0; transform: translateY(9px); }
+      to   { opacity: 1; transform: none; }
+    }
+    @keyframes draw { to { stroke-dashoffset: 0; } }
+    .stage, h1, p { animation: rise 420ms cubic-bezier(0.22, 0.8, 0.3, 1) both; }
+    h1 { animation-delay: 60ms; }
+    p  { animation-delay: 110ms; }
+    .badge.is-success svg path {
+      stroke-dasharray: 26;
+      stroke-dashoffset: 26;
+      animation: draw 340ms cubic-bezier(0.65, 0, 0.35, 1) 220ms both;
+    }
+
+    @media (prefers-reduced-motion: reduce) {
+      .stage, h1, p, .badge.is-success svg path {
+        animation: none;
+        opacity: 1;
+        transform: none;
+        stroke-dashoffset: 0;
+      }
+    }
   </style>
 </head>
 <body>
-  <div class="card">
-    ${headline}
+  <main class="card">
+    <div class="stage">
+      ${DISPLAY_GLYPH}
+      <div class="badge is-${verdict}">
+        <svg viewBox="0 0 24 24" aria-hidden="true">${VERDICT_MARK[verdict]}</svg>
+      </div>
+      <div class="tile" aria-hidden="true">Skrr</div>
+    </div>
+    <h1>${headline}</h1>
     <p>${body}</p>
-  </div>
+  </main>
 </body>
 </html>`;
 }
 function successHtml() {
-    const headline = `<div class="badge"><svg viewBox="0 0 24 24"><path d="M5 13l4 4L19 7"/></svg></div>
-    <h1>Authorized</h1>`;
-    return htmlShell('skrr — Authorized', '#10b981', headline, 'You can close this tab and return to your terminal.');
+    return htmlShell('Connected to Skrr', 'success', 'Connected to Skrr', 'You may now close this window and return to your terminal.');
 }
 function declinedHtml() {
-    const headline = `<div class="badge" style="background:#64748b"><svg viewBox="0 0 24 24"><path d="M6 6l12 12M18 6L6 18"/></svg></div>
-    <h1>Authorization declined</h1>`;
-    return htmlShell('skrr — Authorization declined', '#64748b', headline, 'You can close this tab. Run the CLI command again to retry.');
+    return htmlShell('Skrr — Authorization declined', 'declined', 'Authorization declined', 'You can close this window. Run the command again to retry.');
 }
 function genericFailureHtml() {
-    const headline = `<div class="badge" style="background:#ef4444"><svg viewBox="0 0 24 24"><path d="M12 8v4M12 16h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z"/></svg></div>
-    <h1>Authorization error</h1>`;
-    return htmlShell('skrr — Authorization error', '#ef4444', headline, 'Something went wrong. You can close this tab and retry from the terminal.');
+    return htmlShell('Skrr — Authorization error', 'error', 'Authorization error', 'Something went wrong. Close this window and try again.');
 }

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/profileStateDir.d.ts

@@ -0,0 +1,119 @@
+/** Directory segment that separates per-profile state from machine-scoped state. */
+export declare const PROFILES_SEGMENT = "profiles";
+/**
+ * Sidecar written beside a legacy file once it has been consolidated. Its
+ * PRESENCE is what flips resolution to the canonical copy; its contents are for
+ * a human reading the directory afterwards.
+ */
+export declare const SUPERSEDED_MARKER_SUFFIX = ".superseded.json";
+/**
+ * Suffix for a canonical file moved aside to make room. Only used when the
+ * canonical copy existed and was NOT usable — a usable one is never replaced.
+ */
+export declare const SUPERSEDED_COPY_SUFFIX = ".superseded";
+/** The canonical directory for a profile's auth state. */
+export declare function profileStateDir(profile: string): string;
+/**
+ * Where a consumer whose `configDir` is already profile-scoped used to write.
+ *
+ * `null` when it resolves to the canonical directory — i.e. the consumer passes
+ * the machine root and never had a second location. Callers branch on `null`
+ * rather than comparing strings so the "one root" case costs one check.
+ */
+export declare function legacyProfileStateDir(profile: string): string | null;
+export interface ResolvedProfileStateDir {
+    /** The directory this process must read and write. */
+    dir: string;
+    canonicalDir: string;
+    legacyDir: string | null;
+    /** True when `dir` is the legacy directory — i.e. consolidation is still owed. */
+    usingLegacy: boolean;
+}
+/**
+ * Resolve the directory holding `primaryFilename` for `profile`.
+ *
+ * `primaryFilename` is the file whose presence decides where a group of related
+ * files lives. Device identity has four files that must be read from ONE
+ * directory — a public JWK from one copy and a private key from the other is a
+ * keypair mismatch — so the group anchors on the private key rather than each
+ * file answering for itself.
+ */
+export declare function resolveProfileStateDir(profile: string, primaryFilename: string): ResolvedProfileStateDir;
+/** `resolveProfileStateDir` for a single self-anchoring file. */
+export declare function resolveProfileStateFile(profile: string, filename: string): ResolvedProfileStateDir & {
+    path: string;
+    canonicalPath: string;
+    legacyPath: string | null;
+};
+/** Every location `filename` may occupy for `profile`, canonical first. */
+export declare function profileStateFileLocations(profile: string, filename: string): string[];
+export type ConsolidationStatus = 
+/** One root — this consumer never had a second location. */
+'not_applicable'
+/** Nothing at the legacy location to migrate. */
+ | 'nothing_to_migrate'
+/** Already done, or both copies already agree. */
+ | 'already_consolidated'
+/** Canonical was absent; the legacy copy was adopted as canonical. */
+ | 'adopted'
+/** Canonical was present but unusable; replaced, and kept under `.superseded`. */
+ | 'superseded'
+/** Both copies are usable and DIFFERENT. Refused — a human decides. */
+ | 'conflict';
+export interface ConsolidationOutcome {
+    status: ConsolidationStatus;
+    profile: string;
+    canonicalDir: string;
+    legacyDir: string | null;
+    /** Canonical paths written by this call. Empty on a refusal or a dry run. */
+    written: string[];
+    /** Canonical paths moved aside before being replaced. */
+    supersededAside: string[];
+    /** Identities compared, when both sides were read. `null` means unreadable. */
+    identities?: {
+        canonical: string | null;
+        legacy: string | null;
+    };
+    dryRun: boolean;
+}
+export interface ConsolidationSpec {
+    /** Files to move together, in copy order. Missing ones are skipped. */
+    files: readonly string[];
+    /** The file whose presence decides whether the group exists at a location. */
+    primary: string;
+    /**
+     * Stable identity of the state held in `dir`, or `null` when it cannot be
+     * read. Two directories are the same state iff their identities are equal and
+     * non-null.
+     *
+     * This exists because raw bytes cannot answer the question. A wrapped DEK
+     * carries a random nonce, so wrapping ONE key twice produces two different
+     * files — comparing bytes would report a conflict between two copies of the
+     * same key and refuse a migration that was safe. The envelope hashes the
+     * UNWRAPPED key; device identity reads the plaintext public JWK.
+     *
+     * Default: SHA-256 of the primary file's bytes, which is only correct for
+     * content that is not re-serialized.
+     */
+    identify?: (dir: string) => Promise<string | null> | string | null;
+    /** Report what would happen and write nothing. */
+    dryRun?: boolean;
+    onEvent?: (name: string, success: boolean, meta: Record<string, unknown>) => void;
+}
+/**
+ * Consolidate a profile's state onto the canonical path. Idempotent, additive,
+ * and refuses rather than guesses.
+ *
+ * The one case it will not decide is two usable, different keys for one profile:
+ * each side has sealed content under its own, that content lives in the OS
+ * keychain, and nothing here can re-seal it. Picking a winner there would
+ * destroy the loser's credentials silently, which is the exact failure this
+ * whole module exists to avoid.
+ */
+export declare function consolidateProfileState(profile: string, spec: ConsolidationSpec): Promise<ConsolidationOutcome>;
+/**
+ * Every path a profile's copy of `filename` can occupy, plus its marker —
+ * what a genuine logout must remove. Deliberately separate from the migration:
+ * this module never deletes, and logout is the one caller that must.
+ */
+export declare function profileStateFilePathsToClear(profile: string, filename: string): string[];