playbooks 0.1.15 → 0.1.17

package/dist/index.js

@@ -8,7 +8,7 @@ import { program } from "commander";
 // package.json
 var package_default = {
   name: "playbooks",
-  version: "0.1.15",
+  version: "0.1.17",
   description: "Install agent skills, MCPs and docs into your coding agents from any git repository.",
   type: "module",
   bin: {
@@ -1694,7 +1694,7 @@ import { readFile as readFile2, readdir as readdir3, realpath, stat as stat2 } f
 import { join as join8, relative as relative3, sep as sep3 } from "path";
 
 // src/scanner/static-scan/shared.ts
-var SKILL_STATIC_SCAN_RULESET_VERSION = "static-scan@2026-02-07.3";
+var SKILL_STATIC_SCAN_RULESET_VERSION = "static-scan@2026-02-07.5";
 var clamp = (n, min, max) => Math.min(Math.max(n, min), max);
 var levelFromScore = (score) => {
   if (score >= 85) return "critical";
@@ -1719,7 +1719,7 @@ var isProbablyTextPath = (path) => {
   if (base === "makefile" || base === "dockerfile" || base === "license" || base === "readme" || base === "readme.md") {
     return true;
   }
-  return lower.endsWith(".md") || lower.endsWith(".txt") || lower.endsWith(".json") || lower.endsWith(".yaml") || lower.endsWith(".yml") || lower.endsWith(".toml") || lower.endsWith(".ini") || lower.endsWith(".env") || lower.endsWith(".sh") || lower.endsWith(".bash") || lower.endsWith(".zsh") || lower.endsWith(".ps1") || lower.endsWith(".py") || lower.endsWith(".rb") || lower.endsWith(".php") || lower.endsWith(".go") || lower.endsWith(".rs") || lower.endsWith(".java") || lower.endsWith(".ts") || lower.endsWith(".tsx") || lower.endsWith(".js") || lower.endsWith(".mjs") || lower.endsWith(".cjs");
+  return lower.endsWith(".md") || lower.endsWith(".txt") || lower.endsWith(".json") || lower.endsWith(".yaml") || lower.endsWith(".yml") || lower.endsWith(".toml") || lower.endsWith(".ini") || lower.endsWith(".env") || lower.endsWith(".sh") || lower.endsWith(".bash") || lower.endsWith(".zsh") || lower.endsWith(".ps1") || lower.endsWith(".py") || lower.endsWith(".rb") || lower.endsWith(".php") || lower.endsWith(".go") || lower.endsWith(".rs") || lower.endsWith(".java") || lower.endsWith(".ts") || lower.endsWith(".mts") || lower.endsWith(".cts") || lower.endsWith(".tsx") || lower.endsWith(".js") || lower.endsWith(".jsx") || lower.endsWith(".mjs") || lower.endsWith(".cjs");
 };
 var snippetFromIndex = (content, index, maxLen = 180) => {
   const start = Math.max(0, index - 60);
@@ -1803,9 +1803,28 @@ async function collectSkillScanFiles(skillDir, options = {}) {
   const baseRealWithSep = baseReal.endsWith(sep3) ? baseReal : `${baseReal}${sep3}`;
   const files = [];
   const visitedDirs = /* @__PURE__ */ new Set([baseReal]);
+  const seen = /* @__PURE__ */ new Set();
   let truncated = false;
   let bytes = 0;
   let skipped = 0;
+  const skillMdFull = join8(skillDir, "SKILL.md");
+  const skillMdRel = "SKILL.md";
+  try {
+    if (files.length < maxFiles && isPathSafe(skillDir, skillMdFull) && isProbablyTextPath(skillMdRel)) {
+      const s = await stat2(skillMdFull);
+      const size = typeof s.size === "number" ? s.size : 0;
+      if (size > 0 && size <= maxFileBytes && bytes + size <= maxTotalBytes) {
+        const content = await readFile2(skillMdFull, "utf-8");
+        const usedSize = size > 0 ? size : content.length;
+        if (usedSize > 0 && usedSize <= maxFileBytes && bytes + usedSize <= maxTotalBytes) {
+          bytes += usedSize;
+          files.push({ path: skillMdRel, content, size: usedSize });
+          seen.add(skillMdRel.toLowerCase());
+        }
+      }
+    }
+  } catch {
+  }
   const queue = [skillDir];
   while (queue.length > 0) {
     const current = queue.shift();
@@ -1813,6 +1832,7 @@ async function collectSkillScanFiles(skillDir, options = {}) {
     let entries;
     try {
       entries = await readdir3(current, { withFileTypes: true });
+      entries.sort((a, b) => a.name.localeCompare(b.name));
     } catch {
       continue;
     }
@@ -1875,6 +1895,10 @@ async function collectSkillScanFiles(skillDir, options = {}) {
         skipped += 1;
         continue;
       }
+      if (seen.has(relPath.toLowerCase())) {
+        skipped += 1;
+        continue;
+      }
       if (!isProbablyTextPath(relPath)) {
         skipped += 1;
         continue;
@@ -1909,6 +1933,7 @@ async function collectSkillScanFiles(skillDir, options = {}) {
         }
         bytes += usedSize;
         files.push({ path: relPath, content, size: usedSize });
+        seen.add(relPath.toLowerCase());
       } catch {
         skipped += 1;
       }
@@ -1918,6 +1943,329 @@ async function collectSkillScanFiles(skillDir, options = {}) {
   return { files, truncated, skipped };
 }
 
+// src/scanner/code-safety-scan.ts
+var isJsTsPath = (path) => {
+  const lower = path.toLowerCase();
+  return lower.endsWith(".js") || lower.endsWith(".ts") || lower.endsWith(".mjs") || lower.endsWith(".cjs") || lower.endsWith(".jsx") || lower.endsWith(".tsx") || lower.endsWith(".mts") || lower.endsWith(".cts");
+};
+var isTestLikePath = (path) => {
+  const p = path.replace(/\\/g, "/").toLowerCase();
+  if (p.includes("/__tests__/")) return true;
+  if (p.includes("/tests/")) return true;
+  if (p.includes("/test/")) return true;
+  if (/\.(test|spec)\.[mc]?[jt]sx?$/.test(p)) return true;
+  return false;
+};
+var NETWORK_RE = /\bfetch\s*\(|\baxios\b|\bgot\b|\bnode-fetch\b|\bhttp\.\s*request\b|\bhttps\.\s*request\b|\bXMLHttpRequest\b/i;
+var CHILD_PROCESS_RE = /\bchild_process\b|from\s+['"]node:child_process['"]|require\s*\(\s*['"]child_process['"]\s*\)/i;
+var EXEC_CALL_RE = /\b(exec|spawn|execFile|spawnSync|execSync|execFileSync)\s*\(/g;
+var EVAL_RE = /\beval\s*\(/g;
+var NEW_FUNCTION_RE = /\bnew\s+Function\s*\(/g;
+var PROCESS_ENV_RE = /\bprocess\.env\b/g;
+var READFILE_RE = /\breadFileSync\s*\(|\breadFile\s*\(/g;
+var BASE64_LITERAL_RE = /['"`]([A-Za-z0-9+/]{200,}={0,2})['"`]/g;
+var CRYPTO_MINING_RE = /\b(stratum\+tcp|stratum\+ssl|xmrig|cryptonight|coinhive)\b/i;
+var WS_PORT_RE = /new\s+WebSocket\s*\(\s*['"]ws:\/\/[^'"]+:(\d{2,5})[^'"]*['"]\s*\)/i;
+var WS_ALLOWED_PORTS = /* @__PURE__ */ new Set([80, 443, 3e3, 8080, 8443]);
+var mk = (file, content, id, opts, scoreKey) => {
+  const line = Number.isFinite(opts.index) ? lineFromIndex(content, opts.index) : null;
+  const snippet = snippetFromIndex(content, opts.index);
+  return {
+    scoreKey,
+    signal: {
+      id,
+      file,
+      dimension: opts.dimension,
+      type: opts.type,
+      severity: opts.severity,
+      points: opts.points,
+      line: line ?? null,
+      snippet,
+      reason: opts.reason
+    }
+  };
+};
+function scanCodeSafetyFile(file) {
+  if (!isJsTsPath(file.path)) return [];
+  const content = typeof file.content === "string" ? file.content : "";
+  if (!content) return [];
+  const out = [];
+  const testLike = isTestLikePath(file.path);
+  const urlLiterals = (() => {
+    const urls = [];
+    const re = /\b(?:https?:\/\/|wss?:\/\/|ws:\/\/)[^\s'"`)+]+/gi;
+    for (let m = re.exec(content); m; m = re.exec(content)) {
+      urls.push(m[0] ?? "");
+      if (urls.length >= 10) break;
+    }
+    return urls;
+  })();
+  const hasRemoteUrlLiteral = (() => {
+    for (const raw of urlLiterals) {
+      try {
+        const parsed = new URL(raw);
+        const host = (parsed.hostname || "").toLowerCase();
+        if (host === "localhost" || host === "0.0.0.0" || host === "::1" || host === "[::1]" || host === "127.0.0.1" || host.startsWith("127.")) {
+          continue;
+        }
+        return true;
+      } catch {
+      }
+    }
+    return false;
+  })();
+  const envKeys = (() => {
+    const keys = /* @__PURE__ */ new Set();
+    const dotRe = /\bprocess\.env\.([A-Za-z_][A-Za-z0-9_]*)\b/g;
+    const bracketRe = /\bprocess\.env\s*\[\s*['"]([^'"]+)['"]\s*\]/g;
+    const destructureRe = /\{([^}]+)\}\s*=\s*process\.env\b/g;
+    for (let m = dotRe.exec(content); m; m = dotRe.exec(content)) keys.add(m[1] ?? "");
+    for (let m = bracketRe.exec(content); m; m = bracketRe.exec(content)) keys.add(m[1] ?? "");
+    for (let m = destructureRe.exec(content); m; m = destructureRe.exec(content)) {
+      const inner = (m[1] ?? "").split(",").map((s) => s.trim()).filter(Boolean);
+      for (const part of inner) {
+        const k = part.split(":")[0]?.trim() ?? "";
+        if (k) keys.add(k);
+      }
+    }
+    return Array.from(keys);
+  })();
+  const hasAnyEnvAccess = /\bprocess\.env\b/.test(content);
+  const hasSensitiveEnvAccess = (() => {
+    if (!hasAnyEnvAccess) return false;
+    if (envKeys.length === 0) return true;
+    const safe = /* @__PURE__ */ new Set([
+      "HOME",
+      "USERPROFILE",
+      "PATH",
+      "PWD",
+      "SHELL",
+      "TERM",
+      "TMPDIR",
+      "TEMP",
+      "TMP",
+      "PORT",
+      "HOST",
+      "HOSTNAME",
+      "NODE_ENV",
+      "CI",
+      "HEADLESS",
+      "DEBUG"
+    ]);
+    const sensitiveRe = /(token|secret|api[_-]?key|password|passwd|auth|session|private|cookie|jwt|bearer|ssh|key)/i;
+    for (const raw of envKeys) {
+      const k = raw.trim();
+      if (!k) continue;
+      if (safe.has(k.toUpperCase())) continue;
+      if (sensitiveRe.test(k)) return true;
+    }
+    return false;
+  })();
+  if (CHILD_PROCESS_RE.test(content)) {
+    EXEC_CALL_RE.lastIndex = 0;
+    let m = EXEC_CALL_RE.exec(content);
+    while (m) {
+      const idx = m.index ?? 0;
+      const fn = (m[1] ?? "").toLowerCase();
+      if (fn === "exec" && prevNonWhitespaceChar(content, idx - 1) === ".") {
+        m = EXEC_CALL_RE.exec(content);
+        continue;
+      }
+      out.push(
+        mk(
+          file.path,
+          content,
+          "dangerous_exec_child_process",
+          {
+            index: idx,
+            dimension: "remote_exec",
+            type: "suspicious",
+            severity: "high",
+            points: 55,
+            reason: "Uses Node child_process execution APIs (exec/spawn), which can run arbitrary commands."
+          },
+          "codesafety|dim:remote_exec"
+        )
+      );
+      break;
+    }
+  }
+  EVAL_RE.lastIndex = 0;
+  const evalM = EVAL_RE.exec(content);
+  if (evalM) {
+    out.push(
+      mk(
+        file.path,
+        content,
+        "dynamic_code_execution_eval",
+        {
+          index: evalM.index ?? 0,
+          dimension: "remote_exec",
+          type: "suspicious",
+          severity: "high",
+          points: 45,
+          reason: "Uses eval(), which enables dynamic code execution and is high risk in skills."
+        },
+        "codesafety|dim:remote_exec"
+      )
+    );
+  }
+  NEW_FUNCTION_RE.lastIndex = 0;
+  const fnM = NEW_FUNCTION_RE.exec(content);
+  if (fnM) {
+    out.push(
+      mk(
+        file.path,
+        content,
+        "dynamic_code_execution_function",
+        {
+          index: fnM.index ?? 0,
+          dimension: "remote_exec",
+          type: "suspicious",
+          severity: "high",
+          points: 45,
+          reason: "Uses new Function(), which enables dynamic code execution and is high risk in skills."
+        },
+        "codesafety|dim:remote_exec"
+      )
+    );
+  }
+  if (NETWORK_RE.test(content) && hasRemoteUrlLiteral && hasSensitiveEnvAccess) {
+    PROCESS_ENV_RE.lastIndex = 0;
+    const envM = PROCESS_ENV_RE.exec(content);
+    if (envM) {
+      out.push(
+        mk(
+          file.path,
+          content,
+          "env_harvesting_and_network",
+          {
+            index: envM.index ?? 0,
+            dimension: "secret_access",
+            type: "secret-access",
+            severity: "critical",
+            points: 85,
+            reason: "Reads process.env and also performs network activity, which can indicate token harvesting/exfiltration."
+          },
+          "codesafety|dim:secret_access"
+        )
+      );
+    }
+  }
+  if (NETWORK_RE.test(content) && hasRemoteUrlLiteral) {
+    READFILE_RE.lastIndex = 0;
+    const rfM = READFILE_RE.exec(content);
+    if (rfM) {
+      out.push(
+        mk(
+          file.path,
+          content,
+          "file_read_and_network",
+          {
+            index: rfM.index ?? 0,
+            dimension: "exfiltration",
+            type: "exfiltration",
+            severity: "high",
+            points: 60,
+            reason: "Reads local files and also performs network activity, which can indicate data exfiltration."
+          },
+          "codesafety|dim:exfiltration"
+        )
+      );
+    }
+  }
+  const hexSeqRe = /(?:\\\\x[0-9a-fA-F]{2}){6,}/g;
+  hexSeqRe.lastIndex = 0;
+  const hexSeq = hexSeqRe.exec(content);
+  if (hexSeq) {
+    out.push(
+      mk(
+        file.path,
+        content,
+        "obfuscated_hex_escapes",
+        {
+          index: hexSeq.index ?? 0,
+          dimension: "obfuscation",
+          type: "obfuscation",
+          severity: "medium",
+          points: 25,
+          reason: "Contains repeated \\\\xNN escape sequences, which can be used for obfuscation."
+        },
+        "codesafety|dim:obfuscation"
+      )
+    );
+  }
+  const hasAtob = /\batob\s*\(/.test(content);
+  const hasBufferFromBase64 = /\bBuffer\s*\.\s*from\s*\(/.test(content) && /['"]base64['"]/.test(content);
+  if (hasAtob || hasBufferFromBase64) {
+    BASE64_LITERAL_RE.lastIndex = 0;
+    const b64m = BASE64_LITERAL_RE.exec(content);
+    if (b64m) {
+      out.push(
+        mk(
+          file.path,
+          content,
+          "obfuscated_large_base64_decode",
+          {
+            index: b64m.index ?? 0,
+            dimension: "obfuscation",
+            type: "obfuscation",
+            severity: "high",
+            points: 60,
+            reason: "Decodes a large base64 payload, which is a common obfuscation technique."
+          },
+          "codesafety|dim:obfuscation"
+        )
+      );
+    }
+  }
+  const cm = CRYPTO_MINING_RE.exec(content);
+  if (cm) {
+    out.push(
+      mk(
+        file.path,
+        content,
+        "crypto_mining_strings",
+        {
+          index: cm.index ?? 0,
+          dimension: "remote_exec",
+          type: "suspicious",
+          severity: "critical",
+          points: 90,
+          reason: "Contains crypto-mining related strings (e.g. stratum/xmrig)."
+        },
+        "codesafety|dim:remote_exec"
+      )
+    );
+  }
+  const ws = WS_PORT_RE.exec(content);
+  if (ws) {
+    const rawPort = Number(ws[1]);
+    if (Number.isFinite(rawPort) && rawPort > 0 && rawPort <= 65535 && !WS_ALLOWED_PORTS.has(rawPort)) {
+      out.push(
+        mk(
+          file.path,
+          content,
+          "suspicious_websocket_port",
+          {
+            index: ws.index ?? 0,
+            dimension: "exfiltration",
+            type: "suspicious",
+            severity: "medium",
+            points: 30,
+            reason: `Connects to a WebSocket on uncommon port ${rawPort}, which can indicate covert C2/exfiltration.`
+          },
+          "codesafety|dim:exfiltration"
+        )
+      );
+    }
+  }
+  if (testLike) {
+    return out.map((c) => ({ ...c, scoreKey: null }));
+  }
+  return out;
+}
+
 // src/scanner/static-scan/rules.ts
 var RULES = [
   {
@@ -2096,7 +2444,18 @@ var RULES = [
 ];
 
 // src/scanner/static-scan/scan.ts
-function scanSkillStatic(files, options = {}) {
+function isTestLikePath2(path) {
+  const p = path.replace(/\\/g, "/").toLowerCase();
+  if (p.includes("/__tests__/")) return true;
+  if (p.includes("/tests/")) return true;
+  if (p.includes("/test/")) return true;
+  if (/\.(test|spec)\.[mc]?[jt]sx?$/.test(p)) return true;
+  return false;
+}
+function scanSkillSafety(files, options = {}) {
+  return scanSkillInternal(files, options, { includeCodeSafety: true });
+}
+function scanSkillInternal(files, options, { includeCodeSafety }) {
   const maxFiles = options.maxFiles ?? 120;
   const maxTotalBytes = options.maxTotalBytes ?? 12e5;
   const maxFileBytes = options.maxFileBytes ?? 16e4;
@@ -2139,6 +2498,34 @@ function scanSkillStatic(files, options = {}) {
     }
     bytesScanned += size;
     filesScanned += 1;
+    const testLike = includeCodeSafety ? isTestLikePath2(file.path) : false;
+    let codeHasDynamicExec = false;
+    if (includeCodeSafety) {
+      const codeCandidates = scanCodeSafetyFile({ path: file.path, content, size });
+      codeCandidates.sort(
+        (a, b) => b.signal.points - a.signal.points || a.signal.id.localeCompare(b.signal.id)
+      );
+      codeHasDynamicExec = codeCandidates.some(
+        (c) => c.signal.id === "dynamic_code_execution_eval" || c.signal.id === "dynamic_code_execution_function"
+      );
+      for (const candidate of codeCandidates) {
+        if (signals.length >= maxSignals) {
+          truncated = true;
+          break;
+        }
+        signals.push(candidate.signal);
+        if (candidate.scoreKey && !scoreApplied.has(candidate.scoreKey)) {
+          if (!testLike) {
+            scoreApplied.add(candidate.scoreKey);
+            dimensionScores[candidate.signal.dimension] = clamp(
+              dimensionScores[candidate.signal.dimension] + candidate.signal.points,
+              0,
+              100
+            );
+          }
+        }
+      }
+    }
     for (const rule of RULES) {
       if (signals.length >= maxSignals) {
         truncated = true;
@@ -2219,7 +2606,8 @@ function scanSkillStatic(files, options = {}) {
         snippet,
         reason
       });
-      if (!scoreApplied.has(scoreKey)) {
+      const shouldScore = !(includeCodeSafety && (testLike || rule.id === "eval_exec" && codeHasDynamicExec));
+      if (shouldScore && !scoreApplied.has(scoreKey)) {
         scoreApplied.add(scoreKey);
         dimensionScores[rule.dimension] = clamp(dimensionScores[rule.dimension] + points, 0, 100);
       }
@@ -2259,7 +2647,7 @@ function scanSkillStatic(files, options = {}) {
 // src/scanner/scan-skill-dir.ts
 async function scanSkillDir(dir, options = {}) {
   const collected = await collectSkillScanFiles(dir, options);
-  const staticScan = scanSkillStatic(collected.files, options);
+  const staticScan = scanSkillSafety(collected.files, options);
   return {
     dir,
     staticScan,
@@ -4183,12 +4571,16 @@ async function recordParsedTracking(skills, results, installGlobally, parsed, te
         const hash = await fetchSkillFolderHash(normalizedSource, skillPathValue);
         if (hash) skillFolderHash = hash;
       }
+      if (parsed.type === "well-known" && parsed.contentHash) {
+        skillFolderHash = parsed.contentHash;
+      }
       await addSkillToLock(
         displayName,
         {
           source: normalizedSource ?? parsed.url,
           sourceType: parsed.type,
           sourceUrl: parsed.url,
+          ...parsed.type === "well-known" && parsed.licenseKey ? { licenseKey: parsed.licenseKey } : {},
           skillPath: skillPathValue,
           skillFolderHash,
           ref: parsed.ref
@@ -4258,7 +4650,10 @@ function formatResultSummary(results) {
     if (!firstResult) continue;
     if (firstResult.mode === "copy") {
       lines.push(`${chalk2.green("\u2713")} ${skillName} ${chalk2.dim("(copied)")}`);
+      const seenPaths = /* @__PURE__ */ new Set();
       for (const r of skillResults) {
+        if (seenPaths.has(r.path)) continue;
+        seenPaths.add(r.path);
         const shortPath = shortenPath(r.path, cwd);
         lines.push(`  ${chalk2.dim("\u2192")} ${shortPath}`);
       }
@@ -4366,15 +4761,51 @@ function AddInstallScreen() {
   ] });
 }
 
-// src/tui/screens/AddMode.tsx
-import { join as join12 } from "path";
-import { Box as Box14 } from "ink";
+// src/tui/screens/AddLicenseKey.tsx
+import { Box as Box14, Text as Text14 } from "ink";
+import TextInput2 from "ink-text-input";
 import React11 from "react";
 import { jsx as jsx16, jsxs as jsxs12 } from "react/jsx-runtime";
+function AddLicenseKeyScreen() {
+  const { invocation, addSkill, updateAddSkill, navigateTo, setFlash } = useNavigation();
+  const [value, setValue] = React11.useState(
+    addSkill.licenseKey ?? invocation.options.licenseKey ?? ""
+  );
+  const { wrapOnChange } = useTextInput({
+    onClear: () => {
+      setValue("");
+    }
+  });
+  const onSubmit = (input) => {
+    const trimmed = input.trim();
+    if (!trimmed) {
+      setFlash("Enter a license key.");
+      return;
+    }
+    updateAddSkill({ licenseKey: trimmed });
+    navigateTo("add-skill-select");
+  };
+  return /* @__PURE__ */ jsxs12(Box14, { flexDirection: "column", padding: 1, children: [
+    /* @__PURE__ */ jsx16(Header, { title: "License key" }),
+    /* @__PURE__ */ jsx16(Box14, { marginBottom: 1, children: /* @__PURE__ */ jsx16(Text14, { children: "Enter the license key for this paid/private skill." }) }),
+    /* @__PURE__ */ jsx16(Box14, { marginBottom: 1, children: /* @__PURE__ */ jsx16(Text14, { dimColor: true, children: "Tip: you can also pass it via --license-key." }) }),
+    /* @__PURE__ */ jsxs12(Box14, { children: [
+      /* @__PURE__ */ jsx16(Text14, { color: "green", children: "> " }),
+      /* @__PURE__ */ jsx16(TextInput2, { value, onChange: wrapOnChange(setValue), onSubmit })
+    ] }),
+    /* @__PURE__ */ jsx16(Box14, { marginTop: 1, children: /* @__PURE__ */ jsx16(Text14, { dimColor: true, children: TEXT_INPUT_HINT }) })
+  ] });
+}
+
+// src/tui/screens/AddMode.tsx
+import { join as join12 } from "path";
+import { Box as Box15 } from "ink";
+import React12 from "react";
+import { jsx as jsx17, jsxs as jsxs13 } from "react/jsx-runtime";
 function AddModeScreen() {
   const { invocation, addSkill, updateAddSkill, navigateTo, navAction } = useNavigation();
   const options = invocation.options;
-  React11.useEffect(() => {
+  React12.useEffect(() => {
     if (navAction === "pop") return;
     if (addSkill.installMode) {
       navigateTo("add-confirm");
@@ -4404,9 +4835,9 @@ function AddModeScreen() {
     { label: "Symlink (recommended)", value: "symlink", hint: symlinkHint },
     { label: "Copy to each agent", value: "copy", hint: copyHint }
   ];
-  return /* @__PURE__ */ jsxs12(Box14, { flexDirection: "column", padding: 1, children: [
-    /* @__PURE__ */ jsx16(AddFlowHeader, { title: "Install mode" }),
-    /* @__PURE__ */ jsx16(
+  return /* @__PURE__ */ jsxs13(Box15, { flexDirection: "column", padding: 1, children: [
+    /* @__PURE__ */ jsx17(AddFlowHeader, { title: "Install mode" }),
+    /* @__PURE__ */ jsx17(
       SingleSelect,
       {
         items,
@@ -4422,9 +4853,9 @@ function AddModeScreen() {
 
 // src/tui/screens/AddResult.tsx
 import chalk3 from "chalk";
-import { Box as Box15, Text as Text14 } from "ink";
-import React12 from "react";
-import { jsx as jsx17, jsxs as jsxs13 } from "react/jsx-runtime";
+import { Box as Box16, Text as Text15 } from "ink";
+import React13 from "react";
+import { jsx as jsx18, jsxs as jsxs14 } from "react/jsx-runtime";
 function AddResultScreen() {
   const { addSkill, resetAddSkill, navigateTo } = useNavigation();
   const results = addSkill.installResults ?? [];
@@ -4432,7 +4863,7 @@ function AddResultScreen() {
   const failed = results.filter((r) => !r.success);
   const symlinkFailures = successful.filter((r) => r.mode === "symlink" && r.symlinkFailed);
   const summary = successful.length > 0 ? formatResultSummary(successful) : null;
-  const summaryLines = React12.useMemo(() => {
+  const summaryLines = React13.useMemo(() => {
     if (!summary) return [];
     const counts = /* @__PURE__ */ new Map();
     return summary.lines.map((line) => {
@@ -4441,15 +4872,15 @@ function AddResultScreen() {
       return { line, key: `${line}-${count}` };
     });
   }, [summary]);
-  return /* @__PURE__ */ jsxs13(Box15, { flexDirection: "column", padding: 1, children: [
-    /* @__PURE__ */ jsx17(AddFlowHeader, { title: "Install results" }),
-    summary ? /* @__PURE__ */ jsxs13(Box15, { flexDirection: "column", marginBottom: 1, children: [
-      /* @__PURE__ */ jsx17(Text14, { children: summary.title }),
-      summaryLines.map(({ line, key }) => /* @__PURE__ */ jsx17(Text14, { children: line }, key))
+  return /* @__PURE__ */ jsxs14(Box16, { flexDirection: "column", padding: 1, children: [
+    /* @__PURE__ */ jsx18(AddFlowHeader, { title: "Install results" }),
+    summary ? /* @__PURE__ */ jsxs14(Box16, { flexDirection: "column", marginBottom: 1, children: [
+      /* @__PURE__ */ jsx18(Text15, { children: summary.title }),
+      summaryLines.map(({ line, key }) => /* @__PURE__ */ jsx18(Text15, { children: line }, key))
     ] }) : null,
-    failed.length > 0 ? /* @__PURE__ */ jsxs13(Box15, { flexDirection: "column", marginBottom: 1, children: [
-      /* @__PURE__ */ jsx17(Text14, { color: "red", children: `Failed to install ${failed.length}` }),
-      failed.map((r) => /* @__PURE__ */ jsxs13(Text14, { children: [
+    failed.length > 0 ? /* @__PURE__ */ jsxs14(Box16, { flexDirection: "column", marginBottom: 1, children: [
+      /* @__PURE__ */ jsx18(Text15, { color: "red", children: `Failed to install ${failed.length}` }),
+      failed.map((r) => /* @__PURE__ */ jsxs14(Text15, { children: [
         chalk3.red("\u2717"),
         " ",
         r.skill,
@@ -4459,15 +4890,15 @@ function AddResultScreen() {
         chalk3.dim(r.error)
       ] }, `${r.skill}-${r.agentId}`))
     ] }) : null,
-    successful.length > 0 ? /* @__PURE__ */ jsx17(Box15, { marginBottom: 1, children: /* @__PURE__ */ jsxs13(Text14, { dimColor: true, children: [
+    successful.length > 0 ? /* @__PURE__ */ jsx18(Box16, { marginBottom: 1, children: /* @__PURE__ */ jsxs14(Text15, { dimColor: true, children: [
       "Installed to: ",
       formatList(successful.map((r) => r.agent))
     ] }) }) : null,
-    symlinkFailures.length > 0 ? /* @__PURE__ */ jsxs13(Box15, { marginBottom: 1, children: [
-      /* @__PURE__ */ jsx17(Text14, { color: "yellow", children: `Symlinks failed for: ${formatList(symlinkFailures.map((r) => r.agent))}` }),
-      /* @__PURE__ */ jsx17(Text14, { dimColor: true, children: "Files were copied instead." })
+    symlinkFailures.length > 0 ? /* @__PURE__ */ jsxs14(Box16, { marginBottom: 1, children: [
+      /* @__PURE__ */ jsx18(Text15, { color: "yellow", children: `Symlinks failed for: ${formatList(symlinkFailures.map((r) => r.agent))}` }),
+      /* @__PURE__ */ jsx18(Text15, { dimColor: true, children: "Files were copied instead." })
     ] }) : null,
-    /* @__PURE__ */ jsx17(
+    /* @__PURE__ */ jsx18(
       SelectMenu,
       {
         items: [
@@ -4490,13 +4921,13 @@ function AddResultScreen() {
 }
 
 // src/tui/screens/AddScope.tsx
-import { Box as Box16 } from "ink";
-import React13 from "react";
-import { jsx as jsx18, jsxs as jsxs14 } from "react/jsx-runtime";
+import { Box as Box17 } from "ink";
+import React14 from "react";
+import { jsx as jsx19, jsxs as jsxs15 } from "react/jsx-runtime";
 function AddScopeScreen() {
   const { invocation, addSkill, updateAddSkill, navigateTo, navAction } = useNavigation();
   const options = invocation.options;
-  React13.useEffect(() => {
+  React14.useEffect(() => {
     if (navAction === "pop") return;
     if (addSkill.installGlobally !== void 0) {
       navigateTo("add-mode");
@@ -4519,9 +4950,9 @@ function AddScopeScreen() {
   const globalBase = getCanonicalSkillsBase({ global: true, cwd });
   const projectHint = `Project base (symlink): ${shortenPath(projectBase, cwd)}`;
   const globalHint = `Global base (symlink): ${shortenPath(globalBase, cwd)}`;
-  return /* @__PURE__ */ jsxs14(Box16, { flexDirection: "column", padding: 1, children: [
-    /* @__PURE__ */ jsx18(AddFlowHeader, { title: "Install scope" }),
-    /* @__PURE__ */ jsx18(
+  return /* @__PURE__ */ jsxs15(Box17, { flexDirection: "column", padding: 1, children: [
+    /* @__PURE__ */ jsx19(AddFlowHeader, { title: "Install scope" }),
+    /* @__PURE__ */ jsx19(
       SingleSelect,
       {
         items: [
@@ -4543,23 +4974,23 @@ function AddScopeScreen() {
 }
 
 // src/tui/screens/AddSecurityScan.tsx
-import { Box as Box17, Text as Text15 } from "ink";
-import React14 from "react";
-import { jsx as jsx19, jsxs as jsxs15 } from "react/jsx-runtime";
+import { Box as Box18, Text as Text16 } from "ink";
+import React15 from "react";
+import { jsx as jsx20, jsxs as jsxs16 } from "react/jsx-runtime";
 function AddSecurityScanScreen() {
   const { invocation, addSkill, updateAddSkill, navigateTo, resetTo, setFlash, setBackHandler } = useNavigation();
   const options = invocation.options;
-  const [status, setStatus] = React14.useState("scanning");
-  const [error, setError] = React14.useState(null);
-  const [manualView, setManualView] = React14.useState("menu");
-  const [confirmText, setConfirmText] = React14.useState("");
-  const [selectedRow, setSelectedRow] = React14.useState(null);
+  const [status, setStatus] = React15.useState("scanning");
+  const [error, setError] = React15.useState(null);
+  const [manualView, setManualView] = React15.useState("menu");
+  const [confirmText, setConfirmText] = React15.useState("");
+  const [selectedRow, setSelectedRow] = React15.useState(null);
   const spinner = useSpinnerFrame(status === "scanning");
   const { wrapOnChange } = useTextInput({
     onClear: () => setConfirmText(""),
     disabled: status !== "risky" || manualView !== "type-confirm"
   });
-  React14.useEffect(() => {
+  React15.useEffect(() => {
     const selectedSkills = addSkill.selectedSkills;
     if (!selectedSkills || selectedSkills.length === 0) {
       navigateTo("add-skill-select");
@@ -4599,7 +5030,7 @@ function AddSecurityScanScreen() {
       cancelled = true;
     };
   }, [addSkill.selectedSkills, navigateTo, updateAddSkill]);
-  React14.useEffect(() => {
+  React15.useEffect(() => {
     if (status !== "risky") {
       setBackHandler(null);
       return () => setBackHandler(null);
@@ -4623,17 +5054,17 @@ function AddSecurityScanScreen() {
     return () => setBackHandler(null);
   }, [status, manualView, setBackHandler]);
   if (status === "error") {
-    return /* @__PURE__ */ jsxs15(Box17, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx19(AddFlowHeader, { title: "Security scan" }),
-      /* @__PURE__ */ jsx19(Text15, { color: "red", children: error ?? "Scan failed" }),
-      /* @__PURE__ */ jsx19(Box17, { marginTop: 1, children: /* @__PURE__ */ jsx19(Text15, { dimColor: true, children: BACK_QUIT_HINT }) })
+    return /* @__PURE__ */ jsxs16(Box18, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx20(AddFlowHeader, { title: "Security scan" }),
+      /* @__PURE__ */ jsx20(Text16, { color: "red", children: error ?? "Scan failed" }),
+      /* @__PURE__ */ jsx20(Box18, { marginTop: 1, children: /* @__PURE__ */ jsx20(Text16, { dimColor: true, children: BACK_QUIT_HINT }) })
     ] });
   }
   if (status === "scanning") {
     const count = addSkill.selectedSkills?.length ?? 0;
-    return /* @__PURE__ */ jsxs15(Box17, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx19(AddFlowHeader, { title: "Security scan" }),
-      /* @__PURE__ */ jsxs15(Text15, { children: [
+    return /* @__PURE__ */ jsxs16(Box18, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx20(AddFlowHeader, { title: "Security scan" }),
+      /* @__PURE__ */ jsxs16(Text16, { children: [
         spinner,
         " Scanning ",
         count,
@@ -4644,9 +5075,9 @@ function AddSecurityScanScreen() {
     ] });
   }
   if (status === "risky") {
-    return /* @__PURE__ */ jsxs15(Box17, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx19(AddFlowHeader, { title: "Security scan" }),
-      /* @__PURE__ */ jsx19(
+    return /* @__PURE__ */ jsxs16(Box18, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx20(AddFlowHeader, { title: "Security scan" }),
+      /* @__PURE__ */ jsx20(
         ManualSecurityGate,
         {
           scanRows: addSkill.securityScanRows ?? [],
@@ -4670,12 +5101,12 @@ function AddSecurityScanScreen() {
     ] });
   }
   if (options.yes) {
-    return /* @__PURE__ */ jsx19(Box17, { padding: 1 });
+    return /* @__PURE__ */ jsx20(Box18, { padding: 1 });
   }
-  return /* @__PURE__ */ jsxs15(Box17, { flexDirection: "column", padding: 1, children: [
-    /* @__PURE__ */ jsx19(AddFlowHeader, { title: "Security scan" }),
-    /* @__PURE__ */ jsx19(Text15, { dimColor: true, children: "Scan complete." }),
-    /* @__PURE__ */ jsx19(Box17, { marginTop: 1, children: /* @__PURE__ */ jsx19(Text15, { dimColor: true, children: BACK_QUIT_HINT }) })
+  return /* @__PURE__ */ jsxs16(Box18, { flexDirection: "column", padding: 1, children: [
+    /* @__PURE__ */ jsx20(AddFlowHeader, { title: "Security scan" }),
+    /* @__PURE__ */ jsx20(Text16, { dimColor: true, children: "Scan complete." }),
+    /* @__PURE__ */ jsx20(Box18, { marginTop: 1, children: /* @__PURE__ */ jsx20(Text16, { dimColor: true, children: BACK_QUIT_HINT }) })
   ] });
 }
 
@@ -4684,8 +5115,8 @@ import { existsSync as existsSync6 } from "fs";
 import { mkdir as mkdir6, mkdtemp as mkdtemp4, writeFile as writeFile4 } from "fs/promises";
 import { tmpdir as tmpdir5 } from "os";
 import { join as join15 } from "path";
-import { Box as Box18, Text as Text16 } from "ink";
-import React15 from "react";
+import { Box as Box19, Text as Text17 } from "ink";
+import React16 from "react";
 
 // src/mintlify.ts
 import matter3 from "gray-matter";
@@ -4958,7 +5389,18 @@ var WellKnownProvider = class {
     try {
       const parsed = new URL(baseUrl);
       const basePath = parsed.pathname.replace(/\/$/, "");
+      const indexSuffix = `/${this.WELL_KNOWN_PATH}/${this.INDEX_FILE}`;
       const urlsToTry = [
+        // If the caller already passed the index.json URL, try it directly.
+        ...basePath.endsWith(indexSuffix) ? [
+          {
+            indexUrl: `${parsed.protocol}//${parsed.host}${basePath}`,
+            baseUrl: `${parsed.protocol}//${parsed.host}${basePath.slice(
+              0,
+              Math.max(0, basePath.length - indexSuffix.length)
+            )}`
+          }
+        ] : [],
         {
           indexUrl: `${parsed.protocol}//${parsed.host}${basePath}/${this.WELL_KNOWN_PATH}/${this.INDEX_FILE}`,
           baseUrl: `${parsed.protocol}//${parsed.host}${basePath}`
@@ -5003,19 +5445,46 @@ var WellKnownProvider = class {
     const e = entry;
     if (typeof e.name !== "string" || !e.name) return false;
     if (typeof e.description !== "string" || !e.description) return false;
-    if (!Array.isArray(e.files) || e.files.length === 0) return false;
     const nameRegex = /^[a-z0-9]([a-z0-9-]{0,62}[a-z0-9])?$/;
     if (!nameRegex.test(e.name) && e.name.length > 1) {
       if (e.name.length === 1 && !/^[a-z0-9]$/.test(e.name)) {
         return false;
       }
     }
-    for (const file of e.files) {
-      if (typeof file !== "string") return false;
-      if (file.startsWith("/") || file.startsWith("\\") || file.includes("..")) return false;
+    if (Array.isArray(e.files) && e.files.length > 0) {
+      for (const file of e.files) {
+        if (typeof file !== "string") return false;
+        if (file.startsWith("/") || file.startsWith("\\") || file.includes("..")) return false;
+      }
+      const hasSkillMd2 = e.files.some(
+        (f) => typeof f === "string" && f.toLowerCase() === "skill.md"
+      );
+      if (!hasSkillMd2) return false;
+      return true;
+    }
+    if (!e.content || typeof e.content !== "object") return false;
+    const c = e.content;
+    if (typeof c.endpoint !== "string" || !c.endpoint) return false;
+    if (typeof c.method !== "string" || !c.method) return false;
+    if (e.auth != null) {
+      if (typeof e.auth !== "object") return false;
+      const a = e.auth;
+      if (typeof a.tokenHeader !== "string" || !a.tokenHeader) return false;
+      if (a.tokenPrefix != null && typeof a.tokenPrefix !== "string") return false;
+    } else {
+      if (typeof c.tokenHeader !== "string" || !c.tokenHeader) return false;
+      if (c.tokenPrefix != null && typeof c.tokenPrefix !== "string") return false;
+    }
+    if (e.verify != null) {
+      if (typeof e.verify !== "object") return false;
+      const v = e.verify;
+      if (typeof v.endpoint !== "string" || !v.endpoint) return false;
+      if (typeof v.method !== "string" || !v.method) return false;
+      if (e.auth == null) {
+        if (typeof v.tokenHeader !== "string" || !v.tokenHeader) return false;
+        if (v.tokenPrefix != null && typeof v.tokenPrefix !== "string") return false;
+      }
     }
-    const hasSkillMd2 = e.files.some((f) => typeof f === "string" && f.toLowerCase() === "skill.md");
-    if (!hasSkillMd2) return false;
     return true;
   }
   async fetchSkill(url) {
@@ -5062,6 +5531,9 @@ var WellKnownProvider = class {
   }
   async fetchSkillByEntry(baseUrl, entry) {
     try {
+      if (!("files" in entry)) {
+        return null;
+      }
       const skillBaseUrl = `${baseUrl.replace(/\/$/, "")}/${this.WELL_KNOWN_PATH}/${entry.name}`;
       const skillMdUrl = `${skillBaseUrl}/SKILL.md`;
       const response = await fetch(skillMdUrl);
@@ -5222,9 +5694,82 @@ async function resolveRemoteSkill(url) {
 import { mkdir as mkdir5, mkdtemp as mkdtemp3, writeFile as writeFile3 } from "fs/promises";
 import { tmpdir as tmpdir4 } from "os";
 import { dirname as dirname4, join as join13 } from "path";
-async function prepareWellKnownSkills(sourceUrl) {
-  const discovered = await wellKnownProvider.fetchAllSkills(sourceUrl);
-  if (discovered.length === 0) {
+var WellKnownLicenseKeyRequiredError = class extends Error {
+  code = "LICENSE_KEY_REQUIRED";
+  constructor() {
+    super("A license key is required to install this skill.");
+  }
+};
+function isStaticEntry(entry) {
+  return "files" in entry;
+}
+function isAuthedEntry(entry) {
+  return "content" in entry && !("files" in entry);
+}
+function resolveAuthForEndpoint(entry, endpoint) {
+  if (entry.auth?.tokenHeader) {
+    return { tokenHeader: entry.auth.tokenHeader, tokenPrefix: entry.auth.tokenPrefix ?? "" };
+  }
+  const spec = endpoint === "content" ? entry.content : entry.verify;
+  const tokenHeader = spec?.tokenHeader;
+  const tokenPrefix = spec?.tokenPrefix;
+  if (typeof tokenHeader !== "string" || !tokenHeader) {
+    throw new Error(
+      "Invalid well-known index entry: missing auth.tokenHeader (or legacy tokenHeader)."
+    );
+  }
+  return { tokenHeader, tokenPrefix: typeof tokenPrefix === "string" ? tokenPrefix : "" };
+}
+async function fetchAuthedManifest(entry, licenseKey) {
+  const contentAuth = resolveAuthForEndpoint(entry, "content");
+  const tokenValue = `${contentAuth.tokenPrefix}${licenseKey}`;
+  if (entry.verify) {
+    const verifyAuth = resolveAuthForEndpoint(entry, "verify");
+    const verifyRes = await fetch(entry.verify.endpoint, {
+      method: entry.verify.method,
+      headers: { [verifyAuth.tokenHeader]: tokenValue }
+    });
+    if (!verifyRes.ok) {
+      const text = await verifyRes.text().catch(() => "");
+      let msg = text;
+      try {
+        const parsed = JSON.parse(text);
+        if (typeof parsed?.error === "string" && parsed.error) {
+          msg = parsed.error;
+        }
+      } catch {
+      }
+      throw new Error(msg || `License verification failed (${verifyRes.status}).`);
+    }
+  }
+  const res = await fetch(entry.content.endpoint, {
+    method: entry.content.method,
+    headers: { [contentAuth.tokenHeader]: tokenValue }
+  });
+  if (!res.ok) {
+    const text = await res.text().catch(() => "");
+    throw new Error(text || `Unable to fetch skill content (${res.status}).`);
+  }
+  const json = await res.json();
+  if (json && typeof json === "object" && "success" in json) {
+    const wrapped = json;
+    if (!wrapped.success) {
+      throw new Error(wrapped.error || "Unable to fetch skill content.");
+    }
+    return wrapped.data;
+  }
+  return json;
+}
+async function prepareWellKnownSkills(sourceUrl, options) {
+  const result = await wellKnownProvider.fetchIndex(sourceUrl);
+  if (!result) {
+    throw new Error(
+      "No skills found at this URL. Make sure it exposes /.well-known/skills/index.json."
+    );
+  }
+  const { index, resolvedBaseUrl } = result;
+  const entries = index.skills ?? [];
+  if (!Array.isArray(entries) || entries.length === 0) {
     throw new Error(
       "No skills found at this URL. Make sure it exposes /.well-known/skills/index.json."
     );
@@ -5235,33 +5780,86 @@ async function prepareWellKnownSkills(sourceUrl) {
   const originMap = /* @__PURE__ */ new Map();
   const skills = [];
   const sourceIdentifier = wellKnownProvider.getSourceIdentifier(sourceUrl);
-  for (const skill of discovered) {
-    const skillDir = join13(tempDir, skill.installName);
+  let contentHash;
+  const authedEntries = entries.filter(isAuthedEntry);
+  const staticEntries = entries.filter(isStaticEntry);
+  if (authedEntries.length > 0) {
+    const licenseKey = options?.licenseKey?.trim();
+    if (!licenseKey) {
+      throw new WellKnownLicenseKeyRequiredError();
+    }
+    const prefixPerEntry = authedEntries.length > 1;
+    for (const entry of authedEntries) {
+      const manifest = await fetchAuthedManifest(entry, licenseKey);
+      const m = manifest;
+      if (!m || typeof m !== "object" || !m.files || typeof m.files !== "object") {
+        throw new Error("Invalid manifest returned from content endpoint.");
+      }
+      if (typeof m.contentHash === "string" && m.contentHash) {
+        contentHash = m.contentHash;
+      }
+      const base = prefixPerEntry ? join13(tempDir, entry.name) : tempDir;
+      if (prefixPerEntry) {
+        await mkdir5(base, { recursive: true });
+      }
+      for (const [filePath, fileContent] of Object.entries(m.files)) {
+        if (typeof fileContent !== "string") continue;
+        const targetPath = join13(base, filePath);
+        if (!isPathSafe(base, targetPath)) {
+          continue;
+        }
+        await mkdir5(dirname4(targetPath), { recursive: true });
+        await writeFile3(targetPath, fileContent, "utf-8");
+      }
+      const discovered = await discoverSkills(base);
+      for (const skill of discovered) {
+        skills.push(skill);
+        const displayName = getSkillDisplayName(skill);
+        const relativeSkillDir = skill.path.startsWith(`${tempDir}/`) ? skill.path.slice(tempDir.length + 1) : null;
+        const relativeSkillMd = relativeSkillDir ? `${relativeSkillDir}/SKILL.md` : null;
+        originMap.set(displayName, {
+          sourceType: "well-known",
+          sourceUrl,
+          source: sourceIdentifier,
+          skillPath: relativeSkillMd ?? void 0
+        });
+      }
+    }
+  }
+  for (const entry of staticEntries) {
+    const fetched = await wellKnownProvider.fetchSkillByEntry(resolvedBaseUrl, entry);
+    if (!fetched) continue;
+    const skillDir = join13(tempDir, fetched.installName);
     await mkdir5(skillDir, { recursive: true });
-    for (const [filePath, content] of skill.files.entries()) {
+    for (const [filePath, fileContent] of fetched.files.entries()) {
       const targetPath = join13(skillDir, filePath);
       if (!isPathSafe(skillDir, targetPath)) {
         throw new Error("Invalid file path in well-known skill index.");
       }
       await mkdir5(dirname4(targetPath), { recursive: true });
-      await writeFile3(targetPath, content, "utf-8");
+      await writeFile3(targetPath, fileContent, "utf-8");
     }
     const localSkill = {
-      name: skill.installName,
-      description: skill.description,
+      name: fetched.installName,
+      description: fetched.description,
       path: skillDir,
-      rawContent: skill.content,
-      metadata: skill.metadata
+      rawContent: fetched.content,
+      metadata: fetched.metadata
     };
     skills.push(localSkill);
     originMap.set(getSkillDisplayName(localSkill), {
       sourceType: "well-known",
-      sourceUrl: skill.sourceUrl,
+      sourceUrl: fetched.sourceUrl,
       source: sourceIdentifier,
-      skillPath: skill.sourceUrl
+      skillPath: fetched.sourceUrl
     });
   }
-  return { tempDir, skills, originBySkillName: originMap };
+  if (skills.length === 0) {
+    throw new Error(
+      "No skills found at this URL. Make sure it exposes /.well-known/skills/index.json."
+    );
+  }
+  return { tempDir, skills, originBySkillName: originMap, contentHash };
 }
 
 // src/marketplace.ts
@@ -5571,7 +6169,7 @@ function autoSelect(skills, options) {
 }
 
 // src/tui/screens/AddSkillSelect.tsx
-import { jsx as jsx20, jsxs as jsxs16 } from "react/jsx-runtime";
+import { jsx as jsx21, jsxs as jsxs17 } from "react/jsx-runtime";
 function AddSkillSelectScreen() {
   const {
     invocation,
@@ -5585,16 +6183,16 @@ function AddSkillSelectScreen() {
     resetAddSkill,
     setLastSource
   } = useNavigation();
-  const [status, setStatus] = React15.useState(
+  const [status, setStatus] = React16.useState(
     addSkill.skills && addSkill.skills.length > 0 ? "ready" : "loading"
   );
-  const [error, setError] = React15.useState(null);
-  const [listMode, setListMode] = React15.useState(false);
-  const [showLoading, setShowLoading] = React15.useState(false);
+  const [error, setError] = React16.useState(null);
+  const [listMode, setListMode] = React16.useState(false);
+  const [showLoading, setShowLoading] = React16.useState(false);
   const spinner = useSpinnerFrame(status === "loading");
   const source = addSkill.source ?? invocation.source;
   const options = invocation.options;
-  React15.useEffect(() => {
+  React16.useEffect(() => {
     let cancelled = false;
     const load = async () => {
       if (!source) {
@@ -5658,10 +6256,27 @@ function AddSkillSelectScreen() {
           return;
         }
         if (parsed.type === "well-known") {
-          const prepared = await prepareWellKnownSkills(parsed.url);
+          const licenseKey = addSkill.licenseKey ?? options.licenseKey ?? parsed.licenseKey;
+          let prepared;
+          try {
+            prepared = await prepareWellKnownSkills(parsed.url, { licenseKey });
+          } catch (err) {
+            if (err instanceof WellKnownLicenseKeyRequiredError) {
+              updateAddSkill({ parsed });
+              navigateTo("add-license-key");
+              return;
+            }
+            throw err;
+          }
           tempDirForCleanup = prepared.tempDir;
+          const nextParsed = {
+            ...parsed,
+            ...licenseKey ? { licenseKey } : {},
+            ...prepared.contentHash ? { contentHash: prepared.contentHash } : {}
+          };
           updateAddSkill({
-            parsed,
+            parsed: nextParsed,
+            ...licenseKey ? { licenseKey } : {},
             tempDir: prepared.tempDir,
             skills: prepared.skills,
             originBySkillName: prepared.originBySkillName
@@ -5774,8 +6389,8 @@ function AddSkillSelectScreen() {
     return () => {
       cancelled = true;
     };
-  }, [source, addSkill.skills, updateAddSkill, navigateTo, options, setFlash]);
-  React15.useEffect(() => {
+  }, [source, addSkill.skills, addSkill.licenseKey, updateAddSkill, navigateTo, options, setFlash]);
+  React16.useEffect(() => {
     if (invocation.source) {
       setBackHandler(() => {
         setLastSource(invocation.source ?? null);
@@ -5791,7 +6406,7 @@ function AddSkillSelectScreen() {
       setBackHandler(null);
     };
   }, [invocation.source, resetTo, setBackHandler, resetAddSkill, setInvocation, setLastSource]);
-  React15.useEffect(() => {
+  React16.useEffect(() => {
     if (status !== "loading") {
       setShowLoading(false);
       return;
@@ -5802,18 +6417,18 @@ function AddSkillSelectScreen() {
     return () => clearTimeout(timer);
   }, [status]);
   if (!source) {
-    return /* @__PURE__ */ jsxs16(Box18, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx20(AddFlowHeader, { title: "Add skills" }),
-      /* @__PURE__ */ jsx20(Text16, { children: `Missing source. ${BACK_QUIT_HINT}` })
+    return /* @__PURE__ */ jsxs17(Box19, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx21(AddFlowHeader, { title: "Add skills" }),
+      /* @__PURE__ */ jsx21(Text17, { children: `Missing source. ${BACK_QUIT_HINT}` })
     ] });
   }
   if (status === "loading" && !showLoading) {
-    return /* @__PURE__ */ jsx20(Box18, { padding: 1 });
+    return /* @__PURE__ */ jsx21(Box19, { padding: 1 });
   }
   if (status === "loading") {
-    return /* @__PURE__ */ jsxs16(Box18, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx20(AddFlowHeader, { title: "Scanning skills" }),
-      /* @__PURE__ */ jsxs16(Text16, { children: [
+    return /* @__PURE__ */ jsxs17(Box19, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx21(AddFlowHeader, { title: "Scanning skills" }),
+      /* @__PURE__ */ jsxs17(Text17, { children: [
         spinner,
         " Fetching skills from ",
         source
@@ -5821,32 +6436,32 @@ function AddSkillSelectScreen() {
     ] });
   }
   if (status === "error") {
-    return /* @__PURE__ */ jsxs16(Box18, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx20(AddFlowHeader, { title: "Unable to load skills" }),
-      /* @__PURE__ */ jsx20(Text16, { color: "red", children: error }),
-      /* @__PURE__ */ jsx20(Box18, { marginTop: 1, children: /* @__PURE__ */ jsx20(Text16, { dimColor: true, children: BACK_QUIT_HINT }) })
+    return /* @__PURE__ */ jsxs17(Box19, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx21(AddFlowHeader, { title: "Unable to load skills" }),
+      /* @__PURE__ */ jsx21(Text17, { color: "red", children: error }),
+      /* @__PURE__ */ jsx21(Box19, { marginTop: 1, children: /* @__PURE__ */ jsx21(Text17, { dimColor: true, children: BACK_QUIT_HINT }) })
     ] });
   }
   const skills = addSkill.skills ?? [];
   if (listMode || status === "list") {
-    return /* @__PURE__ */ jsxs16(Box18, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx20(AddFlowHeader, { title: `Available skills (${skills.length})` }),
-      skills.map((skill) => /* @__PURE__ */ jsxs16(Box18, { flexDirection: "column", marginBottom: 1, children: [
-        /* @__PURE__ */ jsx20(Text16, { children: getSkillDisplayName(skill) }),
-        skill.description ? /* @__PURE__ */ jsx20(Text16, { dimColor: true, children: skill.description }) : null
+    return /* @__PURE__ */ jsxs17(Box19, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx21(AddFlowHeader, { title: `Available skills (${skills.length})` }),
+      skills.map((skill) => /* @__PURE__ */ jsxs17(Box19, { flexDirection: "column", marginBottom: 1, children: [
+        /* @__PURE__ */ jsx21(Text17, { children: getSkillDisplayName(skill) }),
+        skill.description ? /* @__PURE__ */ jsx21(Text17, { dimColor: true, children: skill.description }) : null
       ] }, skill.name)),
-      /* @__PURE__ */ jsx20(Text16, { dimColor: true, children: BACK_QUIT_HINT })
+      /* @__PURE__ */ jsx21(Text17, { dimColor: true, children: BACK_QUIT_HINT })
     ] });
   }
   if (skills.length === 0) {
-    return /* @__PURE__ */ jsxs16(Box18, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx20(AddFlowHeader, { title: "No skills found" }),
-      /* @__PURE__ */ jsx20(Text16, { dimColor: true, children: BACK_QUIT_HINT })
+    return /* @__PURE__ */ jsxs17(Box19, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx21(AddFlowHeader, { title: "No skills found" }),
+      /* @__PURE__ */ jsx21(Text17, { dimColor: true, children: BACK_QUIT_HINT })
     ] });
   }
-  return /* @__PURE__ */ jsxs16(Box18, { flexDirection: "column", padding: 1, children: [
-    /* @__PURE__ */ jsx20(AddFlowHeader, { title: "Select skills" }),
-    /* @__PURE__ */ jsx20(
+  return /* @__PURE__ */ jsxs17(Box19, { flexDirection: "column", padding: 1, children: [
+    /* @__PURE__ */ jsx21(AddFlowHeader, { title: "Select skills" }),
+    /* @__PURE__ */ jsx21(
       MultiSelect,
       {
         items: skills.map((skill) => ({
@@ -5878,22 +6493,22 @@ function AddSkillSelectScreen() {
 }
 
 // src/tui/screens/AddSource.tsx
-import { Box as Box19, Text as Text17 } from "ink";
-import TextInput2 from "ink-text-input";
-import React16 from "react";
-import { jsx as jsx21, jsxs as jsxs17 } from "react/jsx-runtime";
+import { Box as Box20, Text as Text18 } from "ink";
+import TextInput3 from "ink-text-input";
+import React17 from "react";
+import { jsx as jsx22, jsxs as jsxs18 } from "react/jsx-runtime";
 function AddSourceScreen() {
   const { invocation, addSkill, updateAddSkill, navigateTo, setFlash, lastSource, setLastSource } = useNavigation();
-  const [value, setValue] = React16.useState(
+  const [value, setValue] = React17.useState(
     addSkill.source ?? invocation.source ?? lastSource ?? ""
   );
-  const didAutofillRef = React16.useRef(false);
+  const didAutofillRef = React17.useRef(false);
   const { wrapOnChange } = useTextInput({
     onClear: () => {
       setValue("");
     }
   });
-  React16.useEffect(() => {
+  React17.useEffect(() => {
     const preset = invocation.source;
     if (!preset || didAutofillRef.current) return;
     didAutofillRef.current = true;
@@ -5910,31 +6525,31 @@ function AddSourceScreen() {
     updateAddSkill({ source: trimmed });
     navigateTo("add-skill-select");
   };
-  return /* @__PURE__ */ jsxs17(Box19, { flexDirection: "column", padding: 1, children: [
-    /* @__PURE__ */ jsx21(Header, { title: "Add skills" }),
-    /* @__PURE__ */ jsx21(Box19, { marginBottom: 1, children: /* @__PURE__ */ jsx21(Text17, { children: "Where should we fetch skills from?" }) }),
-    /* @__PURE__ */ jsx21(Box19, { marginBottom: 1, children: /* @__PURE__ */ jsx21(Text17, { dimColor: true, children: "Examples: owner/repo, https://.../SKILL.md, ./local/path" }) }),
-    /* @__PURE__ */ jsxs17(Box19, { children: [
-      /* @__PURE__ */ jsx21(Text17, { color: "green", children: "> " }),
-      /* @__PURE__ */ jsx21(TextInput2, { value, onChange: wrapOnChange(setValue), onSubmit })
+  return /* @__PURE__ */ jsxs18(Box20, { flexDirection: "column", padding: 1, children: [
+    /* @__PURE__ */ jsx22(Header, { title: "Add skills" }),
+    /* @__PURE__ */ jsx22(Box20, { marginBottom: 1, children: /* @__PURE__ */ jsx22(Text18, { children: "Where should we fetch skills from?" }) }),
+    /* @__PURE__ */ jsx22(Box20, { marginBottom: 1, children: /* @__PURE__ */ jsx22(Text18, { dimColor: true, children: "Examples: owner/repo, https://.../SKILL.md, ./local/path" }) }),
+    /* @__PURE__ */ jsxs18(Box20, { children: [
+      /* @__PURE__ */ jsx22(Text18, { color: "green", children: "> " }),
+      /* @__PURE__ */ jsx22(TextInput3, { value, onChange: wrapOnChange(setValue), onSubmit })
     ] }),
-    /* @__PURE__ */ jsx21(Box19, { marginTop: 1, children: /* @__PURE__ */ jsx21(Text17, { dimColor: true, children: TEXT_INPUT_HINT }) })
+    /* @__PURE__ */ jsx22(Box20, { marginTop: 1, children: /* @__PURE__ */ jsx22(Text18, { dimColor: true, children: TEXT_INPUT_HINT }) })
   ] });
 }
 
 // src/tui/screens/AddTargets.tsx
-import { Box as Box20, Text as Text18 } from "ink";
-import React17 from "react";
-import { Fragment as Fragment2, jsx as jsx22, jsxs as jsxs18 } from "react/jsx-runtime";
+import { Box as Box21, Text as Text19 } from "ink";
+import React18 from "react";
+import { Fragment as Fragment2, jsx as jsx23, jsxs as jsxs19 } from "react/jsx-runtime";
 function AddTargetsScreen() {
   const { invocation, addSkill, updateAddSkill, navigateTo, setFlash, navAction } = useNavigation();
-  const [status, setStatus] = React17.useState("loading");
-  const [mode, setMode] = React17.useState("choice");
-  const [availableAgents, setAvailableAgents] = React17.useState([]);
-  const [lastSelected, setLastSelected] = React17.useState([]);
-  const [showLoading, setShowLoading] = React17.useState(false);
+  const [status, setStatus] = React18.useState("loading");
+  const [mode, setMode] = React18.useState("choice");
+  const [availableAgents, setAvailableAgents] = React18.useState([]);
+  const [lastSelected, setLastSelected] = React18.useState([]);
+  const [showLoading, setShowLoading] = React18.useState(false);
   const spinner = useSpinnerFrame(status === "loading");
-  React17.useEffect(() => {
+  React18.useEffect(() => {
     let cancelled = false;
     const run = async () => {
       setStatus("loading");
@@ -5983,7 +6598,7 @@ function AddTargetsScreen() {
       cancelled = true;
     };
   }, [invocation.options, updateAddSkill, navigateTo, addSkill.targetAgents, setFlash, navAction]);
-  React17.useEffect(() => {
+  React18.useEffect(() => {
     if (status !== "loading") {
       setShowLoading(false);
       return;
@@ -5994,12 +6609,12 @@ function AddTargetsScreen() {
     return () => clearTimeout(timer);
   }, [status]);
   if (status === "loading" && !showLoading) {
-    return /* @__PURE__ */ jsx22(Box20, { padding: 1 });
+    return /* @__PURE__ */ jsx23(Box21, { padding: 1 });
   }
   if (status === "loading") {
-    return /* @__PURE__ */ jsxs18(Box20, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx22(AddFlowHeader, { title: "Detecting agents" }),
-      /* @__PURE__ */ jsxs18(Text18, { children: [
+    return /* @__PURE__ */ jsxs19(Box21, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx23(AddFlowHeader, { title: "Detecting agents" }),
+      /* @__PURE__ */ jsxs19(Text19, { children: [
         spinner,
         " Checking installed agents..."
       ] })
@@ -6021,9 +6636,9 @@ function AddTargetsScreen() {
     label: agents[agent].displayName,
     hint: agents[agent].skillsDir
   }));
-  return /* @__PURE__ */ jsx22(Box20, { flexDirection: "column", padding: 1, children: mode === "choice" ? /* @__PURE__ */ jsxs18(Fragment2, { children: [
-    /* @__PURE__ */ jsx22(AddFlowHeader, { title: "Install to" }),
-    /* @__PURE__ */ jsx22(
+  return /* @__PURE__ */ jsx23(Box21, { flexDirection: "column", padding: 1, children: mode === "choice" ? /* @__PURE__ */ jsxs19(Fragment2, { children: [
+    /* @__PURE__ */ jsx23(AddFlowHeader, { title: "Install to" }),
+    /* @__PURE__ */ jsx23(
       SingleSelect,
       {
         items: [
@@ -6056,9 +6671,9 @@ function AddTargetsScreen() {
         }
       }
     )
-  ] }) : /* @__PURE__ */ jsxs18(Fragment2, { children: [
-    /* @__PURE__ */ jsx22(AddFlowHeader, { title: "Select agents" }),
-    /* @__PURE__ */ jsx22(
+  ] }) : /* @__PURE__ */ jsxs19(Fragment2, { children: [
+    /* @__PURE__ */ jsx23(AddFlowHeader, { title: "Select agents" }),
+    /* @__PURE__ */ jsx23(
       MultiSelect,
       {
         items: selectableItems,
@@ -6090,9 +6705,9 @@ function AddTargetsScreen() {
 }
 
 // src/tui/screens/FindSkillResults.tsx
-import { Box as Box21, Text as Text19 } from "ink";
-import React18 from "react";
-import { jsx as jsx23, jsxs as jsxs19 } from "react/jsx-runtime";
+import { Box as Box22, Text as Text20 } from "ink";
+import React19 from "react";
+import { jsx as jsx24, jsxs as jsxs20 } from "react/jsx-runtime";
 var formatStars = (value) => {
   if (!value || value <= 0) return "";
   if (value >= 1e3) {
@@ -6121,8 +6736,8 @@ var truncateLabel = (value, max = 100) => {
 };
 function FindSkillResultsScreen() {
   const { findSkill, updateFindSkill, resetAddSkill, updateAddSkill, navigateTo, setFlash } = useNavigation();
-  const [status, setStatus] = React18.useState("ready");
-  const [error, setError] = React18.useState(null);
+  const [status, setStatus] = React19.useState("ready");
+  const [error, setError] = React19.useState(null);
   const spinner = useSpinnerFrame(status === "loading");
   const results = findSkill.results ?? [];
   const query = findSkill.query ?? "";
@@ -6160,36 +6775,36 @@ function FindSkillResultsScreen() {
       setStatus("error");
     }
   };
-  React18.useEffect(() => {
+  React19.useEffect(() => {
     if (results.length === 0) {
       setStatus("ready");
     }
   }, [results.length]);
   if (status === "loading") {
-    return /* @__PURE__ */ jsxs19(Box21, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx23(Header, { title: "Preparing skills" }),
-      /* @__PURE__ */ jsxs19(Text19, { children: [
+    return /* @__PURE__ */ jsxs20(Box22, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx24(Header, { title: "Preparing skills" }),
+      /* @__PURE__ */ jsxs20(Text20, { children: [
         spinner,
         " Cloning repositories..."
       ] })
     ] });
   }
   if (results.length === 0) {
-    return /* @__PURE__ */ jsxs19(Box21, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx23(Header, { title: "No results" }),
-      /* @__PURE__ */ jsx23(Text19, { dimColor: true, children: "No skills found." }),
-      /* @__PURE__ */ jsx23(Box21, { marginTop: 1, children: /* @__PURE__ */ jsx23(Text19, { dimColor: true, children: BACK_QUIT_HINT }) })
+    return /* @__PURE__ */ jsxs20(Box22, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx24(Header, { title: "No results" }),
+      /* @__PURE__ */ jsx24(Text20, { dimColor: true, children: "No skills found." }),
+      /* @__PURE__ */ jsx24(Box22, { marginTop: 1, children: /* @__PURE__ */ jsx24(Text20, { dimColor: true, children: BACK_QUIT_HINT }) })
     ] });
   }
-  return /* @__PURE__ */ jsxs19(Box21, { flexDirection: "column", padding: 1, children: [
-    /* @__PURE__ */ jsx23(Header, { title: "Select skills" }),
-    /* @__PURE__ */ jsxs19(Box21, { marginBottom: 1, flexDirection: "column", children: [
-      /* @__PURE__ */ jsx23(Text19, { children: `Query: ${query}` }),
-      /* @__PURE__ */ jsx23(Text19, { dimColor: true, children: `Mode: ${modeLabel} search` }),
-      /* @__PURE__ */ jsx23(Text19, { dimColor: true, children: FIND_SKILLS_HINT })
+  return /* @__PURE__ */ jsxs20(Box22, { flexDirection: "column", padding: 1, children: [
+    /* @__PURE__ */ jsx24(Header, { title: "Select skills" }),
+    /* @__PURE__ */ jsxs20(Box22, { marginBottom: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsx24(Text20, { children: `Query: ${query}` }),
+      /* @__PURE__ */ jsx24(Text20, { dimColor: true, children: `Mode: ${modeLabel} search` }),
+      /* @__PURE__ */ jsx24(Text20, { dimColor: true, children: FIND_SKILLS_HINT })
     ] }),
-    status === "error" ? /* @__PURE__ */ jsx23(Box21, { marginBottom: 1, children: /* @__PURE__ */ jsx23(Text19, { color: "red", children: error }) }) : null,
-    /* @__PURE__ */ jsx23(
+    status === "error" ? /* @__PURE__ */ jsx24(Box22, { marginBottom: 1, children: /* @__PURE__ */ jsx24(Text20, { color: "red", children: error }) }) : null,
+    /* @__PURE__ */ jsx24(
       MultiSelect,
       {
         items: results.map((result) => ({
@@ -6207,21 +6822,21 @@ function FindSkillResultsScreen() {
 }
 
 // src/tui/screens/FindSkillSearch.tsx
-import { Box as Box22, Text as Text20, useInput as useInput5 } from "ink";
-import TextInput3 from "ink-text-input";
-import React19 from "react";
-import { jsx as jsx24, jsxs as jsxs20 } from "react/jsx-runtime";
+import { Box as Box23, Text as Text21, useInput as useInput5 } from "ink";
+import TextInput4 from "ink-text-input";
+import React20 from "react";
+import { jsx as jsx25, jsxs as jsxs21 } from "react/jsx-runtime";
 var MIN_QUERY_LENGTH = 2;
 function getDebounceMs(queryLength) {
   return Math.max(150, 350 - queryLength * 50);
 }
 function FindSkillSearchScreen() {
   const { findSkill, updateFindSkill, navigateTo, setFlash } = useNavigation();
-  const [value, setValue] = React19.useState(findSkill.query ?? "");
-  const [status, setStatus] = React19.useState("idle");
-  const [error, setError] = React19.useState(null);
-  const [preview, setPreview] = React19.useState([]);
-  const debounceRef = React19.useRef(null);
+  const [value, setValue] = React20.useState(findSkill.query ?? "");
+  const [status, setStatus] = React20.useState("idle");
+  const [error, setError] = React20.useState(null);
+  const [preview, setPreview] = React20.useState([]);
+  const debounceRef = React20.useRef(null);
   const spinner = useSpinnerFrame(status === "searching" || status === "loading");
   const { wrapOnChange } = useTextInput({
     disabled: status === "loading",
@@ -6232,7 +6847,7 @@ function FindSkillSearchScreen() {
       updateFindSkill({ query: "" });
     }
   });
-  const triggerLiveSearch = React19.useCallback((query) => {
+  const triggerLiveSearch = React20.useCallback((query) => {
     if (debounceRef.current) {
       clearTimeout(debounceRef.current);
       debounceRef.current = null;
@@ -6256,14 +6871,14 @@ function FindSkillSearchScreen() {
       }
     }, debounceMs);
   }, []);
-  React19.useEffect(() => {
+  React20.useEffect(() => {
     return () => {
       if (debounceRef.current) {
         clearTimeout(debounceRef.current);
       }
     };
   }, []);
-  const goToLexicalResults = React19.useCallback(async () => {
+  const goToLexicalResults = React20.useCallback(async () => {
     const query = value.trim();
     if (!query || query.length < MIN_QUERY_LENGTH) {
       setFlash(`Enter at least ${MIN_QUERY_LENGTH} characters.`);
@@ -6290,7 +6905,7 @@ function FindSkillSearchScreen() {
       setStatus("error");
     }
   }, [value, setFlash, updateFindSkill, navigateTo]);
-  const runSemanticSearch = React19.useCallback(async () => {
+  const runSemanticSearch = React20.useCallback(async () => {
     const query = value.trim();
     if (!query) {
       setFlash("Enter a search term.");
@@ -6335,13 +6950,13 @@ function FindSkillSearchScreen() {
   });
   const showPreview = preview.length > 0 && status !== "loading";
   const showSearching = status === "searching" && value.trim().length >= MIN_QUERY_LENGTH;
-  return /* @__PURE__ */ jsxs20(Box22, { flexDirection: "column", padding: 1, children: [
-    /* @__PURE__ */ jsx24(Header, { title: "Find skills" }),
-    /* @__PURE__ */ jsx24(Box22, { marginBottom: 1, children: /* @__PURE__ */ jsx24(Text20, { children: "Find a skill to give your agent new capabilities." }) }),
-    /* @__PURE__ */ jsxs20(Box22, { children: [
-      /* @__PURE__ */ jsx24(Text20, { color: "green", children: "> " }),
-      /* @__PURE__ */ jsx24(
-        TextInput3,
+  return /* @__PURE__ */ jsxs21(Box23, { flexDirection: "column", padding: 1, children: [
+    /* @__PURE__ */ jsx25(Header, { title: "Find skills" }),
+    /* @__PURE__ */ jsx25(Box23, { marginBottom: 1, children: /* @__PURE__ */ jsx25(Text21, { children: "Find a skill to give your agent new capabilities." }) }),
+    /* @__PURE__ */ jsxs21(Box23, { children: [
+      /* @__PURE__ */ jsx25(Text21, { color: "green", children: "> " }),
+      /* @__PURE__ */ jsx25(
+        TextInput4,
         {
           value,
           onChange: wrapOnChange((next) => {
@@ -6358,52 +6973,52 @@ function FindSkillSearchScreen() {
         }
       )
     ] }),
-    showSearching && !showPreview ? /* @__PURE__ */ jsx24(Box22, { marginTop: 1, children: /* @__PURE__ */ jsxs20(Text20, { dimColor: true, children: [
+    showSearching && !showPreview ? /* @__PURE__ */ jsx25(Box23, { marginTop: 1, children: /* @__PURE__ */ jsxs21(Text21, { dimColor: true, children: [
       spinner,
       " Searching..."
     ] }) }) : null,
-    showPreview ? /* @__PURE__ */ jsxs20(Box22, { flexDirection: "column", marginTop: 1, children: [
-      /* @__PURE__ */ jsxs20(Text20, { dimColor: true, children: [
+    showPreview ? /* @__PURE__ */ jsxs21(Box23, { flexDirection: "column", marginTop: 1, children: [
+      /* @__PURE__ */ jsxs21(Text21, { dimColor: true, children: [
         preview.length,
         " result",
         preview.length !== 1 ? "s" : "",
         " found:"
       ] }),
-      preview.slice(0, 3).map((result) => /* @__PURE__ */ jsxs20(Text20, { dimColor: true, children: [
+      preview.slice(0, 3).map((result) => /* @__PURE__ */ jsxs21(Text21, { dimColor: true, children: [
         "  ",
         "\u2022 ",
         result.name,
         result.repoOwner ? ` (${result.repoOwner}/${result.repoName})` : ""
       ] }, result.id)),
-      preview.length > 3 ? /* @__PURE__ */ jsxs20(Text20, { dimColor: true, children: [
+      preview.length > 3 ? /* @__PURE__ */ jsxs21(Text21, { dimColor: true, children: [
         "  ",
         "... and ",
         preview.length - 3,
         " more"
       ] }) : null
     ] }) : null,
-    status === "loading" ? /* @__PURE__ */ jsx24(Box22, { marginTop: 1, children: /* @__PURE__ */ jsxs20(Text20, { children: [
+    status === "loading" ? /* @__PURE__ */ jsx25(Box23, { marginTop: 1, children: /* @__PURE__ */ jsxs21(Text21, { children: [
       spinner,
       " Running AI search..."
     ] }) }) : null,
-    status === "error" ? /* @__PURE__ */ jsx24(Box22, { marginTop: 1, children: /* @__PURE__ */ jsx24(Text20, { color: "red", children: error }) }) : null,
-    /* @__PURE__ */ jsx24(Box22, { marginTop: 1, children: /* @__PURE__ */ jsx24(Text20, { dimColor: true, children: "Enter for fast results, Tab for AI search" }) }),
-    /* @__PURE__ */ jsx24(Box22, { children: /* @__PURE__ */ jsx24(Text20, { dimColor: true, children: TEXT_INPUT_HINT }) })
+    status === "error" ? /* @__PURE__ */ jsx25(Box23, { marginTop: 1, children: /* @__PURE__ */ jsx25(Text21, { color: "red", children: error }) }) : null,
+    /* @__PURE__ */ jsx25(Box23, { marginTop: 1, children: /* @__PURE__ */ jsx25(Text21, { dimColor: true, children: "Enter for fast results, Tab for AI search" }) }),
+    /* @__PURE__ */ jsx25(Box23, { children: /* @__PURE__ */ jsx25(Text21, { dimColor: true, children: TEXT_INPUT_HINT }) })
   ] });
 }
 
 // src/tui/screens/GetUrl.tsx
-import { Box as Box23, Text as Text21, useApp } from "ink";
-import React20 from "react";
-import { jsx as jsx25, jsxs as jsxs21 } from "react/jsx-runtime";
+import { Box as Box24, Text as Text22, useApp } from "ink";
+import React21 from "react";
+import { jsx as jsx26, jsxs as jsxs22 } from "react/jsx-runtime";
 function GetUrlScreen() {
   const { exit } = useApp();
   const { invocation } = useNavigation();
   const spinner = useSpinnerFrame(true);
-  const didRun = React20.useRef(false);
+  const didRun = React21.useRef(false);
   const outputPath = invocation.options?.output ?? null;
   const outputFormat = invocation.options?.json ? "json" : "markdown";
-  React20.useEffect(() => {
+  React21.useEffect(() => {
     let cancelled = false;
     const run = async () => {
       if (didRun.current) return;
@@ -6432,12 +7047,12 @@ function GetUrlScreen() {
       cancelled = true;
     };
   }, [exit, invocation]);
-  return /* @__PURE__ */ jsxs21(Box23, { flexDirection: "column", padding: 1, children: [
-    /* @__PURE__ */ jsx25(Header, { title: "Fetching URL" }),
-    invocation.source ? /* @__PURE__ */ jsx25(Text21, { dimColor: true, children: `URL: ${invocation.source}` }) : null,
-    outputPath ? /* @__PURE__ */ jsx25(Text21, { dimColor: true, children: `Output: ${outputPath}` }) : null,
-    outputFormat === "json" ? /* @__PURE__ */ jsx25(Text21, { dimColor: true, children: "Format: json" }) : null,
-    /* @__PURE__ */ jsxs21(Text21, { children: [
+  return /* @__PURE__ */ jsxs22(Box24, { flexDirection: "column", padding: 1, children: [
+    /* @__PURE__ */ jsx26(Header, { title: "Fetching URL" }),
+    invocation.source ? /* @__PURE__ */ jsx26(Text22, { dimColor: true, children: `URL: ${invocation.source}` }) : null,
+    outputPath ? /* @__PURE__ */ jsx26(Text22, { dimColor: true, children: `Output: ${outputPath}` }) : null,
+    outputFormat === "json" ? /* @__PURE__ */ jsx26(Text22, { dimColor: true, children: "Format: json" }) : null,
+    /* @__PURE__ */ jsxs22(Text22, { children: [
       spinner,
       " Fetching markdown..."
     ] })
@@ -6445,8 +7060,8 @@ function GetUrlScreen() {
 }
 
 // src/tui/screens/ListSkills.tsx
-import { Box as Box24, Text as Text22 } from "ink";
-import React21 from "react";
+import { Box as Box25, Text as Text23 } from "ink";
+import React22 from "react";
 
 // src/installed-skills.ts
 import { lstat as lstat2, readFile as readFile5, readdir as readdir4, stat as stat4 } from "fs/promises";
@@ -6561,12 +7176,12 @@ async function findSkillInstallations(skillName, scope, cwd = process.cwd()) {
 }
 
 // src/tui/screens/ListSkills.tsx
-import { jsx as jsx26, jsxs as jsxs22 } from "react/jsx-runtime";
+import { jsx as jsx27, jsxs as jsxs23 } from "react/jsx-runtime";
 function ListScreen() {
   const { navigateTo, setBackHandler } = useNavigation();
-  const [summaries, setSummaries] = React21.useState([]);
-  const [selectedAgent, setSelectedAgent] = React21.useState(null);
-  React21.useEffect(() => {
+  const [summaries, setSummaries] = React22.useState([]);
+  const [selectedAgent, setSelectedAgent] = React22.useState(null);
+  React22.useEffect(() => {
     let cancelled = false;
     const load = async () => {
       const installed = await detectInstalledAgents();
@@ -6589,7 +7204,7 @@ function ListScreen() {
       cancelled = true;
     };
   }, []);
-  React21.useEffect(() => {
+  React22.useEffect(() => {
     if (!selectedAgent) {
       setBackHandler(null);
       return;
@@ -6604,17 +7219,17 @@ function ListScreen() {
   }, [selectedAgent, setBackHandler]);
   if (selectedAgent) {
     const total = selectedAgent.projectSkills.length + selectedAgent.globalSkills.length;
-    return /* @__PURE__ */ jsxs22(Box24, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx26(Header, { title: `${agents[selectedAgent.agent].displayName} (${total})` }),
-      selectedAgent.projectSkills.length > 0 ? /* @__PURE__ */ jsxs22(Box24, { flexDirection: "column", marginBottom: 1, children: [
-        /* @__PURE__ */ jsx26(Text22, { children: "Project" }),
-        selectedAgent.projectSkills.map((name) => /* @__PURE__ */ jsx26(Text22, { dimColor: true, children: name }, `p-${name}`))
+    return /* @__PURE__ */ jsxs23(Box25, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx27(Header, { title: `${agents[selectedAgent.agent].displayName} (${total})` }),
+      selectedAgent.projectSkills.length > 0 ? /* @__PURE__ */ jsxs23(Box25, { flexDirection: "column", marginBottom: 1, children: [
+        /* @__PURE__ */ jsx27(Text23, { children: "Project" }),
+        selectedAgent.projectSkills.map((name) => /* @__PURE__ */ jsx27(Text23, { dimColor: true, children: name }, `p-${name}`))
       ] }) : null,
-      selectedAgent.globalSkills.length > 0 ? /* @__PURE__ */ jsxs22(Box24, { flexDirection: "column", marginBottom: 1, children: [
-        /* @__PURE__ */ jsx26(Text22, { children: "Global" }),
-        selectedAgent.globalSkills.map((name) => /* @__PURE__ */ jsx26(Text22, { dimColor: true, children: name }, `g-${name}`))
+      selectedAgent.globalSkills.length > 0 ? /* @__PURE__ */ jsxs23(Box25, { flexDirection: "column", marginBottom: 1, children: [
+        /* @__PURE__ */ jsx27(Text23, { children: "Global" }),
+        selectedAgent.globalSkills.map((name) => /* @__PURE__ */ jsx27(Text23, { dimColor: true, children: name }, `g-${name}`))
       ] }) : null,
-      /* @__PURE__ */ jsx26(
+      /* @__PURE__ */ jsx27(
         SelectMenu,
         {
           items: [
@@ -6641,9 +7256,9 @@ function ListScreen() {
       hint: `${count} skill${count !== 1 ? "s" : ""}`
     };
   });
-  return /* @__PURE__ */ jsxs22(Box24, { flexDirection: "column", padding: 1, children: [
-    /* @__PURE__ */ jsx26(Header, { title: "Installed skills" }),
-    /* @__PURE__ */ jsx26(
+  return /* @__PURE__ */ jsxs23(Box25, { flexDirection: "column", padding: 1, children: [
+    /* @__PURE__ */ jsx27(Header, { title: "Installed skills" }),
+    /* @__PURE__ */ jsx27(
       SelectMenu,
       {
         items,
@@ -6660,8 +7275,8 @@ function ListScreen() {
 }
 
 // src/tui/screens/MainMenu.tsx
-import { Box as Box25 } from "ink";
-import { jsx as jsx27 } from "react/jsx-runtime";
+import { Box as Box26 } from "ink";
+import { jsx as jsx28 } from "react/jsx-runtime";
 function MainMenu() {
   const { navigateTo, resetAddSkill, resetFindSkill, setInvocation } = useNavigation();
   const items = [
@@ -6675,7 +7290,7 @@ function MainMenu() {
     { label: "Update docs", value: "update-docs" },
     { label: "Exit", value: "exit" }
   ];
-  return /* @__PURE__ */ jsx27(Box25, { flexDirection: "column", padding: 1, children: /* @__PURE__ */ jsx27(
+  return /* @__PURE__ */ jsx28(Box26, { flexDirection: "column", padding: 1, children: /* @__PURE__ */ jsx28(
     SelectMenu,
     {
       items,
@@ -6730,16 +7345,16 @@ function MainMenu() {
 // src/tui/screens/ManageSkills.tsx
 import { rm as rm5 } from "fs/promises";
 import chalk4 from "chalk";
-import { Box as Box26, Text as Text23 } from "ink";
-import React22 from "react";
-import { jsx as jsx28, jsxs as jsxs23 } from "react/jsx-runtime";
+import { Box as Box27, Text as Text24 } from "ink";
+import React23 from "react";
+import { jsx as jsx29, jsxs as jsxs24 } from "react/jsx-runtime";
 function ManageScreen() {
   const { navigateTo, setFlash, setBackHandler } = useNavigation();
-  const [summaries, setSummaries] = React22.useState([]);
-  const [selectedAgent, setSelectedAgent] = React22.useState(null);
-  const [selectedSkills, setSelectedSkills] = React22.useState(null);
-  const [isRemoving, setIsRemoving] = React22.useState(false);
-  React22.useEffect(() => {
+  const [summaries, setSummaries] = React23.useState([]);
+  const [selectedAgent, setSelectedAgent] = React23.useState(null);
+  const [selectedSkills, setSelectedSkills] = React23.useState(null);
+  const [isRemoving, setIsRemoving] = React23.useState(false);
+  React23.useEffect(() => {
     let cancelled = false;
     const load = async () => {
       const installedAgents = await detectInstalledAgents();
@@ -6761,7 +7376,7 @@ function ManageScreen() {
       cancelled = true;
     };
   }, [setFlash]);
-  React22.useEffect(() => {
+  React23.useEffect(() => {
     if (isRemoving) {
       setBackHandler(() => true);
       return () => setBackHandler(null);
@@ -6784,16 +7399,16 @@ function ManageScreen() {
     return () => setBackHandler(null);
   }, [isRemoving, selectedSkills, selectedAgent, setBackHandler]);
   if (summaries.length === 0) {
-    return /* @__PURE__ */ jsxs23(Box26, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx28(Header, { title: "Remove skills" }),
-      /* @__PURE__ */ jsx28(Text23, { dimColor: true, children: "No skills found yet." }),
-      /* @__PURE__ */ jsx28(Text23, { dimColor: true, children: BACK_QUIT_HINT })
+    return /* @__PURE__ */ jsxs24(Box27, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx29(Header, { title: "Remove skills" }),
+      /* @__PURE__ */ jsx29(Text24, { dimColor: true, children: "No skills found yet." }),
+      /* @__PURE__ */ jsx29(Text24, { dimColor: true, children: BACK_QUIT_HINT })
     ] });
   }
   if (!selectedAgent) {
-    return /* @__PURE__ */ jsxs23(Box26, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx28(Header, { title: "Select agent" }),
-      /* @__PURE__ */ jsx28(
+    return /* @__PURE__ */ jsxs24(Box27, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx29(Header, { title: "Select agent" }),
+      /* @__PURE__ */ jsx29(
         SelectMenu,
         {
           items: summaries.map((summary) => ({
@@ -6810,9 +7425,9 @@ function ManageScreen() {
     ] });
   }
   if (!selectedSkills) {
-    return /* @__PURE__ */ jsxs23(Box26, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx28(Header, { title: `Remove skills (${agents[selectedAgent.agent].displayName})` }),
-      /* @__PURE__ */ jsx28(
+    return /* @__PURE__ */ jsxs24(Box27, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx29(Header, { title: `Remove skills (${agents[selectedAgent.agent].displayName})` }),
+      /* @__PURE__ */ jsx29(
         MultiSelect,
         {
           items: selectedAgent.skills.map((skill) => ({
@@ -6832,19 +7447,19 @@ function ManageScreen() {
     ] });
   }
   if (isRemoving) {
-    return /* @__PURE__ */ jsxs23(Box26, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx28(Header, { title: "Removing skills" }),
-      /* @__PURE__ */ jsx28(Text23, { children: "Removing selected skills..." })
+    return /* @__PURE__ */ jsxs24(Box27, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx29(Header, { title: "Removing skills" }),
+      /* @__PURE__ */ jsx29(Text24, { children: "Removing selected skills..." })
     ] });
   }
-  return /* @__PURE__ */ jsxs23(Box26, { flexDirection: "column", padding: 1, children: [
-    /* @__PURE__ */ jsx28(Header, { title: "Confirm removal" }),
-    selectedSkills.map((skill) => /* @__PURE__ */ jsxs23(Text23, { children: [
+  return /* @__PURE__ */ jsxs24(Box27, { flexDirection: "column", padding: 1, children: [
+    /* @__PURE__ */ jsx29(Header, { title: "Confirm removal" }),
+    selectedSkills.map((skill) => /* @__PURE__ */ jsxs24(Text24, { children: [
       formatSkillLabel(skill),
       " ",
       chalk4.dim(`(${skill.scope})`)
     ] }, `${skill.slug}-${skill.scope}`)),
-    /* @__PURE__ */ jsx28(
+    /* @__PURE__ */ jsx29(
       SelectMenu,
       {
         items: [
@@ -6907,14 +7522,14 @@ function formatSkillLabel(skill) {
 }
 
 // src/tui/screens/MarketplacePlugins.tsx
-import { Box as Box27, Text as Text24 } from "ink";
-import React23 from "react";
-import { jsx as jsx29, jsxs as jsxs24 } from "react/jsx-runtime";
+import { Box as Box28, Text as Text25 } from "ink";
+import React24 from "react";
+import { jsx as jsx30, jsxs as jsxs25 } from "react/jsx-runtime";
 function MarketplacePluginScreen() {
   const { invocation, addSkill, updateAddSkill, navigateTo, setFlash } = useNavigation();
   const plugins = addSkill.marketplace?.plugins ?? [];
   const options = invocation.options;
-  React23.useEffect(() => {
+  React24.useEffect(() => {
     if (plugins.length === 0) {
       return;
     }
@@ -6929,25 +7544,25 @@ function MarketplacePluginScreen() {
     }
   }, [plugins, options.yes, updateAddSkill, navigateTo, addSkill.marketplace]);
   if (plugins.length === 0) {
-    return /* @__PURE__ */ jsxs24(Box27, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx29(AddFlowHeader, { title: "Marketplace plugins" }),
-      /* @__PURE__ */ jsx29(Text24, { dimColor: true, children: "No plugins found." }),
-      /* @__PURE__ */ jsx29(Text24, { dimColor: true, children: BACK_QUIT_HINT })
+    return /* @__PURE__ */ jsxs25(Box28, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx30(AddFlowHeader, { title: "Marketplace plugins" }),
+      /* @__PURE__ */ jsx30(Text25, { dimColor: true, children: "No plugins found." }),
+      /* @__PURE__ */ jsx30(Text25, { dimColor: true, children: BACK_QUIT_HINT })
     ] });
   }
   if (options.list) {
-    return /* @__PURE__ */ jsxs24(Box27, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx29(AddFlowHeader, { title: `Marketplace plugins (${plugins.length})` }),
-      plugins.map((plugin) => /* @__PURE__ */ jsxs24(Box27, { flexDirection: "column", marginBottom: 1, children: [
-        /* @__PURE__ */ jsx29(Text24, { children: plugin.name }),
-        plugin.description ? /* @__PURE__ */ jsx29(Text24, { dimColor: true, children: plugin.description }) : null
+    return /* @__PURE__ */ jsxs25(Box28, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx30(AddFlowHeader, { title: `Marketplace plugins (${plugins.length})` }),
+      plugins.map((plugin) => /* @__PURE__ */ jsxs25(Box28, { flexDirection: "column", marginBottom: 1, children: [
+        /* @__PURE__ */ jsx30(Text25, { children: plugin.name }),
+        plugin.description ? /* @__PURE__ */ jsx30(Text25, { dimColor: true, children: plugin.description }) : null
       ] }, plugin.name)),
-      /* @__PURE__ */ jsx29(Text24, { dimColor: true, children: BACK_QUIT_HINT })
+      /* @__PURE__ */ jsx30(Text25, { dimColor: true, children: BACK_QUIT_HINT })
     ] });
   }
-  return /* @__PURE__ */ jsxs24(Box27, { flexDirection: "column", padding: 1, children: [
-    /* @__PURE__ */ jsx29(AddFlowHeader, { title: "Select plugins" }),
-    /* @__PURE__ */ jsx29(
+  return /* @__PURE__ */ jsxs25(Box28, { flexDirection: "column", padding: 1, children: [
+    /* @__PURE__ */ jsx30(AddFlowHeader, { title: "Select plugins" }),
+    /* @__PURE__ */ jsx30(
       MultiSelect,
       {
         items: plugins.map((plugin) => ({
@@ -6974,16 +7589,16 @@ function MarketplacePluginScreen() {
 }
 
 // src/tui/screens/MarketplaceSkills.tsx
-import { Box as Box28, Text as Text25 } from "ink";
-import React24 from "react";
+import { Box as Box29, Text as Text26 } from "ink";
+import React25 from "react";
 
 // src/flows/marketplace.ts
-import { dirname as dirname6, join as join17, relative as relative4 } from "path";
+import { dirname as dirname7, join as join17, relative as relative4 } from "path";
 function normalizeCandidatePath(basePath, candidate) {
   if (!candidate) return basePath;
   const cleaned = candidate.replace(/\\/g, "/");
   if (cleaned.endsWith(".md")) {
-    return join17(basePath, dirname6(cleaned));
+    return join17(basePath, dirname7(cleaned));
   }
   return join17(basePath, cleaned);
 }
@@ -7135,16 +7750,16 @@ function buildOriginMap(skills) {
 }
 
 // src/tui/screens/MarketplaceSkills.tsx
-import { jsx as jsx30, jsxs as jsxs25 } from "react/jsx-runtime";
+import { jsx as jsx31, jsxs as jsxs26 } from "react/jsx-runtime";
 function MarketplaceSkillScreen() {
   const { invocation, addSkill, updateAddSkill, navigateTo, setFlash } = useNavigation();
   const options = invocation.options;
-  const [status, setStatus] = React24.useState("loading");
-  const [error, setError] = React24.useState(null);
+  const [status, setStatus] = React25.useState("loading");
+  const [error, setError] = React25.useState(null);
   const spinner = useSpinnerFrame(status === "loading");
   const selectedPlugins = addSkill.marketplace?.selectedPlugins ?? [];
   const context = addSkill.marketplace?.context;
-  React24.useEffect(() => {
+  React25.useEffect(() => {
     let cancelled = false;
     const load = async () => {
       if (!context || selectedPlugins.length === 0) {
@@ -7208,27 +7823,27 @@ function MarketplaceSkillScreen() {
     options.yes
   ]);
   if (status === "loading") {
-    return /* @__PURE__ */ jsxs25(Box28, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx30(AddFlowHeader, { title: "Scanning marketplace" }),
-      /* @__PURE__ */ jsxs25(Text25, { children: [
+    return /* @__PURE__ */ jsxs26(Box29, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx31(AddFlowHeader, { title: "Scanning marketplace" }),
+      /* @__PURE__ */ jsxs26(Text26, { children: [
         spinner,
         " Discovering skills from plugins..."
       ] })
     ] });
   }
   if (status === "error") {
-    return /* @__PURE__ */ jsxs25(Box28, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx30(AddFlowHeader, { title: "Marketplace scan failed" }),
-      /* @__PURE__ */ jsx30(Text25, { color: "red", children: error }),
-      /* @__PURE__ */ jsx30(Text25, { dimColor: true, children: BACK_QUIT_HINT })
+    return /* @__PURE__ */ jsxs26(Box29, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx31(AddFlowHeader, { title: "Marketplace scan failed" }),
+      /* @__PURE__ */ jsx31(Text26, { color: "red", children: error }),
+      /* @__PURE__ */ jsx31(Text26, { dimColor: true, children: BACK_QUIT_HINT })
     ] });
   }
   const skills = addSkill.marketplace?.skills ?? [];
   const warnings = addSkill.marketplace?.warnings ?? [];
-  return /* @__PURE__ */ jsxs25(Box28, { flexDirection: "column", padding: 1, children: [
-    /* @__PURE__ */ jsx30(AddFlowHeader, { title: "Select skills" }),
-    warnings.length > 0 ? /* @__PURE__ */ jsx30(Box28, { flexDirection: "column", marginBottom: 1, children: warnings.map((warning) => /* @__PURE__ */ jsx30(Text25, { dimColor: true, children: warning }, warning)) }) : null,
-    /* @__PURE__ */ jsx30(
+  return /* @__PURE__ */ jsxs26(Box29, { flexDirection: "column", padding: 1, children: [
+    /* @__PURE__ */ jsx31(AddFlowHeader, { title: "Select skills" }),
+    warnings.length > 0 ? /* @__PURE__ */ jsx31(Box29, { flexDirection: "column", marginBottom: 1, children: warnings.map((warning) => /* @__PURE__ */ jsx31(Text26, { dimColor: true, children: warning }, warning)) }) : null,
+    /* @__PURE__ */ jsx31(
       MultiSelect,
       {
         items: skills.map((entry) => ({
@@ -7278,8 +7893,8 @@ function autoSelect2(skills, names, yes) {
 // src/tui/screens/ScanSkills.tsx
 import { rm as rm6 } from "fs/promises";
 import chalk5 from "chalk";
-import { Box as Box29, Text as Text26 } from "ink";
-import React25 from "react";
+import { Box as Box30, Text as Text27 } from "ink";
+import React26 from "react";
 
 // src/flows/scan-installed-skills.ts
 import { existsSync as existsSync7 } from "fs";
@@ -7502,17 +8117,17 @@ function removalTargetsForRow(row, cwd) {
 }
 
 // src/tui/screens/ScanSkills.tsx
-import { Fragment as Fragment3, jsx as jsx31, jsxs as jsxs26 } from "react/jsx-runtime";
+import { Fragment as Fragment3, jsx as jsx32, jsxs as jsxs27 } from "react/jsx-runtime";
 function ScanSkillsScreen() {
   const { setFlash, setBackHandler } = useNavigation();
-  const [view, setView] = React25.useState("loading");
-  const [error, setError] = React25.useState(null);
-  const [rows, setRows] = React25.useState([]);
-  const [progress, setProgress] = React25.useState(null);
-  const [selected, setSelected] = React25.useState(null);
-  const [removeTargets, setRemoveTargets] = React25.useState(null);
+  const [view, setView] = React26.useState("loading");
+  const [error, setError] = React26.useState(null);
+  const [rows, setRows] = React26.useState([]);
+  const [progress, setProgress] = React26.useState(null);
+  const [selected, setSelected] = React26.useState(null);
+  const [removeTargets, setRemoveTargets] = React26.useState(null);
   const spinner = useSpinnerFrame(view === "running" || view === "removing");
-  React25.useEffect(() => {
+  React26.useEffect(() => {
     let cancelled = false;
     const run = async () => {
       try {
@@ -7582,7 +8197,7 @@ function ScanSkillsScreen() {
       cancelled = true;
     };
   }, []);
-  React25.useEffect(() => {
+  React26.useEffect(() => {
     if (view === "actions" || view === "confirm-remove" || view === "removing") {
       setBackHandler(() => {
         if (view === "confirm-remove") {
@@ -7602,26 +8217,26 @@ function ScanSkillsScreen() {
     setBackHandler(null);
     return () => setBackHandler(null);
   }, [view, setBackHandler]);
-  const riskyRows = React25.useMemo(() => rows.filter(isRisky), [rows]);
-  const summary = React25.useMemo(() => scanSummary(rows), [rows]);
+  const riskyRows = React26.useMemo(() => rows.filter(isRisky), [rows]);
+  const summary = React26.useMemo(() => scanSummary(rows), [rows]);
   if (view === "empty") {
-    return /* @__PURE__ */ jsxs26(Box29, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx31(Header, { title: "Scan skills" }),
-      /* @__PURE__ */ jsx31(Text26, { dimColor: true, children: rows.length === 0 ? "No skills found to scan (project + global)." : `Scanned ${rows.length} skill${rows.length === 1 ? "" : "s"}. No risks found.` })
+    return /* @__PURE__ */ jsxs27(Box30, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx32(Header, { title: "Scan skills" }),
+      /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: rows.length === 0 ? "No skills found to scan (project + global)." : `Scanned ${rows.length} skill${rows.length === 1 ? "" : "s"}. No risks found.` })
     ] });
   }
   if (view === "loading") {
-    return /* @__PURE__ */ jsxs26(Box29, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx31(Header, { title: "Scan skills" }),
-      /* @__PURE__ */ jsx31(Text26, { dimColor: true, children: "Discovering skills..." })
+    return /* @__PURE__ */ jsxs27(Box30, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx32(Header, { title: "Scan skills" }),
+      /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: "Discovering skills..." })
     ] });
   }
   if (view === "running") {
     const completed = progress?.completed ?? 0;
     const total = progress?.total ?? 0;
-    return /* @__PURE__ */ jsxs26(Box29, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx31(Header, { title: "Scan skills" }),
-      /* @__PURE__ */ jsxs26(Text26, { children: [
+    return /* @__PURE__ */ jsxs27(Box30, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx32(Header, { title: "Scan skills" }),
+      /* @__PURE__ */ jsxs27(Text27, { children: [
         spinner,
         " Scanning ",
         completed,
@@ -7631,14 +8246,14 @@ function ScanSkillsScreen() {
         total === 1 ? "" : "s",
         "..."
       ] }),
-      /* @__PURE__ */ jsx31(Box29, { marginTop: 1, children: /* @__PURE__ */ jsx31(Text26, { dimColor: true, children: BACK_QUIT_HINT }) })
+      /* @__PURE__ */ jsx32(Box30, { marginTop: 1, children: /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: BACK_QUIT_HINT }) })
     ] });
   }
   if (view === "error") {
-    return /* @__PURE__ */ jsxs26(Box29, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx31(Header, { title: "Scan skills" }),
-      /* @__PURE__ */ jsx31(Text26, { color: "red", children: error ?? "Scan failed" }),
-      /* @__PURE__ */ jsx31(Box29, { marginTop: 1, children: /* @__PURE__ */ jsx31(Text26, { dimColor: true, children: BACK_QUIT_HINT }) })
+    return /* @__PURE__ */ jsxs27(Box30, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx32(Header, { title: "Scan skills" }),
+      /* @__PURE__ */ jsx32(Text27, { color: "red", children: error ?? "Scan failed" }),
+      /* @__PURE__ */ jsx32(Box30, { marginTop: 1, children: /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: BACK_QUIT_HINT }) })
     ] });
   }
   if (view === "actions" && selected) {
@@ -7649,27 +8264,27 @@ function ScanSkillsScreen() {
     const top = selected.topSignals?.slice(0, 10) ?? [];
     const locationLabels = selected.skill.locations.map((l) => l.label);
     const riskColor = level === "critical" || level === "high" ? "red" : level === "medium" ? "yellow" : level === "low" ? "green" : "gray";
-    return /* @__PURE__ */ jsxs26(Box29, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx31(Header, { title: "Skill risk details" }),
-      /* @__PURE__ */ jsxs26(Text26, { children: [
-        /* @__PURE__ */ jsx31(Text26, { bold: true, children: selected.skill.name }),
+    return /* @__PURE__ */ jsxs27(Box30, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx32(Header, { title: "Skill risk details" }),
+      /* @__PURE__ */ jsxs27(Text27, { children: [
+        /* @__PURE__ */ jsx32(Text27, { bold: true, children: selected.skill.name }),
         " ",
-        /* @__PURE__ */ jsx31(Text26, { dimColor: true, children: `(${selected.skill.slug})` })
+        /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: `(${selected.skill.slug})` })
       ] }),
-      selected.error ? /* @__PURE__ */ jsx31(Text26, { color: "red", children: selected.error }) : /* @__PURE__ */ jsxs26(Fragment3, { children: [
-        /* @__PURE__ */ jsxs26(Text26, { children: [
-          /* @__PURE__ */ jsx31(Text26, { dimColor: true, children: "Verdict:" }),
+      selected.error ? /* @__PURE__ */ jsx32(Text27, { color: "red", children: selected.error }) : /* @__PURE__ */ jsxs27(Fragment3, { children: [
+        /* @__PURE__ */ jsxs27(Text27, { children: [
+          /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: "Verdict:" }),
           " ",
-          /* @__PURE__ */ jsx31(Text26, { color: riskColor, children: verdict }),
-          /* @__PURE__ */ jsx31(Text26, { dimColor: true, children: ` \u2022 level=${level} score=${score} issues=${issues}` })
+          /* @__PURE__ */ jsx32(Text27, { color: riskColor, children: verdict }),
+          /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: ` \u2022 level=${level} score=${score} issues=${issues}` })
         ] }),
-        top.length > 0 ? /* @__PURE__ */ jsx31(Text26, { dimColor: true, children: `Top signals: ${top.join(", ")}` }) : null,
-        selected.ruleset ? /* @__PURE__ */ jsx31(Text26, { dimColor: true, children: `Ruleset: ${selected.ruleset}` }) : null
+        top.length > 0 ? /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: `Top signals: ${top.join(", ")}` }) : null,
+        selected.ruleset ? /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: `Ruleset: ${selected.ruleset}` }) : null
       ] }),
-      selected.skill.description ? /* @__PURE__ */ jsx31(Text26, { dimColor: true, children: selected.skill.description }) : null,
-      /* @__PURE__ */ jsx31(Text26, { dimColor: true, children: `Path: ${selected.skill.path}` }),
-      locationLabels.length > 0 ? /* @__PURE__ */ jsx31(Text26, { dimColor: true, children: `Locations: ${locationLabels.join(", ")}` }) : null,
-      /* @__PURE__ */ jsx31(Box29, { marginTop: 1, children: /* @__PURE__ */ jsx31(
+      selected.skill.description ? /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: selected.skill.description }) : null,
+      /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: `Path: ${selected.skill.path}` }),
+      locationLabels.length > 0 ? /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: `Locations: ${locationLabels.join(", ")}` }) : null,
+      /* @__PURE__ */ jsx32(Box30, { marginTop: 1, children: /* @__PURE__ */ jsx32(
         SelectMenu,
         {
           items: [
@@ -7695,17 +8310,17 @@ function ScanSkillsScreen() {
   }
   if (view === "confirm-remove" && selected && removeTargets) {
     const title = `Remove ${selected.skill.name}`;
-    return /* @__PURE__ */ jsxs26(Box29, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx31(Header, { title }),
-      /* @__PURE__ */ jsx31(Text26, { dimColor: true, children: "These locations will be removed:" }),
-      /* @__PURE__ */ jsx31(Box29, { flexDirection: "column", marginTop: 1, children: removeTargets.length === 0 ? /* @__PURE__ */ jsx31(Text26, { dimColor: true, children: "None found." }) : removeTargets.map((t) => /* @__PURE__ */ jsxs26(Text26, { children: [
-        /* @__PURE__ */ jsx31(Text26, { children: chalk5.red("\u2022") }),
+    return /* @__PURE__ */ jsxs27(Box30, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx32(Header, { title }),
+      /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: "These locations will be removed:" }),
+      /* @__PURE__ */ jsx32(Box30, { flexDirection: "column", marginTop: 1, children: removeTargets.length === 0 ? /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: "None found." }) : removeTargets.map((t) => /* @__PURE__ */ jsxs27(Text27, { children: [
+        /* @__PURE__ */ jsx32(Text27, { children: chalk5.red("\u2022") }),
         " ",
-        /* @__PURE__ */ jsx31(Text26, { dimColor: true, children: t.label }),
+        /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: t.label }),
         " ",
         t.path
       ] }, t.path)) }),
-      /* @__PURE__ */ jsx31(Box29, { marginTop: 1, children: /* @__PURE__ */ jsx31(
+      /* @__PURE__ */ jsx32(Box30, { marginTop: 1, children: /* @__PURE__ */ jsx32(
         SelectMenu,
         {
           items: [
@@ -7753,33 +8368,33 @@ function ScanSkillsScreen() {
     ] });
   }
   if (view === "removing") {
-    return /* @__PURE__ */ jsxs26(Box29, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx31(Header, { title: "Removing skill" }),
-      /* @__PURE__ */ jsxs26(Text26, { children: [
+    return /* @__PURE__ */ jsxs27(Box30, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx32(Header, { title: "Removing skill" }),
+      /* @__PURE__ */ jsxs27(Text27, { children: [
         spinner,
         " Removing..."
       ] }),
-      /* @__PURE__ */ jsx31(Box29, { marginTop: 1, children: /* @__PURE__ */ jsx31(Text26, { dimColor: true, children: BACK_QUIT_HINT }) })
+      /* @__PURE__ */ jsx32(Box30, { marginTop: 1, children: /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: BACK_QUIT_HINT }) })
     ] });
   }
   if (riskyRows.length === 0) {
-    return /* @__PURE__ */ jsxs26(Box29, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx31(Header, { title: "Scan skills" }),
-      /* @__PURE__ */ jsx31(Text26, { dimColor: true, children: rows.length === 0 ? "No skills found to scan (project + global)." : `Scanned ${rows.length} skill${rows.length === 1 ? "" : "s"}. No risks found.` })
+    return /* @__PURE__ */ jsxs27(Box30, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx32(Header, { title: "Scan skills" }),
+      /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: rows.length === 0 ? "No skills found to scan (project + global)." : `Scanned ${rows.length} skill${rows.length === 1 ? "" : "s"}. No risks found.` })
     ] });
   }
-  return /* @__PURE__ */ jsxs26(Box29, { flexDirection: "column", padding: 1, children: [
-    /* @__PURE__ */ jsx31(Header, { title: "Scan skills" }),
-    /* @__PURE__ */ jsxs26(Box29, { marginBottom: 1, flexDirection: "column", children: [
-      /* @__PURE__ */ jsx31(Text26, { dimColor: true, children: `Scanned ${plural(summary.total, "skill")}.` }),
-      /* @__PURE__ */ jsxs26(Text26, { children: [
-        /* @__PURE__ */ jsx31(Text26, { color: "red", children: plural(summary.high, "high risk") }),
-        /* @__PURE__ */ jsx31(Text26, { children: ", " }),
-        /* @__PURE__ */ jsx31(Text26, { color: "yellow", children: plural(summary.medium, "medium risk") }),
-        /* @__PURE__ */ jsx31(Text26, { children: " detected." })
+  return /* @__PURE__ */ jsxs27(Box30, { flexDirection: "column", padding: 1, children: [
+    /* @__PURE__ */ jsx32(Header, { title: "Scan skills" }),
+    /* @__PURE__ */ jsxs27(Box30, { marginBottom: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: `Scanned ${plural(summary.total, "skill")}.` }),
+      /* @__PURE__ */ jsxs27(Text27, { children: [
+        /* @__PURE__ */ jsx32(Text27, { color: "red", children: plural(summary.high, "high risk") }),
+        /* @__PURE__ */ jsx32(Text27, { children: ", " }),
+        /* @__PURE__ */ jsx32(Text27, { color: "yellow", children: plural(summary.medium, "medium risk") }),
+        /* @__PURE__ */ jsx32(Text27, { children: " detected." })
       ] })
     ] }),
-    /* @__PURE__ */ jsx31(
+    /* @__PURE__ */ jsx32(
       SingleSelect,
       {
         items: riskyRows.map((row) => ({
@@ -7800,8 +8415,8 @@ function ScanSkillsScreen() {
 }
 
 // src/tui/screens/UpdateDocs.tsx
-import { Box as Box30, Text as Text27 } from "ink";
-import React26 from "react";
+import { Box as Box31, Text as Text28 } from "ink";
+import React27 from "react";
 
 // src/docs/update.ts
 import { readdir as readdir6, stat as stat6 } from "fs/promises";
@@ -7867,12 +8482,12 @@ async function updateDocs(cwd = process.cwd()) {
 }
 
 // src/tui/screens/UpdateDocs.tsx
-import { jsx as jsx32, jsxs as jsxs27 } from "react/jsx-runtime";
+import { jsx as jsx33, jsxs as jsxs28 } from "react/jsx-runtime";
 function UpdateDocsScreen() {
-  const [status, setStatus] = React26.useState("running");
-  const [summary, setSummary] = React26.useState(null);
+  const [status, setStatus] = React27.useState("running");
+  const [summary, setSummary] = React27.useState(null);
   const spinner = useSpinnerFrame(status === "running");
-  React26.useEffect(() => {
+  React27.useEffect(() => {
     let cancelled = false;
     const run = async () => {
       const output2 = await updateDocs();
@@ -7890,65 +8505,180 @@ function UpdateDocsScreen() {
     };
   }, []);
   if (status === "running") {
-    return /* @__PURE__ */ jsxs27(Box30, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx32(Header, { title: "Updating docs" }),
-      /* @__PURE__ */ jsxs27(Text27, { children: [
+    return /* @__PURE__ */ jsxs28(Box31, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx33(Header, { title: "Updating docs" }),
+      /* @__PURE__ */ jsxs28(Text28, { children: [
         spinner,
         " Pulling latest docs..."
       ] })
     ] });
   }
   if (status === "empty") {
-    return /* @__PURE__ */ jsxs27(Box30, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx32(Header, { title: "Update docs" }),
-      /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: "No docs installed yet." }),
-      /* @__PURE__ */ jsx32(Box30, { marginTop: 1, children: /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: BACK_QUIT_HINT }) })
+    return /* @__PURE__ */ jsxs28(Box31, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx33(Header, { title: "Update docs" }),
+      /* @__PURE__ */ jsx33(Text28, { dimColor: true, children: "No docs installed yet." }),
+      /* @__PURE__ */ jsx33(Box31, { marginTop: 1, children: /* @__PURE__ */ jsx33(Text28, { dimColor: true, children: BACK_QUIT_HINT }) })
     ] });
   }
   if (!summary) {
-    return /* @__PURE__ */ jsxs27(Box30, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx32(Header, { title: "Update docs" }),
-      /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: "Nothing to update." })
+    return /* @__PURE__ */ jsxs28(Box31, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx33(Header, { title: "Update docs" }),
+      /* @__PURE__ */ jsx33(Text28, { dimColor: true, children: "Nothing to update." })
     ] });
   }
   const cwd = process.cwd();
-  return /* @__PURE__ */ jsxs27(Box30, { flexDirection: "column", padding: 1, children: [
-    /* @__PURE__ */ jsx32(Header, { title: "Docs update results" }),
-    summary.updated.length > 0 ? /* @__PURE__ */ jsxs27(Box30, { flexDirection: "column", marginBottom: 1, children: [
-      /* @__PURE__ */ jsx32(Text27, { children: `Updated ${summary.updated.length} repo${summary.updated.length !== 1 ? "s" : ""}` }),
-      summary.updated.map((item) => /* @__PURE__ */ jsxs27(Text27, { dimColor: true, children: [
+  return /* @__PURE__ */ jsxs28(Box31, { flexDirection: "column", padding: 1, children: [
+    /* @__PURE__ */ jsx33(Header, { title: "Docs update results" }),
+    summary.updated.length > 0 ? /* @__PURE__ */ jsxs28(Box31, { flexDirection: "column", marginBottom: 1, children: [
+      /* @__PURE__ */ jsx33(Text28, { children: `Updated ${summary.updated.length} repo${summary.updated.length !== 1 ? "s" : ""}` }),
+      summary.updated.map((item) => /* @__PURE__ */ jsxs28(Text28, { dimColor: true, children: [
         item.name,
         " \u2192 ",
         shortenPath(item.path, cwd)
       ] }, `updated-${item.name}`))
     ] }) : null,
-    summary.skipped.length > 0 ? /* @__PURE__ */ jsxs27(Box30, { flexDirection: "column", marginBottom: 1, children: [
-      /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: "Skipped" }),
-      summary.skipped.map((item) => /* @__PURE__ */ jsxs27(Text27, { dimColor: true, children: [
+    summary.skipped.length > 0 ? /* @__PURE__ */ jsxs28(Box31, { flexDirection: "column", marginBottom: 1, children: [
+      /* @__PURE__ */ jsx33(Text28, { dimColor: true, children: "Skipped" }),
+      summary.skipped.map((item) => /* @__PURE__ */ jsxs28(Text28, { dimColor: true, children: [
         item.name,
         item.message ? ` (${item.message})` : ""
       ] }, `skipped-${item.name}`))
     ] }) : null,
-    summary.failed.length > 0 ? /* @__PURE__ */ jsxs27(Box30, { flexDirection: "column", marginBottom: 1, children: [
-      /* @__PURE__ */ jsx32(Text27, { color: "red", children: "Failed" }),
-      summary.failed.map((item) => /* @__PURE__ */ jsxs27(Text27, { color: "red", children: [
+    summary.failed.length > 0 ? /* @__PURE__ */ jsxs28(Box31, { flexDirection: "column", marginBottom: 1, children: [
+      /* @__PURE__ */ jsx33(Text28, { color: "red", children: "Failed" }),
+      summary.failed.map((item) => /* @__PURE__ */ jsxs28(Text28, { color: "red", children: [
         item.name,
         item.message ? ` (${item.message})` : ""
       ] }, `failed-${item.name}`))
     ] }) : null,
-    /* @__PURE__ */ jsx32(Box30, { marginTop: 1, children: /* @__PURE__ */ jsx32(Text27, { dimColor: true, children: BACK_QUIT_HINT }) })
+    /* @__PURE__ */ jsx33(Box31, { marginTop: 1, children: /* @__PURE__ */ jsx33(Text28, { dimColor: true, children: BACK_QUIT_HINT }) })
   ] });
 }
 
 // src/tui/screens/UpdateSkills.tsx
 import chalk6 from "chalk";
-import { Box as Box31, Text as Text28, useInput as useInput6 } from "ink";
-import React27 from "react";
+import { Box as Box32, Text as Text29, useInput as useInput6 } from "ink";
+import React28 from "react";
 
 // src/flows/update-skills.ts
-import { mkdir as mkdir7, mkdtemp as mkdtemp5, rm as rm7, stat as stat7, writeFile as writeFile5 } from "fs/promises";
+import { randomUUID } from "crypto";
+import { cp as cp2, mkdir as mkdir8, mkdtemp as mkdtemp6, rm as rm7, stat as stat7, writeFile as writeFile6 } from "fs/promises";
+import { homedir as homedir5, tmpdir as tmpdir7 } from "os";
+import { dirname as dirname9, join as join22 } from "path";
+
+// src/flows/update-well-known-authed.ts
+import { mkdir as mkdir7, mkdtemp as mkdtemp5, writeFile as writeFile5 } from "fs/promises";
 import { tmpdir as tmpdir6 } from "os";
-import { dirname as dirname7, join as join21 } from "path";
+import { dirname as dirname8, join as join21 } from "path";
+function resolveAuthedIndexAuth(entry, endpoint) {
+  if (entry.auth?.tokenHeader) {
+    return { tokenHeader: entry.auth.tokenHeader, tokenPrefix: entry.auth.tokenPrefix ?? "" };
+  }
+  const spec = endpoint === "content" ? entry.content : entry.verify;
+  const tokenHeader = spec?.tokenHeader;
+  const tokenPrefix = spec?.tokenPrefix;
+  if (!tokenHeader) {
+    throw new Error(
+      "Invalid well-known index entry: missing auth.tokenHeader (or legacy tokenHeader)."
+    );
+  }
+  return { tokenHeader, tokenPrefix: tokenPrefix ?? "" };
+}
+async function fetchWellKnownAuthedManifest(sourceUrl, licenseKey) {
+  const result = await wellKnownProvider.fetchIndex(sourceUrl);
+  if (!result) return null;
+  const entry = result.index.skills.find(
+    (e) => e && typeof e === "object" && "content" in e && !("files" in e)
+  );
+  if (!entry?.content?.endpoint) return null;
+  const contentAuth = resolveAuthedIndexAuth(entry, "content");
+  const tokenValue = `${contentAuth.tokenPrefix}${licenseKey}`;
+  if (entry.verify?.endpoint) {
+    const verifyAuth = resolveAuthedIndexAuth(entry, "verify");
+    const verifyRes = await fetch(entry.verify.endpoint, {
+      method: entry.verify.method,
+      headers: { [verifyAuth.tokenHeader]: tokenValue }
+    });
+    if (!verifyRes.ok) {
+      const text = await verifyRes.text().catch(() => "");
+      let msg = text;
+      try {
+        const parsed = JSON.parse(text);
+        if (typeof parsed?.error === "string" && parsed.error) {
+          msg = parsed.error;
+        }
+      } catch {
+      }
+      throw new Error(msg || `License verification failed (${verifyRes.status}).`);
+    }
+  }
+  const res = await fetch(entry.content.endpoint, {
+    method: entry.content.method,
+    headers: { [contentAuth.tokenHeader]: tokenValue }
+  });
+  if (!res.ok) {
+    const text = await res.text().catch(() => "");
+    throw new Error(text || `Unable to fetch skill content (${res.status}).`);
+  }
+  const json = await res.json();
+  if (json && typeof json === "object" && "success" in json) {
+    const wrapped = json;
+    if (!wrapped.success) {
+      throw new Error(wrapped.error || "Unable to fetch skill content.");
+    }
+    return wrapped.data;
+  }
+  return json;
+}
+async function updateFromWellKnownAuthed(target, helpers) {
+  if (target.entry.sourceType !== "well-known") return false;
+  if (!target.entry.licenseKey) return false;
+  const sourceUrl = target.entry.sourceUrl || target.entry.source;
+  const manifest = await fetchWellKnownAuthedManifest(sourceUrl, target.entry.licenseKey);
+  if (!manifest?.files || typeof manifest.files !== "object") {
+    return false;
+  }
+  if (manifest.contentHash) {
+    target.latestHash = manifest.contentHash;
+    if (target.entry.skillFolderHash && target.entry.skillFolderHash === manifest.contentHash) {
+      target.status = "up-to-date";
+      return false;
+    }
+  }
+  const tempDir = await mkdtemp5(join21(tmpdir6(), "playbooks-well-known-"));
+  registerTempDir(tempDir);
+  try {
+    await mkdir7(tempDir, { recursive: true });
+    for (const [filePath, fileContent] of Object.entries(manifest.files)) {
+      const targetPath = join21(tempDir, filePath);
+      if (!isPathSafe(tempDir, targetPath)) continue;
+      await mkdir7(dirname8(targetPath), { recursive: true });
+      await writeFile5(targetPath, fileContent, "utf-8");
+    }
+    let sourceDir = null;
+    if (target.entry.skillPath) {
+      const normalized = target.entry.skillPath.replace(/\\/g, "/").replace(/^\/+/, "");
+      const folder = normalized.toLowerCase().endsWith("skill.md") ? dirname8(normalized) : normalized;
+      const candidate = join21(tempDir, folder);
+      if (await helpers.pathExists(join21(candidate, "SKILL.md"))) {
+        sourceDir = candidate;
+      }
+    }
+    if (!sourceDir) {
+      const discovered = await discoverSkills(tempDir);
+      const match = discovered.find((s) => s.name === target.name) ?? null;
+      sourceDir = match ? match.path : null;
+    }
+    if (!sourceDir) {
+      return false;
+    }
+    return await helpers.applyUpdateFromDir(target.name, target.scope, sourceDir);
+  } finally {
+    await cleanupTempDir(tempDir);
+  }
+}
+
+// src/flows/update-skills.ts
 var repoTreeCache = /* @__PURE__ */ new Map();
 function normalizeSkillFolderPath(skillPath) {
   let folderPath = skillPath;
@@ -8016,6 +8746,23 @@ async function pathExists3(path) {
     return false;
   }
 }
+function getBackupRoot(scope) {
+  const baseDir = scope === "global" ? homedir5() : process.cwd();
+  return join22(baseDir, ".playbooks", "backups");
+}
+async function backupDirIfExists(input) {
+  if (process.env.PLAYBOOKS_DISABLE_BACKUPS === "1") return;
+  try {
+    if (!await pathExists3(input.sourcePath)) return;
+    const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+    const safeSkillName = sanitizeSkillName(input.skillName);
+    const backupBase = join22(getBackupRoot(input.scope), stamp, input.scope, safeSkillName);
+    const dest = join22(backupBase, `${input.label}-${randomUUID()}`);
+    await mkdir8(dirname9(dest), { recursive: true });
+    await cp2(input.sourcePath, dest, { recursive: true, dereference: false });
+  } catch {
+  }
+}
 async function applyUpdateFromDir(skillName, scope, sourceDir) {
   const canonicalPath = getCanonicalPath(skillName, { global: scope === "global" });
   const installs = await findSkillInstallations(skillName, scope);
@@ -8025,12 +8772,14 @@ async function applyUpdateFromDir(skillName, scope, sourceDir) {
     return false;
   }
   if (canonicalExists || hasSymlink) {
+    await backupDirIfExists({ scope, skillName, sourcePath: canonicalPath, label: "canonical" });
     await rm7(canonicalPath, { recursive: true, force: true });
     await copySkillDirectory(sourceDir, canonicalPath);
   }
   const updateTargets = installs.filter((i) => !i.isSymlink && i.path !== canonicalPath);
   if (updateTargets.length > 0) {
     for (const install of updateTargets) {
+      await backupDirIfExists({ scope, skillName, sourcePath: install.path, label: "install" });
       await rm7(install.path, { recursive: true, force: true });
       await copySkillDirectory(sourceDir, install.path);
     }
@@ -8043,8 +8792,8 @@ async function updateFromRepo(target) {
     let sourceDir = null;
     if (target.entry.skillPath) {
       const normalizedPath = target.entry.skillPath.replace(/\\/g, "/");
-      const skillDir = join21(tempDir, dirname7(normalizedPath));
-      if (await pathExists3(join21(skillDir, "SKILL.md"))) {
+      const skillDir = join22(tempDir, dirname9(normalizedPath));
+      if (await pathExists3(join22(skillDir, "SKILL.md"))) {
         sourceDir = skillDir;
       }
     }
@@ -8085,21 +8834,21 @@ async function updateFromRemote(target) {
   if (!content && !files) {
     return false;
   }
-  const tempDir = await mkdtemp5(join21(tmpdir6(), "playbooks-skill-"));
+  const tempDir = await mkdtemp6(join22(tmpdir7(), "playbooks-skill-"));
   registerTempDir(tempDir);
   try {
-    await mkdir7(tempDir, { recursive: true });
+    await mkdir8(tempDir, { recursive: true });
     if (files) {
       for (const [filePath, fileContent] of files.entries()) {
-        const targetPath = join21(tempDir, filePath);
+        const targetPath = join22(tempDir, filePath);
         if (!isPathSafe(tempDir, targetPath)) {
           continue;
         }
-        await mkdir7(dirname7(targetPath), { recursive: true });
-        await writeFile5(targetPath, fileContent, "utf-8");
+        await mkdir8(dirname9(targetPath), { recursive: true });
+        await writeFile6(targetPath, fileContent, "utf-8");
       }
     } else if (content) {
-      await writeFile5(join21(tempDir, "SKILL.md"), content, "utf-8");
+      await writeFile6(join22(tempDir, "SKILL.md"), content, "utf-8");
     }
     return await applyUpdateFromDir(target.name, target.scope, tempDir);
   } finally {
@@ -8107,6 +8856,10 @@ async function updateFromRemote(target) {
   }
 }
 async function updateTargetSkill(target) {
+  if (target.entry.sourceType === "well-known" && target.entry.licenseKey) {
+    const updated = await updateFromWellKnownAuthed(target, { applyUpdateFromDir, pathExists: pathExists3 });
+    if (updated) return true;
+  }
   if (target.entry.sourceType === "github" || target.entry.sourceType === "gitlab" || target.entry.sourceType === "git") {
     return await updateFromRepo(target);
   }
@@ -8196,15 +8949,15 @@ async function updateSkills(targets) {
 }
 
 // src/tui/screens/UpdateSkills.tsx
-import { jsx as jsx33, jsxs as jsxs28 } from "react/jsx-runtime";
+import { jsx as jsx34, jsxs as jsxs29 } from "react/jsx-runtime";
 function UpdateScreen() {
   const { invocation, navigateTo, setFlash } = useNavigation();
-  const [status, setStatus] = React27.useState("loading");
-  const [targets, setTargets] = React27.useState([]);
-  const [selected, setSelected] = React27.useState([]);
-  const [summary, setSummary] = React27.useState(null);
-  const [showOnlyNeeds, setShowOnlyNeeds] = React27.useState(false);
-  const [rateLimited, setRateLimited] = React27.useState(false);
+  const [status, setStatus] = React28.useState("loading");
+  const [targets, setTargets] = React28.useState([]);
+  const [selected, setSelected] = React28.useState([]);
+  const [summary, setSummary] = React28.useState(null);
+  const [showOnlyNeeds, setShowOnlyNeeds] = React28.useState(false);
+  const [rateLimited, setRateLimited] = React28.useState(false);
   const spinner = useSpinnerFrame(status === "running");
   useInput6((input) => {
     if (status !== "select") return;
@@ -8212,7 +8965,7 @@ function UpdateScreen() {
       setShowOnlyNeeds((prev) => !prev);
     }
   });
-  React27.useEffect(() => {
+  React28.useEffect(() => {
     let cancelled = false;
     const load = async () => {
       const scopes = resolveScopes(invocation.options);
@@ -8254,7 +9007,7 @@ function UpdateScreen() {
       cancelled = true;
     };
   }, [invocation, setFlash]);
-  React27.useEffect(() => {
+  React28.useEffect(() => {
     let cancelled = false;
     const run = async () => {
       if (status !== "running" || selected.length === 0) return;
@@ -8269,16 +9022,16 @@ function UpdateScreen() {
     };
   }, [status, selected]);
   if (status === "empty") {
-    return /* @__PURE__ */ jsxs28(Box31, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx33(Header, { title: "Update skills" }),
-      /* @__PURE__ */ jsx33(Text28, { dimColor: true, children: "No tracked skills to update yet." }),
-      /* @__PURE__ */ jsx33(Text28, { dimColor: true, children: "Re-install a skill once to enable updates." })
+    return /* @__PURE__ */ jsxs29(Box32, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx34(Header, { title: "Update skills" }),
+      /* @__PURE__ */ jsx34(Text29, { dimColor: true, children: "No tracked skills to update yet." }),
+      /* @__PURE__ */ jsx34(Text29, { dimColor: true, children: "Re-install a skill once to enable updates." })
     ] });
   }
   if (status === "loading") {
-    return /* @__PURE__ */ jsxs28(Box31, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx33(Header, { title: "Update skills" }),
-      /* @__PURE__ */ jsx33(Text28, { dimColor: true, children: "Loading tracked skills..." })
+    return /* @__PURE__ */ jsxs29(Box32, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx34(Header, { title: "Update skills" }),
+      /* @__PURE__ */ jsx34(Text29, { dimColor: true, children: "Loading tracked skills..." })
     ] });
   }
   if (status === "select") {
@@ -8286,17 +9039,17 @@ function UpdateScreen() {
     const defaults = selected;
     const hint = showOnlyNeeds ? UPDATE_HINT_NEEDS_ONLY : UPDATE_HINT_ALL;
     if (showOnlyNeeds && visibleTargets.length === 0) {
-      return /* @__PURE__ */ jsxs28(Box31, { flexDirection: "column", padding: 1, children: [
-        /* @__PURE__ */ jsx33(Header, { title: "Select skills to update" }),
-        /* @__PURE__ */ jsx33(Text28, { dimColor: true, children: "No updates found." }),
-        rateLimited ? /* @__PURE__ */ jsx33(Text28, { dimColor: true, children: "GitHub rate limit hit. Some skills may be marked unknown." }) : null,
-        /* @__PURE__ */ jsx33(Box31, { marginTop: 1, children: /* @__PURE__ */ jsx33(Text28, { dimColor: true, children: UPDATE_EMPTY_HINT }) })
+      return /* @__PURE__ */ jsxs29(Box32, { flexDirection: "column", padding: 1, children: [
+        /* @__PURE__ */ jsx34(Header, { title: "Select skills to update" }),
+        /* @__PURE__ */ jsx34(Text29, { dimColor: true, children: "No updates found." }),
+        rateLimited ? /* @__PURE__ */ jsx34(Text29, { dimColor: true, children: "GitHub rate limit hit. Some skills may be marked unknown." }) : null,
+        /* @__PURE__ */ jsx34(Box32, { marginTop: 1, children: /* @__PURE__ */ jsx34(Text29, { dimColor: true, children: UPDATE_EMPTY_HINT }) })
       ] });
     }
-    return /* @__PURE__ */ jsxs28(Box31, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx33(Header, { title: "Select skills to update" }),
-      rateLimited ? /* @__PURE__ */ jsx33(Text28, { dimColor: true, children: "GitHub rate limit hit. Some skills marked unknown." }) : null,
-      /* @__PURE__ */ jsx33(
+    return /* @__PURE__ */ jsxs29(Box32, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx34(Header, { title: "Select skills to update" }),
+      rateLimited ? /* @__PURE__ */ jsx34(Text29, { dimColor: true, children: "GitHub rate limit hit. Some skills marked unknown." }) : null,
+      /* @__PURE__ */ jsx34(
         MultiSelect,
         {
           items: visibleTargets.map((target) => ({
@@ -8319,9 +9072,9 @@ function UpdateScreen() {
     ] });
   }
   if (status === "running") {
-    return /* @__PURE__ */ jsxs28(Box31, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx33(Header, { title: "Updating skills" }),
-      /* @__PURE__ */ jsxs28(Text28, { children: [
+    return /* @__PURE__ */ jsxs29(Box32, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx34(Header, { title: "Updating skills" }),
+      /* @__PURE__ */ jsxs29(Text29, { children: [
         spinner,
         " Updating ",
         selected.length,
@@ -8332,17 +9085,17 @@ function UpdateScreen() {
     ] });
   }
   if (!summary) {
-    return /* @__PURE__ */ jsxs28(Box31, { flexDirection: "column", padding: 1, children: [
-      /* @__PURE__ */ jsx33(Header, { title: "Update skills" }),
-      /* @__PURE__ */ jsx33(Text28, { dimColor: true, children: "Nothing to update." })
+    return /* @__PURE__ */ jsxs29(Box32, { flexDirection: "column", padding: 1, children: [
+      /* @__PURE__ */ jsx34(Header, { title: "Update skills" }),
+      /* @__PURE__ */ jsx34(Text29, { dimColor: true, children: "Nothing to update." })
     ] });
   }
-  return /* @__PURE__ */ jsxs28(Box31, { flexDirection: "column", padding: 1, children: [
-    /* @__PURE__ */ jsx33(Header, { title: "Update results" }),
-    summary.updated.length > 0 ? /* @__PURE__ */ jsx33(Text28, { children: `Updated ${summary.updated.length} skill${summary.updated.length !== 1 ? "s" : ""}` }) : null,
-    summary.skipped.length > 0 ? /* @__PURE__ */ jsx33(Text28, { dimColor: true, children: `Skipped: ${summary.skipped.map(formatTargetLabel).join(", ")}` }) : null,
-    summary.failed.length > 0 ? /* @__PURE__ */ jsx33(Text28, { color: "red", children: `Failed: ${summary.failed.map(formatTargetLabel).join(", ")}` }) : null,
-    /* @__PURE__ */ jsx33(Box31, { marginTop: 1, children: /* @__PURE__ */ jsx33(Text28, { dimColor: true, children: BACK_QUIT_HINT }) })
+  return /* @__PURE__ */ jsxs29(Box32, { flexDirection: "column", padding: 1, children: [
+    /* @__PURE__ */ jsx34(Header, { title: "Update results" }),
+    summary.updated.length > 0 ? /* @__PURE__ */ jsx34(Text29, { children: `Updated ${summary.updated.length} skill${summary.updated.length !== 1 ? "s" : ""}` }) : null,
+    summary.skipped.length > 0 ? /* @__PURE__ */ jsx34(Text29, { dimColor: true, children: `Skipped: ${summary.skipped.map(formatTargetLabel).join(", ")}` }) : null,
+    summary.failed.length > 0 ? /* @__PURE__ */ jsx34(Text29, { color: "red", children: `Failed: ${summary.failed.map(formatTargetLabel).join(", ")}` }) : null,
+    /* @__PURE__ */ jsx34(Box32, { marginTop: 1, children: /* @__PURE__ */ jsx34(Text29, { dimColor: true, children: BACK_QUIT_HINT }) })
   ] });
 }
 function resolveScopes(options) {
@@ -8371,61 +9124,63 @@ function sortTargets(a, b) {
 }
 
 // src/tui/ScreenRouter.tsx
-import { Fragment as Fragment4, jsx as jsx34, jsxs as jsxs29 } from "react/jsx-runtime";
+import { Fragment as Fragment4, jsx as jsx35, jsxs as jsxs30 } from "react/jsx-runtime";
 function ScreenRouter() {
   const { screen } = useNavigation();
   const render2 = (s) => {
     switch (s) {
       case "main":
-        return /* @__PURE__ */ jsx34(MainMenu, {});
+        return /* @__PURE__ */ jsx35(MainMenu, {});
       case "add-source":
-        return /* @__PURE__ */ jsx34(AddSourceScreen, {});
+        return /* @__PURE__ */ jsx35(AddSourceScreen, {});
       case "add-docs":
-        return /* @__PURE__ */ jsx34(AddDocsScreen, {});
+        return /* @__PURE__ */ jsx35(AddDocsScreen, {});
       case "add-marketplace-plugins":
-        return /* @__PURE__ */ jsx34(MarketplacePluginScreen, {});
+        return /* @__PURE__ */ jsx35(MarketplacePluginScreen, {});
       case "add-marketplace-skills":
-        return /* @__PURE__ */ jsx34(MarketplaceSkillScreen, {});
+        return /* @__PURE__ */ jsx35(MarketplaceSkillScreen, {});
       case "find-skill-search":
-        return /* @__PURE__ */ jsx34(FindSkillSearchScreen, {});
+        return /* @__PURE__ */ jsx35(FindSkillSearchScreen, {});
       case "find-skill-results":
-        return /* @__PURE__ */ jsx34(FindSkillResultsScreen, {});
+        return /* @__PURE__ */ jsx35(FindSkillResultsScreen, {});
       case "scan-skills":
-        return /* @__PURE__ */ jsx34(ScanSkillsScreen, {});
+        return /* @__PURE__ */ jsx35(ScanSkillsScreen, {});
       case "get-url":
-        return /* @__PURE__ */ jsx34(GetUrlScreen, {});
+        return /* @__PURE__ */ jsx35(GetUrlScreen, {});
       case "add-skill-select":
-        return /* @__PURE__ */ jsx34(AddSkillSelectScreen, {});
+        return /* @__PURE__ */ jsx35(AddSkillSelectScreen, {});
+      case "add-license-key":
+        return /* @__PURE__ */ jsx35(AddLicenseKeyScreen, {});
       case "add-security-scan":
-        return /* @__PURE__ */ jsx34(AddSecurityScanScreen, {});
+        return /* @__PURE__ */ jsx35(AddSecurityScanScreen, {});
       case "add-targets":
-        return /* @__PURE__ */ jsx34(AddTargetsScreen, {});
+        return /* @__PURE__ */ jsx35(AddTargetsScreen, {});
       case "add-scope":
-        return /* @__PURE__ */ jsx34(AddScopeScreen, {});
+        return /* @__PURE__ */ jsx35(AddScopeScreen, {});
       case "add-mode":
-        return /* @__PURE__ */ jsx34(AddModeScreen, {});
+        return /* @__PURE__ */ jsx35(AddModeScreen, {});
       case "add-confirm":
-        return /* @__PURE__ */ jsx34(AddConfirmScreen, {});
+        return /* @__PURE__ */ jsx35(AddConfirmScreen, {});
       case "add-install":
-        return /* @__PURE__ */ jsx34(AddInstallScreen, {});
+        return /* @__PURE__ */ jsx35(AddInstallScreen, {});
       case "add-result":
-        return /* @__PURE__ */ jsx34(AddResultScreen, {});
+        return /* @__PURE__ */ jsx35(AddResultScreen, {});
       case "list":
-        return /* @__PURE__ */ jsx34(ListScreen, {});
+        return /* @__PURE__ */ jsx35(ListScreen, {});
       case "manage":
-        return /* @__PURE__ */ jsx34(ManageScreen, {});
+        return /* @__PURE__ */ jsx35(ManageScreen, {});
       case "update":
-        return /* @__PURE__ */ jsx34(UpdateScreen, {});
+        return /* @__PURE__ */ jsx35(UpdateScreen, {});
       case "update-docs":
-        return /* @__PURE__ */ jsx34(UpdateDocsScreen, {});
+        return /* @__PURE__ */ jsx35(UpdateDocsScreen, {});
       default:
         return null;
     }
   };
-  return /* @__PURE__ */ jsxs29(Fragment4, { children: [
-    /* @__PURE__ */ jsx34(BrandHeader, {}),
+  return /* @__PURE__ */ jsxs30(Fragment4, { children: [
+    /* @__PURE__ */ jsx35(BrandHeader, {}),
     render2(screen),
-    /* @__PURE__ */ jsx34(FlashBar, { align: "center" })
+    /* @__PURE__ */ jsx35(FlashBar, { align: "center" })
   ] });
 }
 
@@ -8505,14 +9260,14 @@ function useKeyboardShortcuts() {
 }
 
 // src/tui/App.tsx
-import { jsx as jsx35 } from "react/jsx-runtime";
+import { jsx as jsx36 } from "react/jsx-runtime";
 function AppRoot() {
   useKeyboardShortcuts();
-  return /* @__PURE__ */ jsx35(ScreenRouter, {});
+  return /* @__PURE__ */ jsx36(ScreenRouter, {});
 }
 function runApp(initialInvocation, initialScreen) {
   const { waitUntilExit } = render(
-    /* @__PURE__ */ jsx35(NavigationProvider, { initialInvocation, initialScreen, children: /* @__PURE__ */ jsx35(AppRoot, {}) })
+    /* @__PURE__ */ jsx36(NavigationProvider, { initialInvocation, initialScreen, children: /* @__PURE__ */ jsx36(AppRoot, {}) })
   );
   return waitUntilExit();
 }
@@ -8526,7 +9281,7 @@ program.addHelpCommand();
 var applyAddSkillOptions = (cmd) => cmd.option("-g, --global", "Install globally (user-level) instead of project-level").option(
   "-a, --agent <agents...>",
   "Target agents to install to (claude-code, codex, cursor, opencode, and more)"
-).option("-s, --skill <skills...>", "Install specific skills by name").option("-l, --list", "List available skills in the repository without installing").option("-y, --yes", "Skip confirmation prompts").option("--all", "Install all skills to all agents without prompts (implies -y -g)");
+).option("-s, --skill <skills...>", "Install specific skills by name").option("-l, --list", "List available skills in the repository without installing").option("-y, --yes", "Skip confirmation prompts").option("--license-key <key>", "License key for paid/private skills").option("--all", "Install all skills to all agents without prompts (implies -y -g)");
 function normalizeOptions(options) {
   const normalized = { ...options };
   if (normalized.all) {