feat: mac node exec policy + remote skills hot reload

src/config/schema.ts

@@ -120,6 +120,8 @@ const FIELD_LABELS: Record<string, string> = {
   "gateway.http.endpoints.chatCompletions.enabled": "OpenAI Chat Completions Endpoint",
   "gateway.reload.mode": "Config Reload Mode",
   "gateway.reload.debounceMs": "Config Reload Debounce (ms)",
+  "skills.load.watch": "Watch Skills",
+  "skills.load.watchDebounceMs": "Skills Watch Debounce (ms)",
   "agents.defaults.workspace": "Workspace",
   "agents.defaults.bootstrapMaxChars": "Bootstrap Max Chars",
   "agents.defaults.memorySearch": "Memory Search",

src/config/sessions/types.ts

@@ -95,6 +95,7 @@ export type SessionSkillSnapshot = {
   prompt: string;
   skills: Array<{ name: string; primaryEnv?: string }>;
   resolvedSkills?: Skill[];
+  version?: number;
 };
 
 export type SessionSystemPromptReport = {

src/config/types.skills.ts

@@ -11,6 +11,10 @@ export type SkillsLoadConfig = {
    * Each directory should contain skill subfolders with `SKILL.md`.
    */
   extraDirs?: string[];
+  /** Watch skill folders for changes and refresh the skills snapshot. */
+  watch?: boolean;
+  /** Debounce for the skills watcher (ms). */
+  watchDebounceMs?: number;
 };
 
 export type SkillsInstallConfig = {

src/config/zod-schema.ts

@@ -270,6 +270,8 @@ export const ClawdbotSchema = z
         load: z
           .object({
             extraDirs: z.array(z.string()).optional(),
+            watch: z.boolean().optional(),
+            watchDebounceMs: z.number().int().min(0).optional(),
           })
           .optional(),
         install: z