gestalt-mobile 0.13.0 → 0.15.0

package/dist/server/server/features/skills/list-profiles/endpoint.js

@@ -8,21 +8,45 @@ export function registerListSkillProfiles(app, deps) {
     app.get('/api/skill-profiles', async (_request, reply) => {
         try {
             const names = await deps.listGlobalProfileNames();
-            const profiles = await Promise.all(names.sort((a, b) => a.localeCompare(b)).map(async (name) => {
+            const profiles = await Promise.all(names
+                .sort((a, b) => a.localeCompare(b))
+                .map(async (name) => {
                 try {
                     const profile = await deps.readGlobalProfile(name);
                     return profile
-                        ? { name: profile.name, version: profile.version, path: deps.profilePath(name), skills: profile.skills }
-                        : { name, path: deps.profilePath(name), error: { code: 'INVALID_SKILL_PROFILE', message: 'Profile disappeared while reading.' } };
+                        ? {
+                            name: profile.name,
+                            version: profile.version,
+                            path: deps.profilePath(name),
+                            skills: profile.skills,
+                        }
+                        : {
+                            name,
+                            path: deps.profilePath(name),
+                            error: {
+                                code: 'INVALID_SKILL_PROFILE',
+                                message: 'Profile disappeared while reading.',
+                            },
+                        };
                 }
                 catch (error) {
-                    return { name, path: deps.profilePath(name), error: { code: 'INVALID_SKILL_PROFILE', message: error instanceof Error ? error.message : 'Invalid profile.' } };
+                    return {
+                        name,
+                        path: deps.profilePath(name),
+                        error: {
+                            code: 'INVALID_SKILL_PROFILE',
+                            message: error instanceof Error ? error.message : 'Invalid profile.',
+                        },
+                    };
                 }
             }));
             return { profiles };
         }
         catch {
-            return reply.code(500).type('application/problem+json').send(problem('SKILL_PROFILE_PERSISTENCE_FAILED', 500, 'Skill profiles could not be read.', true));
+            return reply
+                .code(500)
+                .type('application/problem+json')
+                .send(problem('SKILL_PROFILE_PERSISTENCE_FAILED', 500, 'Skill profiles could not be read.', true));
         }
     });
 }

package/dist/server/server/features/skills/model/skill-profile.js

@@ -37,7 +37,20 @@ export const availableSkillSchema = z
         defaultPrompt: z.string().optional(),
     })
         .optional(),
-    dependencies: z.object({ tools: z.array(z.object({ type: z.string(), value: z.string(), description: z.string().optional(), transport: z.string().optional(), command: z.string().optional(), url: z.string().optional() })).optional() }).optional(),
+    dependencies: z
+        .object({
+        tools: z
+            .array(z.object({
+            type: z.string(),
+            value: z.string(),
+            description: z.string().optional(),
+            transport: z.string().optional(),
+            command: z.string().optional(),
+            url: z.string().optional(),
+        }))
+            .optional(),
+    })
+        .optional(),
     scope: z.string().optional(),
 })
     .strict();
@@ -53,7 +66,10 @@ const profileDocumentSchema = z
  * is deliberately narrow so a profile name can never become a path traversal.
  */
 export function normalizeSkillProfileName(value) {
-    const normalized = value.trim().toLowerCase().replace(/[\s_]+/g, '-');
+    const normalized = value
+        .trim()
+        .toLowerCase()
+        .replace(/[\s_]+/g, '-');
     if (!profileNamePattern.test(normalized)) {
         throw new SkillProfileError('INVALID_SKILL_PROFILE', 'Invalid skill profile name.');
     }
@@ -136,7 +152,11 @@ export function compileSkillOverride(input) {
 }
 /** Construct the single profile contract shared by global and project YAML files. */
 export function createSkillProfile(input) {
-    return { version: 1, name: normalizeSkillProfileName(input.name), skills: createSkillSelection(input.skills) };
+    return {
+        version: 1,
+        name: normalizeSkillProfileName(input.name),
+        skills: createSkillSelection(input.skills),
+    };
 }
 /** Parse the version-1 YAML document without performing filesystem access. */
 export function parseSkillProfileYaml(source) {

package/dist/server/server/platform/auth/simple-webauthn-adapter.js

@@ -7,6 +7,32 @@ import { generateAuthenticationOptions, generateRegistrationOptions, verifyAuthe
 import { PasskeyVerificationError } from '../../features/auth/application/ports.js';
 import { webAuthnCredentialId } from '../../features/auth/domain/identifiers.js';
 const transports = new Set(['ble', 'hybrid', 'internal', 'nfc', 'usb']);
+function verificationFailure(error) {
+    const message = error instanceof Error ? error.message.toLowerCase() : '';
+    if (message.includes('challenge'))
+        return 'CHALLENGE_MISMATCH';
+    if (message.includes('origin'))
+        return 'ORIGIN_MISMATCH';
+    if (message.includes('rp id') || message.includes('rpid'))
+        return 'RP_ID_MISMATCH';
+    if (message.includes('user presence'))
+        return 'USER_PRESENCE_REQUIRED';
+    if (message.includes('user verification'))
+        return 'USER_VERIFICATION_REQUIRED';
+    if (message.includes('credential id') || message.includes('base64'))
+        return 'CREDENTIAL_ENCODING_INVALID';
+    if (message.includes('alg') || message.includes('cose'))
+        return 'ALGORITHM_UNSUPPORTED';
+    if (message.includes('public key') ||
+        message.includes('aaguid') ||
+        message.includes('authenticator data'))
+        return 'CREDENTIAL_MATERIAL_MISSING';
+    if (message.includes('attestation'))
+        return 'ATTESTATION_UNSUPPORTED';
+    if (message.includes('signature'))
+        return 'SIGNATURE_INVALID';
+    return 'VERIFIER_REJECTED';
+}
 /** Translates SimpleWebAuthn DTOs at the platform boundary. */
 export class SimpleWebAuthnAdapter {
     async registrationOptions(input) {
@@ -19,7 +45,11 @@ export class SimpleWebAuthnAdapter {
             challenge: new Uint8Array(input.challenge),
             attestationType: 'none',
             excludeCredentials: input.excludeCredentialIds.map((id) => ({ id })),
-            authenticatorSelection: { residentKey: 'required', requireResidentKey: true, userVerification: 'required' },
+            authenticatorSelection: {
+                residentKey: 'required',
+                requireResidentKey: true,
+                userVerification: 'required',
+            },
             supportedAlgorithmIDs: [-7, -257],
         });
     }
@@ -43,11 +73,11 @@ export class SimpleWebAuthnAdapter {
                 supportedAlgorithmIDs: [-7, -257],
             });
         }
-        catch {
-            throw new PasskeyVerificationError('PASSKEY_VERIFICATION_FAILED');
+        catch (error) {
+            throw new PasskeyVerificationError(verificationFailure(error));
         }
         if (!result.verified || !result.registrationInfo?.userVerified)
-            throw new PasskeyVerificationError('PASSKEY_VERIFICATION_FAILED');
+            throw new PasskeyVerificationError('VERIFIER_REJECTED');
         const credential = result.registrationInfo.credential;
         return {
             credentialId: webAuthnCredentialId(credential.id),
@@ -63,13 +93,29 @@ export class SimpleWebAuthnAdapter {
         const value = input;
         let result;
         try {
-            result = await verifyAuthenticationResponse({ response: value.response, expectedChallenge: Buffer.from(value.challenge).toString('base64url'), expectedOrigin: value.expectedOrigin, expectedRPID: value.rpId, requireUserVerification: true, credential: { id: value.credential.id, publicKey: new Uint8Array(value.credential.publicKey), counter: value.credential.counter, transports: [...value.credential.transports] } });
+            result = await verifyAuthenticationResponse({
+                response: value.response,
+                expectedChallenge: Buffer.from(value.challenge).toString('base64url'),
+                expectedOrigin: value.expectedOrigin,
+                expectedRPID: value.rpId,
+                requireUserVerification: true,
+                credential: {
+                    id: value.credential.id,
+                    publicKey: new Uint8Array(value.credential.publicKey),
+                    counter: value.credential.counter,
+                    transports: [...value.credential.transports],
+                },
+            });
         }
-        catch {
-            throw new PasskeyVerificationError('PASSKEY_VERIFICATION_FAILED');
+        catch (error) {
+            throw new PasskeyVerificationError(verificationFailure(error));
         }
         if (!result.verified || !result.authenticationInfo?.userVerified)
-            throw new PasskeyVerificationError('PASSKEY_VERIFICATION_FAILED');
-        return { credentialId: webAuthnCredentialId(value.response.id), counter: result.authenticationInfo.newCounter, userVerified: result.authenticationInfo.userVerified };
+            throw new PasskeyVerificationError('VERIFIER_REJECTED');
+        return {
+            credentialId: webAuthnCredentialId(value.response.id),
+            counter: result.authenticationInfo.newCounter,
+            userVerified: result.authenticationInfo.userVerified,
+        };
     }
 }

package/dist/server/server/platform/catalog/profile-command.js

@@ -18,5 +18,12 @@ export function profileAppServerCommand(_profile, availability = localAvailabili
         : { command: 'codex', args: ['app-server', '--stdio'] };
     return skillsConfig === undefined
         ? base
-        : { ...base, args: [...base.args, '--config', `skills.config = [${skillsConfig.map((entry) => `{ path = ${JSON.stringify(entry.path)}, enabled = ${entry.enabled} }`).join(', ')}]`] };
+        : {
+            ...base,
+            args: [
+                ...base.args,
+                '--config',
+                `skills.config = [${skillsConfig.map((entry) => `{ path = ${JSON.stringify(entry.path)}, enabled = ${entry.enabled} }`).join(', ')}]`,
+            ],
+        };
 }

package/dist/server/server/platform/codex/normalizer.js

@@ -36,18 +36,34 @@ export function decodeNotification(input) {
     if (input.method === 'item/agentMessage/delta') {
         const params = record(input.params);
         return typeof params?.delta === 'string' && params.delta.length <= 64_000
-            ? { method: input.method, params: { delta: params.delta } } : null;
+            ? { method: input.method, params: { delta: params.delta } }
+            : null;
     }
     if (input.method === 'turn/completed') {
         const params = record(input.params);
         const turn = record(params?.turn);
         if (!turn || typeof turn.id !== 'string' || turn.id.length > 256)
             return null;
-        return { method: input.method, params: { ...(typeof params?.threadId === 'string' && params.threadId.length <= 256 ? { threadId: params.threadId } : {}), turn: { id: turn.id, ...(typeof turn.status === 'string' && turn.status.length <= 64 ? { status: turn.status } : {}) } } };
+        return {
+            method: input.method,
+            params: {
+                ...(typeof params?.threadId === 'string' && params.threadId.length <= 256
+                    ? { threadId: params.threadId }
+                    : {}),
+                turn: {
+                    id: turn.id,
+                    ...(typeof turn.status === 'string' && turn.status.length <= 64
+                        ? { status: turn.status }
+                        : {}),
+                },
+            },
+        };
     }
     if (input.method === 'item/started' || input.method === 'item/completed') {
         const params = record(input.params);
-        return params && 'item' in params ? { method: input.method, params: { item: params.item } } : null;
+        return params && 'item' in params
+            ? { method: input.method, params: { item: params.item } }
+            : null;
     }
     return null;
 }
@@ -103,5 +119,7 @@ function reasoningSummary(parts) {
     });
 }
 function record(value) {
-    return value && typeof value === 'object' && !Array.isArray(value) ? value : null;
+    return value && typeof value === 'object' && !Array.isArray(value)
+        ? value
+        : null;
 }

package/dist/server/server/platform/codex/session-runtime.js

@@ -47,8 +47,12 @@ class SessionResource {
         this.onDisposed();
         return true;
     }
-    get active() { return !this.disposed; }
-    attach(unregister) { this.unregister = unregister; }
+    get active() {
+        return !this.disposed;
+    }
+    attach(unregister) {
+        this.unregister = unregister;
+    }
 }
 export class CodexSessionRuntime {
     launch;
@@ -149,7 +153,10 @@ export class CodexSessionRuntime {
             throw new Error('CODEX_SESSION_NOT_RUNNING');
         const [rateLimits, thread] = await Promise.all([
             resource.process.rpc.request('account/rateLimits/read', {}),
-            resource.process.rpc.request('thread/read', { threadId: session.threadId, includeTurns: true }),
+            resource.process.rpc.request('thread/read', {
+                threadId: session.threadId,
+                includeTurns: true,
+            }),
         ]);
         return createPlanMeasurementSnapshot({
             capturedAt: new Date().toISOString(),
@@ -208,7 +215,9 @@ export class CodexSessionRuntime {
             catch (error) {
                 if (!canRebindMissingRollout(session, error))
                     throw error;
-                const replacementThreadId = await this.startThread(resource.process, session, { model: session.model });
+                const replacementThreadId = await this.startThread(resource.process, session, {
+                    model: session.model,
+                });
                 result = rebindMissingRollout(session, error, replacementThreadId, now);
             }
             resource.threadId = result.session.threadId;
@@ -234,7 +243,11 @@ export class CodexSessionRuntime {
         const resource = this.sessions.get(sessionId);
         const threadId = resource?.threadId;
         const name = resource?.pendingThreadName;
-        if (!resource || !threadId || !name || resource.writtenThreadName === name || resource.capabilities.get('thread/name/set') === false)
+        if (!resource ||
+            !threadId ||
+            !name ||
+            resource.writtenThreadName === name ||
+            resource.capabilities.get('thread/name/set') === false)
             return;
         try {
             await resource.process.rpc.request('thread/name/set', { threadId, name });
@@ -286,7 +299,7 @@ export class CodexSessionRuntime {
                 profile: session.profile,
                 cwd: session.workspacePath,
                 skillsConfig: await this.resolveSkills?.(session),
-                ...((lease || this.planMeasurementBaseUrl)
+                ...(lease || this.planMeasurementBaseUrl
                     ? {
                         environment: {
                             ...(lease
@@ -347,7 +360,12 @@ function decodeRateLimits(value) {
         return undefined;
     const decoded = limits.flatMap((limit) => {
         const record = asRecord(limit);
-        return typeof record?.windowDurationMins === 'number' && Number.isFinite(record.windowDurationMins) && typeof record.usedPercent === 'number' && Number.isFinite(record.usedPercent) ? [{ windowDurationMins: record.windowDurationMins, usedPercent: record.usedPercent }] : [];
+        return typeof record?.windowDurationMins === 'number' &&
+            Number.isFinite(record.windowDurationMins) &&
+            typeof record.usedPercent === 'number' &&
+            Number.isFinite(record.usedPercent)
+            ? [{ windowDurationMins: record.windowDurationMins, usedPercent: record.usedPercent }]
+            : [];
     });
     return decoded.length === limits.length ? { rateLimits: decoded } : undefined;
 }
@@ -396,10 +414,18 @@ function decodeThreadRead(value) {
         const record = asRecord(turn);
         if (!record)
             throw new Error('CODEX_THREAD_READ_MALFORMED');
-        return { id: boundedString(record.id), status: boundedString(record.status), startedAt: typeof record.startedAt === 'number' ? record.startedAt : undefined, completedAt: typeof record.completedAt === 'number' ? record.completedAt : undefined, items: Array.isArray(record.items) ? record.items.flatMap(decodeHistoryItem) : undefined };
+        return {
+            id: boundedString(record.id),
+            status: boundedString(record.status),
+            startedAt: typeof record.startedAt === 'number' ? record.startedAt : undefined,
+            completedAt: typeof record.completedAt === 'number' ? record.completedAt : undefined,
+            items: Array.isArray(record.items) ? record.items.flatMap(decodeHistoryItem) : undefined,
+        };
     });
 }
-function boundedString(value, max = 64_000) { return typeof value === 'string' && value.length <= max ? value : undefined; }
+function boundedString(value, max = 64_000) {
+    return typeof value === 'string' && value.length <= max ? value : undefined;
+}
 function decodeHistoryItem(value) {
     const item = asRecord(value);
     const id = boundedString(item?.id, 256);
@@ -407,10 +433,25 @@ function decodeHistoryItem(value) {
     if (!item || !id || !type)
         return [];
     if (type === 'agentMessage')
-        return [{ id, type, ...(boundedString(item.text) ? { text: boundedString(item.text) } : {}), ...(boundedString(item.phase, 64) ? { phase: boundedString(item.phase, 64) } : {}) }];
+        return [
+            {
+                id,
+                type,
+                ...(boundedString(item.text) ? { text: boundedString(item.text) } : {}),
+                ...(boundedString(item.phase, 64) ? { phase: boundedString(item.phase, 64) } : {}),
+            },
+        ];
     if (type === 'plan' && boundedString(item.text))
         return [{ id, type, text: boundedString(item.text) }];
     if (type === 'commandExecution' && boundedString(item.command) && boundedString(item.status, 64))
-        return [{ id, type, command: boundedString(item.command), status: boundedString(item.status, 64), ...(typeof item.exitCode === 'number' ? { exitCode: item.exitCode } : {}) }];
+        return [
+            {
+                id,
+                type,
+                command: boundedString(item.command),
+                status: boundedString(item.status, 64),
+                ...(typeof item.exitCode === 'number' ? { exitCode: item.exitCode } : {}),
+            },
+        ];
     return [];
 }

package/dist/server/server/platform/codex/thread-plan-name.js

@@ -12,12 +12,15 @@ export function threadPlanName(plan, limit = 120) {
         ? `L1 ${l1.indexOf(active) + 1}/${l1.length}`
         : awaiting
             ? `Review ${l1.indexOf(awaiting) + 1}/${l1.length}`
-            : l1.length > 0 && l1.every((step) => step.state === 'DONE' && step.reviewStatus === 'REVIEWED')
+            : l1.length > 0 &&
+                l1.every((step) => step.state === 'DONE' && step.reviewStatus === 'REVIEWED')
                 ? 'Complete'
                 : 'Authoring';
     return `${truncateTitle(plan.title, Math.max(1, limit - suffix.length - 3))} — ${suffix}`;
 }
 function truncateTitle(value, limit) {
     const characters = Array.from(value);
-    return characters.length <= limit ? value : `${characters.slice(0, Math.max(0, limit - 1)).join('')}…`;
+    return characters.length <= limit
+        ? value
+        : `${characters.slice(0, Math.max(0, limit - 1)).join('')}…`;
 }

package/dist/server/server/platform/http/problem-reply.js

@@ -6,5 +6,8 @@
 import { problem } from './problem.js';
 /** Send the established RFC 7807-compatible response without deciding its semantics. */
 export function sendProblem(reply, code, status, detail) {
-    return reply.code(status).type('application/problem+json').send(problem(code, status, detail));
+    return reply
+        .code(status)
+        .type('application/problem+json')
+        .send(problem(code, status, detail));
 }

package/dist/server/server/platform/plans/filesystem-plan-status-source.js

@@ -29,10 +29,7 @@ export class FilesystemPlanStatusSource {
         await mkdir(this.dismissalDirectory, { recursive: true, mode: 0o700 });
         await mkdir(statusDirectory, { recursive: true, mode: 0o700 });
         if (process.platform !== 'win32') {
-            await Promise.all([
-                chmod(this.dismissalDirectory, 0o700),
-                chmod(statusDirectory, 0o700),
-            ]);
+            await Promise.all([chmod(this.dismissalDirectory, 0o700), chmod(statusDirectory, 0o700)]);
         }
         const lease = new ActiveLease(statusDirectory, session.id, session.workspacePath, listener, this.planReadFilesystem, (identity) => this.isDismissed(session.id, identity), (statusPath) => this.activeStatusPaths.set(session.id, statusPath), () => {
             this.leases.delete(session.id);
@@ -97,7 +94,9 @@ export class FilesystemPlanStatusSource {
         const next = new Set(dismissed).add(identity);
         const candidate = join(this.dismissalDirectory, `.${randomUUID()}.dismissals.tmp`);
         try {
-            await this.dismissalFilesystem.writeFile(candidate, JSON.stringify([...next]), { mode: 0o600 });
+            await this.dismissalFilesystem.writeFile(candidate, JSON.stringify([...next]), {
+                mode: 0o600,
+            });
             await this.dismissalFilesystem.rename(candidate, path);
         }
         catch (error) {
@@ -272,7 +271,13 @@ class ActiveLease {
                     const previousStatusPath = this.activeStatusPath;
                     this.activeStatusPath = statusPath;
                     this.onActiveStatusPath(statusPath);
-                    const update = { kind: 'updated', plan: result.plan, identity, planPath, reason: signal.reason };
+                    const update = {
+                        kind: 'updated',
+                        plan: result.plan,
+                        identity,
+                        planPath,
+                        reason: signal.reason,
+                    };
                     const serializedUpdate = JSON.stringify(update);
                     if (serializedUpdate !== this.lastEmittedUpdate) {
                         this.lastEmittedUpdate = serializedUpdate;

package/dist/server/server/platform/plans/filesystem-workspace-plan-catalog.js

@@ -78,7 +78,10 @@ export class FilesystemWorkspacePlanCatalog {
                 return { kind: 'unavailable' };
             const source = await this.filesystem.readFile(canonical, 'utf8');
             const after = await this.filesystem.stat(canonical);
-            if (!after.isFile() || after.size !== before.size || after.ino !== before.ino || after.dev !== before.dev)
+            if (!after.isFile() ||
+                after.size !== before.size ||
+                after.ino !== before.ino ||
+                after.dev !== before.dev)
                 return { kind: 'unavailable' };
             const parsed = parseSupervisedPlan({ source, planPath: canonical, workspacePath });
             return parsed.kind === 'available' ? parsed : { kind: 'unavailable' };

package/dist/server/server/platform/plans/plan-measurement-command.js

@@ -9,5 +9,8 @@ const execute = promisify(execFile);
 export const PLAN_MEASUREMENT_COMMAND_TIMEOUT_MS = 15_000;
 /** Invokes the explicitly configured Org Plan helper without a shell. */
 export async function checkpointPlanMeasurement(helperPath, planPath, stepId, snapshot) {
-    await execute(helperPath, ['measure', 'checkpoint', planPath, stepId, JSON.stringify(snapshot)], { shell: false, timeout: PLAN_MEASUREMENT_COMMAND_TIMEOUT_MS });
+    await execute(helperPath, ['measure', 'checkpoint', planPath, stepId, JSON.stringify(snapshot)], {
+        shell: false,
+        timeout: PLAN_MEASUREMENT_COMMAND_TIMEOUT_MS,
+    });
 }

package/dist/server/server/platform/skills/codex-skill-catalog.js

@@ -5,7 +5,7 @@
  */
 import { z } from 'zod';
 import { resolve } from 'node:path';
-import { availableSkillSchema } from '../../features/skills/model/skill-profile.js';
+import { availableSkillSchema, } from '../../features/skills/model/skill-profile.js';
 import { SkillProfileError } from '../../features/skills/model/errors.js';
 import { launchCodexAppServer } from '../codex/codex-process-launcher.js';
 const optionalString = z.preprocess((value) => (value === null ? undefined : value), z.string().optional());
@@ -19,12 +19,25 @@ const toolSchema = z.object({
     url: optionalString,
 });
 const wireSkillSchema = z.object({
-    name: z.string(), description: z.string(), shortDescription: optionalString,
-    interface: optionalObject(z.object({ displayName: optionalString, shortDescription: optionalString, iconSmall: optionalString, iconLarge: optionalString, brandColor: optionalString, defaultPrompt: optionalString })),
+    name: z.string(),
+    description: z.string(),
+    shortDescription: optionalString,
+    interface: optionalObject(z.object({
+        displayName: optionalString,
+        shortDescription: optionalString,
+        iconSmall: optionalString,
+        iconLarge: optionalString,
+        brandColor: optionalString,
+        defaultPrompt: optionalString,
+    })),
     dependencies: optionalObject(z.object({ tools: optionalObject(z.array(toolSchema)) })),
-    path: z.string(), scope: optionalString, enabled: z.boolean(),
+    path: z.string(),
+    scope: optionalString,
+    enabled: z.boolean(),
+});
+const resultSchema = z.object({
+    data: z.array(z.object({ cwd: z.string(), skills: z.array(wireSkillSchema), errors: z.array(z.unknown()) })),
 });
-const resultSchema = z.object({ data: z.array(z.object({ cwd: z.string(), skills: z.array(wireSkillSchema), errors: z.array(z.unknown()) })) });
 /** Short-lived Codex app-server adapter: initialize, discover, and always terminate. */
 export class CodexSkillCatalog {
     profile;
@@ -58,7 +71,14 @@ export class CodexSkillCatalog {
             });
             return {
                 skills,
-                errors: entry.errors.map((error) => ({ message: typeof error === 'object' && error !== null && 'message' in error && typeof error.message === 'string' ? error.message : 'Codex skill discovery error.' })),
+                errors: entry.errors.map((error) => ({
+                    message: typeof error === 'object' &&
+                        error !== null &&
+                        'message' in error &&
+                        typeof error.message === 'string'
+                        ? error.message
+                        : 'Codex skill discovery error.',
+                })),
             };
         }
         catch (error) {
@@ -75,7 +95,9 @@ export class CodexSkillCatalog {
         try {
             return await Promise.race([
                 promise,
-                new Promise((_, reject) => { timer = setTimeout(() => reject(new Error('timeout')), this.timeoutMs); }),
+                new Promise((_, reject) => {
+                    timer = setTimeout(() => reject(new Error('timeout')), this.timeoutMs);
+                }),
             ]);
         }
         finally {

package/dist/server/server/platform/skills/filesystem-skill-profile-store.js

@@ -55,7 +55,11 @@ export class FilesystemSkillProfileStore {
         const destination = join(root, `${name}.yml`);
         const temporary = join(root, `.${name}.${randomUUID()}.tmp`);
         try {
-            await writeFile(temporary, serializeSkillProfileYaml(profile), { encoding: 'utf8', mode: 0o600, flag: 'wx' });
+            await writeFile(temporary, serializeSkillProfileYaml(profile), {
+                encoding: 'utf8',
+                mode: 0o600,
+                flag: 'wx',
+            });
             await rename(temporary, destination);
         }
         finally {

package/dist/server/shared/contracts/quiz.js

@@ -26,7 +26,12 @@ export const gestaltQuizDynamicTool = {
                     additionalProperties: false,
                     required: ['id', 'header', 'question', 'choices', 'allowCustom'],
                     properties: {
-                        id: { type: 'string', minLength: 1, maxLength: 64, pattern: '^[A-Za-z][A-Za-z0-9_-]*$' },
+                        id: {
+                            type: 'string',
+                            minLength: 1,
+                            maxLength: 64,
+                            pattern: '^[A-Za-z][A-Za-z0-9_-]*$',
+                        },
                         header: { type: 'string', minLength: 1, maxLength: 120 },
                         question: { type: 'string', minLength: 1, maxLength: 600 },
                         choices: {
@@ -61,7 +66,9 @@ export function parseQuiz(value, minimumChoices = 2) {
     if (questions.some((question) => question === null))
         return null;
     const parsed = questions;
-    return new Set(parsed.map((question) => question.id)).size === parsed.length ? { questions: parsed } : null;
+    return new Set(parsed.map((question) => question.id)).size === parsed.length
+        ? { questions: parsed }
+        : null;
 }
 /** Maps Codex's experimental native request shape into the common quiz value. */
 export function mapNativeUserInputToQuiz(value) {
@@ -87,7 +94,9 @@ export function toQuizToolResponse(answers) {
             {
                 type: 'input_text',
                 text: JSON.stringify({
-                    answers: Object.fromEntries(answers.filter((answer) => answer.answer.trim()).map((answer) => [answer.id, answer.answer])),
+                    answers: Object.fromEntries(answers
+                        .filter((answer) => answer.answer.trim())
+                        .map((answer) => [answer.id, answer.answer])),
                 }),
             },
         ],
@@ -98,7 +107,10 @@ export function isQuizToolResponseForQuiz(quiz, value) {
     if (!isRecord(value) || value.success !== true || !Array.isArray(value.contentItems))
         return false;
     const item = value.contentItems[0];
-    if (value.contentItems.length !== 1 || !isRecord(item) || item.type !== 'input_text' || typeof item.text !== 'string')
+    if (value.contentItems.length !== 1 ||
+        !isRecord(item) ||
+        item.type !== 'input_text' ||
+        typeof item.text !== 'string')
         return false;
     try {
         const response = parseQuizResponse(JSON.parse(item.text));
@@ -109,9 +121,14 @@ export function isQuizToolResponseForQuiz(quiz, value) {
     }
 }
 function parseQuestion(value, minimumChoices) {
-    if (!isRecord(value) || !Array.isArray(value.choices) || value.choices.length < minimumChoices || value.choices.length > 5)
+    if (!isRecord(value) ||
+        !Array.isArray(value.choices) ||
+        value.choices.length < minimumChoices ||
+        value.choices.length > 5)
         return null;
-    if (!isQuestionId(value.id) || !isBoundedText(value.header, 120) || !isBoundedText(value.question, 600))
+    if (!isQuestionId(value.id) ||
+        !isBoundedText(value.header, 120) ||
+        !isBoundedText(value.question, 600))
         return null;
     if (typeof value.allowCustom !== 'boolean')
         return null;
@@ -128,7 +145,9 @@ function parseQuestion(value, minimumChoices) {
     };
 }
 function parseChoice(value) {
-    if (!isRecord(value) || !isBoundedText(value.label, 160) || !isBoundedText(value.description, 600))
+    if (!isRecord(value) ||
+        !isBoundedText(value.label, 160) ||
+        !isBoundedText(value.description, 600))
         return null;
     return { label: value.label, description: value.description };
 }
@@ -136,13 +155,15 @@ function parseQuizResponse(value) {
     if (!isRecord(value) || !isRecord(value.answers))
         return null;
     const entries = Object.entries(value.answers);
-    if (entries.length === 0 || entries.some(([id, answer]) => !isQuestionId(id) || !isBoundedText(answer, 2_000)))
+    if (entries.length === 0 ||
+        entries.some(([id, answer]) => !isQuestionId(id) || !isBoundedText(answer, 2_000)))
         return null;
     return { answers: Object.fromEntries(entries) };
 }
 function isCompleteQuizResponse(quiz, response) {
     const ids = Object.keys(response.answers);
-    if (ids.length !== quiz.questions.length || ids.some((id) => !quiz.questions.some((question) => question.id === id)))
+    if (ids.length !== quiz.questions.length ||
+        ids.some((id) => !quiz.questions.some((question) => question.id === id)))
         return false;
     return quiz.questions.every((question) => {
         const answer = response.answers[question.id];