@ccoalm/ccl-skills 0.18.1 → 0.18.3

package/dist/assets/release.json

@@ -1,8 +1,8 @@
 {
   "schema": 1,
   "npmPackage": "@ccoalm/ccl-skills",
-  "version": "0.18.1",
-  "sourceCommit": "40dc287d2a786256bf37242458b2ec57853171b7",
+  "version": "0.18.3",
+  "sourceCommit": "29c5c6b6d0e35572de2c269ef75b3680d0b9da35",
   "sourceState": "clean",
   "files": [
     {
@@ -40,9 +40,14 @@
       "sha256": "5a06ab4ac6a633be7ebb542de579a1d2153f6cf5bbe1551702a5e3d923642181",
       "mode": 420
     },
+    {
+      "path": "marketplace/plugins/ccl-skills/agent-context/session-policy.md",
+      "sha256": "a54a3a1bde6a3e0691995865250d2b021eeb22ccebfa5f99a31b9447325eda55",
+      "mode": 420
+    },
     {
       "path": "marketplace/plugins/ccl-skills/agent-context/session-start.md",
-      "sha256": "48d6589066a033b3b24429292e18f331859f42b8fc608f07ed64244f0d02c95c",
+      "sha256": "ea0109f642fb331250e64bc28691439250575751165334f2b0175a9e3c286175",
       "mode": 420
     },
     {
@@ -57,32 +62,37 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/hooks/guard-delegation-owner.sh",
-      "sha256": "244e5f691e893f90f336bbdb401258105cb055ee03f05dd487b88241180779c0",
+      "sha256": "8f5350f4a7a57edc5e9f57fb08ab211955007902e79979b6f7cc24e56e5a3695",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/hooks/guard-edit-isolation.sh",
-      "sha256": "edb2f15cd81dcecb1abf872d5e8c2ba078ce626301b898d63774a7189ac90f0d",
+      "sha256": "5ef7a68518bc72d1640a395db1d7c12112e24e59e6fb5b9a6dae212ba7a34272",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/hooks/guard-merge-authorization.sh",
-      "sha256": "f61d736fd61de507539584a9d7a8d4d696f7e0c56b5de096c3691b0218f1b5dc",
+      "sha256": "d12e8c81122babe65d12cca2576b0e2b73b40f4e82090ef31de26bbc893a1cba",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/hooks/hooks.json",
-      "sha256": "a9bfda0c4f36d762a171684720745418640da90f549ce0e844fca9749b229c6d",
+      "sha256": "cf0749d6ed798494e622a27968207bfe3c5a465396aa261ffda6a492bc4294e2",
+      "mode": 420
+    },
+    {
+      "path": "marketplace/plugins/ccl-skills/hooks/host-input.py",
+      "sha256": "546abe258e25d8103f42259a58b61142418d6c4fd1696f79cfef0fe3876a90c6",
       "mode": 420
     },
     {
       "path": "marketplace/plugins/ccl-skills/hooks/merge-authorization-prompt.sh",
-      "sha256": "295bbf8dbeab5c3241831ca9442a92cd4b60d10315aae6aa98ca99d25f14ab03",
+      "sha256": "aba3a7fc3e6411da710dcc027f965f9042bc8ef72d74fccce0f56b527711f0a8",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/hooks/owner-dispatch-guard.sh",
-      "sha256": "6a3aef4fff6ebe724c802fe18de79198178acd9f5fac6ab6815bd0efbc5504af",
+      "sha256": "5d9ff755de829663f69e2f7dcf4351af9767f540a6c193458fd562eec0ee2d44",
       "mode": 493
     },
     {
@@ -90,6 +100,11 @@
       "sha256": "f36d6fe6c8b7c43f43301a2a3cf0f6756d4ca2e942ed8495ccd5940f2ce519bc",
       "mode": 493
     },
+    {
+      "path": "marketplace/plugins/ccl-skills/hooks/proposed-next-stop.sh",
+      "sha256": "150d6a6a2b87dec330b8affaba5497ecf40483304d52c503d8ebfe6a5e51f2f8",
+      "mode": 493
+    },
     {
       "path": "marketplace/plugins/ccl-skills/hooks/remind-post-merge-cleanup.sh",
       "sha256": "c912bd8bbb9afe15b4ed3ac546175ecb9185752087a818d1426ffecd68ffb623",
@@ -117,12 +132,22 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/hooks/session-start.sh",
-      "sha256": "9caf94833c361455dbd4eba7e0dc09889d78d06c4d870e0a84b07496e907156c",
+      "sha256": "fb5bb29239130df92146b3afb38384d15e0f32c0463f7c7e903683aa085d2dd6",
+      "mode": 493
+    },
+    {
+      "path": "marketplace/plugins/ccl-skills/hooks/skill-context-compact.sh",
+      "sha256": "1bf21e91517d4b56a9cbe1e98bfc8f09201ee07a5f9d32441b55875df03113a8",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/hooks/skill-extraction-gate-stop.sh",
-      "sha256": "3e1077c0bf37d08b0697e52b1299c9694287aa5880ba92029ded33f461785100",
+      "sha256": "b4e5c96cd44d3dd9fdae3d6acd7ac7dc629b1ef52d85c6d42934bc84868fa8bd",
+      "mode": 493
+    },
+    {
+      "path": "marketplace/plugins/ccl-skills/hooks/skill-loading.py",
+      "sha256": "f59162a353d905ef419a0075a2cf20063e7cd757799d4da7b9f7210e3ecd0272",
       "mode": 493
     },
     {
@@ -130,9 +155,14 @@
       "sha256": "04965611f74a73030917d501efd9b205cabc52082af05e6fc9dc5be3703a8adf",
       "mode": 493
     },
+    {
+      "path": "marketplace/plugins/ccl-skills/hooks/task-entry.sh",
+      "sha256": "f75f318e1e1fc9ff2c2f89b3a2dec563e95d3c0a817155d8c4e78bb936ba54f9",
+      "mode": 493
+    },
     {
       "path": "marketplace/plugins/ccl-skills/hooks/test_guard_delegation_owner.sh",
-      "sha256": "e402ea7909b54ba7d4486d6b1b8b9fc86097656f2cb7824ce66e118047c473b6",
+      "sha256": "0a93622a22c9b0a2dc543f77e9bc4eca892608def1cf1be2392d3dda0837bf0d",
       "mode": 420
     },
     {
@@ -142,14 +172,24 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/hooks/test_guard_merge_authorization.sh",
-      "sha256": "c86be620e7cef11dd834ee4cdd399f753fcb784a4b4d56ca3fc1f30623bafb1b",
+      "sha256": "46aa31fb242e9096545d00554cb17eaf9bd4fef68fa4e49ee581148b638e3a08",
       "mode": 493
     },
+    {
+      "path": "marketplace/plugins/ccl-skills/hooks/test_host_input.py",
+      "sha256": "459cc71337e1d2ddcd125652fe1cb7ed04bda2c65d0d60dcae1d145b1c78dd48",
+      "mode": 420
+    },
     {
       "path": "marketplace/plugins/ccl-skills/hooks/test_merge_authorization_prompt.sh",
-      "sha256": "4acafbec16910119c2e5cb714418aa9486881833d2694d43ec114986e9564156",
+      "sha256": "acb48c3fd690bd0c7353d2071e1cdd81b28a414d10452a579bf3bb044da1462d",
       "mode": 420
     },
+    {
+      "path": "marketplace/plugins/ccl-skills/hooks/test_proposed_next.py",
+      "sha256": "936ffb3c57162cb712b51ee7dc33a775b96ef5d7d5807424f326c62a644b8638",
+      "mode": 493
+    },
     {
       "path": "marketplace/plugins/ccl-skills/hooks/test_remind_post_merge_cleanup.sh",
       "sha256": "f57ede7e26be676f3759d97e5707c4f9390623701103f2cfc4465a9d1669abf3",
@@ -172,9 +212,19 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/hooks/test_session_start.sh",
-      "sha256": "6f7a80cd148c93f88a7b68f6643df1420ed9a31f3bd3692e51cd7cfe1c621d0b",
+      "sha256": "e79bf4046ddb527a19c6599be9ede656dfe280583002706645cebfcc4ec6856b",
       "mode": 420
     },
+    {
+      "path": "marketplace/plugins/ccl-skills/hooks/test_skill_loading.py",
+      "sha256": "78ca5d46dc116328a8eb0552011313dafdf20c472b0bd981937ec4f9f897f462",
+      "mode": 493
+    },
+    {
+      "path": "marketplace/plugins/ccl-skills/hooks/test_task_entry.py",
+      "sha256": "2d7e487f12fce3a090d089a45d9296334c7213126b0925012783f2ccc29afcad",
+      "mode": 493
+    },
     {
       "path": "marketplace/plugins/ccl-skills/packages/opencode-plugin/AGENTS.md",
       "sha256": "6b0a214f91bf2abe637d2bbd430b815caf2ab4c20cd25e33a80e70f21bc02b3a",
@@ -182,7 +232,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/packages/opencode-plugin/ccl-skills.ts",
-      "sha256": "4706c8345df3a68836c6e09daf9fb0d8e4a828d544b751a94c47b39029ff706c",
+      "sha256": "059c7309a9697eb7d5e94f83363bee9bd5cd0f1be70b12b2ae099e1f59500cb7",
       "mode": 420
     },
     {
@@ -217,12 +267,12 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/scripts/owner-dispatch/owner-dispatch.sh",
-      "sha256": "76efb7c5d98b8944aaee11c537aabc82259faddfa6b60bb2bfabdbf7d0602ce2",
+      "sha256": "af57aaecf6bcb1c396d3f1072a5dc4a260807555d45755e824b082cbfd43baea",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/scripts/owner-dispatch/README.md",
-      "sha256": "6e82edb997669aa82ec35c58bf5d497fac8352e91fc1ae1f0cc3f3aae90f1563",
+      "sha256": "00c5f07f97a24901ec97bb311cf077f5cb1d49b228449603d9f9291f36bd93af",
       "mode": 420
     },
     {
@@ -307,7 +357,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/code-review/references/staged-review-contract.md",
-      "sha256": "828e403ab497ce6698881287032766a9e5dfe455887d6e3b50a4f762bc4fdaf0",
+      "sha256": "cd54a910c1394f73af5d4eb65039c7a76617af1fd434cdc4b7b498157b41a104",
       "mode": 420
     },
     {
@@ -402,7 +452,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/code-review/scripts/review_gate.py",
-      "sha256": "13a548d3a09595d875f20564f351773e8d8a3f87f1ff29ddb22f0d919877c709",
+      "sha256": "3227b42ca37a81e557bf92d726cd84fa209d7ea6ee2947e60915b5484c45272b",
       "mode": 493
     },
     {
@@ -527,7 +577,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/code-review/SKILL.md",
-      "sha256": "1d6d662e424e9d754f1a9a458d27b7cee338f4ed5de1b33f73bb5eb55a30d188",
+      "sha256": "a87647f9ff86840d247eb5ed3b7406422fbef7f3c2da21237a331f8cb5e83781",
       "mode": 420
     },
     {
@@ -1427,7 +1477,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/product-rd-workflow/references/pre-final-continuation-gate.md",
-      "sha256": "084b801e8eb4c0d3ccabf102d7bc75721a00666030f3fcbc00dd74d5725ac408",
+      "sha256": "498c56d47f9ced718173e2b537c03a767d01499b2556a8aa59893c2f39428630",
       "mode": 420
     },
     {
@@ -2157,7 +2207,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/source-register.md",
-      "sha256": "6012341863017f917334c6906eecf533af5af481e0b88edff8f3b1849103a8a3",
+      "sha256": "a7e0ec62d3670e802ca2ede7d73f796393f657d080a40a34df97c35458490bbc",
       "mode": 420
     },
     {
@@ -2262,7 +2312,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/extraction_review_gate.sh",
-      "sha256": "31793b1833026cb30ea28734340c14b72db3479c2e7485611c27ea143a75a273",
+      "sha256": "247d6b9ca7996942e68a225661b43e80c1c8cb4c2d4e1042d1d201a830ba9a51",
       "mode": 493
     },
     {
@@ -2372,7 +2422,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_check_ccl_skill_catalog.sh",
-      "sha256": "58436a78a32aaf2bb007d342a56ca05d1eac5b47032af0d79f0d47b280c9a2a7",
+      "sha256": "3c133a45044e2cc665e5e6113ad084f52f385ca82a51ddfaccaa7125d7990d2b",
       "mode": 493
     },
     {
@@ -2447,7 +2497,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_extraction_review_gate.sh",
-      "sha256": "a5ef6b42b758518b80af27cdad15ff6b731b611c7909331f8c51e925c2038fdd",
+      "sha256": "0f474ac1861a1fdd8bf36c2c955c69f127b77ed1e5bd460b35d3d73290c1d15f",
       "mode": 493
     },
     {
@@ -3255,6 +3305,11 @@
       "sha256": "63ebeb661eeb644497e57a2412f4fb7bc08bb9b19fc568ecb2b6f45f4ecfb070",
       "mode": 420
     },
+    {
+      "path": "marketplace/plugins/ccl-skills/skills/worktree-isolation/references/hook-authorization.md",
+      "sha256": "989be64bb1d59bdf92c72c4bed407381c25b906e2b436ba8ab601e5590600ce8",
+      "mode": 420
+    },
     {
       "path": "marketplace/plugins/ccl-skills/skills/worktree-isolation/references/shared-branch-rebase.md",
       "sha256": "99423dfd5acb461385de9f21f65eca802f975355a81590bec0617f401088abe8",
@@ -3287,7 +3342,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/worktree-isolation/SKILL.md",
-      "sha256": "d5fbed89424aa1f803c6bdfc5ed9cf6772e0879ebfdaa5874b54f3ad37ee77a3",
+      "sha256": "a9671ca9a82aa4f2171b9f2fc129bf1d5125317e062dc29e262d75824217e22c",
       "mode": 420
     }
   ],
@@ -3322,6 +3377,16 @@
       "sha256": "5b5ab7f39b7faa81ea209b3e479295da64f2a834969ee5ac8d76354a182c2822",
       "mode": 493
     },
+    {
+      "path": "codex-hooks.d.ts",
+      "sha256": "c87b1afaffe146fcce3d1e8a948e67db91e7b671fd1f944b879ef4b5114a56ee",
+      "mode": 420
+    },
+    {
+      "path": "codex-hooks.js",
+      "sha256": "cd2a131514391ed37e83cf8b5e90eb0d34c3f049c4d1780fa9b0443afa242de4",
+      "mode": 420
+    },
     {
       "path": "codex-host.d.ts",
       "sha256": "0e7c4e32f4627983d04d670efbd63ffe72384fb39b5ebe3bcf22a281421c7985",
@@ -3379,7 +3444,7 @@
     },
     {
       "path": "opencode-adapter.js",
-      "sha256": "637d3df5182ad6a51ed310736be65471fd0b432c078483af163d340ac04d6460",
+      "sha256": "213ee1d313a8318617f3865ca261718830c497f9de79ec35f7523bd100ad9c95",
       "mode": 420
     },
     {
@@ -3389,7 +3454,7 @@
     },
     {
       "path": "operations.js",
-      "sha256": "254bf44226fa305e98ea2dac36ddd6ca4f1a2e42e88ee669a5bb83736ba01077",
+      "sha256": "c7d2150f3158a34181c5234f02727b347c6612cdd474877d277e31f1369b31d0",
       "mode": 420
     },
     {
@@ -3453,5 +3518,5 @@
       "mode": 420
     }
   ],
-  "snapshotHash": "f0485aa2402d6f90224d19e22d3736178f00834e1dbd469ab1435affaed20a16"
+  "snapshotHash": "1f51372beb4f07851dd24d912a7e64042ccfa3bf9a76624cca9857ddf31dcac0"
 }

package/dist/codex-hooks.d.ts

@@ -0,0 +1,15 @@
+import type { OwnedFile } from "./types.js";
+type HookStatus = "trusted" | "managed" | "untrusted" | "modified" | "disabled" | "missing" | "unknown";
+export interface HookInventory {
+    status: HookStatus;
+    expected: number;
+    observed: number;
+    runtime: "unverified";
+    reason?: string;
+}
+export declare function parseHookInventory(value: unknown, cwd: string, pluginRoot: string, runtime?: {
+    codexHome: string;
+    files: OwnedFile[];
+}): HookInventory;
+export declare function inspectHooks(codexHome: string, pluginRoot: string, files: OwnedFile[], cwd?: string): HookInventory;
+export {};

package/dist/codex-hooks.js

@@ -0,0 +1,186 @@
+import { spawn, spawnSync } from "node:child_process";
+import { readFileSync } from "node:fs";
+import { dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { canonicalAlias, contained, verifyTree } from "./fs-safe.js";
+import { MARKET, REF } from "./paths.js";
+const TIMEOUT_MS = 10000;
+const OUTPUT_LIMIT = 1024 * 1024;
+const record = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+const unknown = (reason, expected = 0, observed = 0) => ({ status: "unknown", expected, observed, runtime: "unverified", reason });
+// Compare native metadata with the verified package snapshot. Merely finding a
+// similarly named plugin or one trusted handler cannot certify the installation.
+export function parseHookInventory(value, cwd, pluginRoot, runtime) {
+    let expected = [];
+    try {
+        const config = JSON.parse(readFileSync(join(pluginRoot, "hooks/hooks.json"), "utf8"));
+        if (!record(config) || !record(config.hooks))
+            return unknown("invalid-owned-hooks");
+        for (const [event, groups] of Object.entries(config.hooks)) {
+            if (!Array.isArray(groups))
+                return unknown("invalid-owned-hooks");
+            for (const group of groups) {
+                if (!record(group) || !Array.isArray(group.hooks) || (group.matcher !== undefined && typeof group.matcher !== "string"))
+                    return unknown("invalid-owned-hooks");
+                for (const hook of group.hooks) {
+                    if (!record(hook) || hook.type !== "command" || typeof hook.command !== "string" || !hook.command)
+                        return unknown("invalid-owned-hooks");
+                    expected.push({ eventName: event[0].toLowerCase() + event.slice(1), matcher: group.matcher ?? null, command: hook.command });
+                }
+            }
+        }
+    }
+    catch {
+        return unknown("invalid-owned-hooks");
+    }
+    if (!expected.length)
+        return unknown("empty-owned-hooks");
+    const count = expected.length;
+    if (!record(value) || !Array.isArray(value.data) || value.data.length !== 1)
+        return unknown("malformed-inventory", count);
+    const entry = value.data[0];
+    if (!record(entry) || typeof entry.cwd !== "string" || !isAbsolute(entry.cwd) || canonicalAlias(resolve(entry.cwd)) !== canonicalAlias(resolve(cwd)) || !Array.isArray(entry.hooks))
+        return unknown("malformed-inventory", count);
+    if (!Array.isArray(entry.errors) || !Array.isArray(entry.warnings) || entry.errors.length || entry.warnings.length)
+        return unknown("inventory-diagnostics", count);
+    const statuses = [], keys = new Set();
+    let disabled = false;
+    const expectedSource = canonicalAlias(join(pluginRoot, "hooks/hooks.json"));
+    const verifiedRoots = new Set([canonicalAlias(pluginRoot)]);
+    for (const hook of entry.hooks) {
+        if (!record(hook))
+            return unknown("malformed-inventory", count);
+        if (hook.pluginId !== REF)
+            continue;
+        if (hook.source !== "plugin" || typeof hook.sourcePath !== "string" || !isAbsolute(hook.sourcePath))
+            return unknown("hook-source-mismatch", count, statuses.length);
+        const source = canonicalAlias(resolve(hook.sourcePath)), root = dirname(dirname(source));
+        if (source !== expectedSource) {
+            if (!runtime || source !== join(root, "hooks/hooks.json"))
+                return unknown("hook-source-mismatch", count, statuses.length);
+            const cache = canonicalAlias(join(runtime.codexHome, "plugins/cache", MARKET, "ccl-skills"));
+            try {
+                if (root === cache || contained(cache, relative(cache, root)) !== root)
+                    return unknown("hook-source-mismatch", count, statuses.length);
+                if (!verifiedRoots.has(root)) {
+                    if (!runtime.files.length || verifyTree(root, runtime.files).length)
+                        return unknown("runtime-drift", count, statuses.length);
+                    verifiedRoots.add(root);
+                }
+            }
+            catch {
+                return unknown("hook-source-mismatch", count, statuses.length);
+            }
+        }
+        if (hook.handlerType !== "command" || typeof hook.command !== "string" || typeof hook.eventName !== "string" || (hook.matcher !== null && typeof hook.matcher !== "string") || typeof hook.enabled !== "boolean" || typeof hook.key !== "string" || !hook.key || keys.has(hook.key) || !["trusted", "untrusted", "modified", "managed"].includes(String(hook.trustStatus)))
+            return unknown("malformed-hook", count, statuses.length);
+        keys.add(hook.key);
+        const commandRoot = dirname(dirname(resolve(hook.sourcePath)));
+        const index = expected.findIndex(item => item.eventName === hook.eventName && item.matcher === hook.matcher && item.command.replaceAll("${CLAUDE_PLUGIN_ROOT}", commandRoot).replaceAll("${CODEX_PLUGIN_ROOT}", commandRoot) === hook.command);
+        if (index < 0)
+            return unknown("hook-definition-mismatch", count, statuses.length);
+        expected.splice(index, 1);
+        statuses.push(String(hook.trustStatus));
+        disabled ||= !hook.enabled;
+    }
+    const base = { expected: count, observed: statuses.length, runtime: "unverified" };
+    if (expected.length)
+        return { ...base, status: "missing", reason: "missing-package-hooks" };
+    if (statuses.includes("modified"))
+        return { ...base, status: "modified" };
+    if (statuses.includes("untrusted"))
+        return { ...base, status: "untrusted" };
+    if (disabled)
+        return { ...base, status: "disabled" };
+    return { ...base, status: statuses.every(status => status === "managed") ? "managed" : "trusted" };
+}
+// The CLI's operation API is synchronous. Isolate the handshake in a short-lived
+// helper so initialization completes before hooks/list, without starting a turn.
+export function inspectHooks(codexHome, pluginRoot, files, cwd = process.cwd()) {
+    const result = spawnSync(process.execPath, [fileURLToPath(import.meta.url), "--inventory-worker", resolve(cwd)], {
+        encoding: "utf8", env: { ...process.env, CODEX_HOME: codexHome },
+        stdio: ["ignore", "pipe", "pipe"], detached: process.platform !== "win32",
+        timeout: TIMEOUT_MS + 1000, killSignal: "SIGKILL", maxBuffer: OUTPUT_LIMIT,
+    });
+    // The helper and its descendants share an isolated process group. This also
+    // catches hosts which leave children alive or hold stdout open after exit.
+    if (process.platform !== "win32" && result.pid) {
+        try {
+            process.kill(-result.pid, "SIGKILL");
+        }
+        catch { /* group already gone */ }
+    }
+    if (result.error || result.status !== 0)
+        return unknown(result.error?.code === "ETIMEDOUT" ? "timeout" : "unavailable");
+    try {
+        const payload = JSON.parse(result.stdout);
+        if (!record(payload) || payload.ok !== true)
+            return unknown(record(payload) && typeof payload.reason === "string" && ["timeout", "unavailable", "malformed-output", "output-limit", "unsupported"].includes(payload.reason) ? payload.reason : "malformed-output");
+        return parseHookInventory(payload.result, cwd, pluginRoot, { codexHome, files });
+    }
+    catch {
+        return unknown("malformed-output");
+    }
+}
+function inventoryWorker(cwd) {
+    const child = spawn("codex", ["app-server", "--stdio"], { stdio: ["pipe", "pipe", "pipe"] });
+    let finished = false, initialized = false, received = 0, pending = "";
+    const timer = setTimeout(() => finish({ ok: false, reason: "timeout" }), TIMEOUT_MS);
+    function finish(value) {
+        if (finished)
+            return;
+        finished = true;
+        clearTimeout(timer);
+        child.kill("SIGKILL");
+        child.stdin.destroy();
+        child.stdout.destroy();
+        child.stderr.destroy();
+        process.stdout.write(JSON.stringify(value));
+    }
+    const send = (value) => child.stdin.write(`${JSON.stringify(value)}\n`);
+    child.on("error", () => finish({ ok: false, reason: "unavailable" }));
+    child.on("exit", () => finish({ ok: false, reason: "unavailable" }));
+    child.stdin.on("error", () => finish({ ok: false, reason: "unavailable" }));
+    child.stderr.on("data", (chunk) => {
+        received += chunk.length;
+        if (received > OUTPUT_LIMIT)
+            finish({ ok: false, reason: "output-limit" });
+    });
+    child.stdout.setEncoding("utf8");
+    child.stdout.on("data", (chunk) => {
+        received += Buffer.byteLength(chunk, "utf8");
+        if (received > OUTPUT_LIMIT)
+            return finish({ ok: false, reason: "output-limit" });
+        pending += chunk;
+        let newline;
+        while (!finished && (newline = pending.indexOf("\n")) >= 0) {
+            const line = pending.slice(0, newline);
+            pending = pending.slice(newline + 1);
+            let response;
+            try {
+                response = JSON.parse(line);
+            }
+            catch {
+                return finish({ ok: false, reason: "malformed-output" });
+            }
+            if (!record(response))
+                return finish({ ok: false, reason: "malformed-output" });
+            if (!Object.hasOwn(response, "id") && typeof response.method === "string")
+                continue;
+            if (response.id !== (initialized ? 2 : 1))
+                return finish({ ok: false, reason: "malformed-output" });
+            if (Object.hasOwn(response, "error"))
+                return finish({ ok: false, reason: "unsupported" });
+            if (!record(response.result))
+                return finish({ ok: false, reason: "malformed-output" });
+            if (initialized)
+                return finish({ ok: true, result: response.result });
+            initialized = true;
+            send({ method: "initialized", params: {} });
+            send({ id: 2, method: "hooks/list", params: { cwds: [cwd] } });
+        }
+    });
+    send({ id: 1, method: "initialize", params: { clientInfo: { name: "ccl_hook_audit", version: "1.0" }, capabilities: { experimentalApi: true } } });
+}
+if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url) && process.argv[2] === "--inventory-worker" && isAbsolute(process.argv[3] ?? ""))
+    inventoryWorker(process.argv[3]);

package/dist/opencode-adapter.js

@@ -69,16 +69,21 @@ function source(context) {
         throw new Error("invalid CCL_SKILLS_REPO: skills, OpenCode commands, or hook runtime are missing");
     regular(plugin);
     regular(bootstrap);
+    for (const helper of ["host-input.py", "skill-loading.py"])
+        regular(join(hooks, helper));
     const skillNames = readdirSync(skills, { withFileTypes: true }).filter((entry) => entry.isDirectory() && existsSync(join(skills, entry.name, "SKILL.md"))).map((entry) => entry.name).sort();
     if (!skillNames.length)
         throw new Error("invalid CCL_SKILLS_REPO: no skills found");
     let entries = walk(skills, "skills", "skills");
     entries.push({ source: "packages/opencode-plugin/ccl-skills.ts", destination: "plugins/ccl-skills.ts", sha256: sha256(plugin), mode: regular(plugin).mode & 0o777 });
     entries.push({ source: "agent-context/session-start.md", destination: "ccl-skills/bootstrap.md", sha256: sha256(bootstrap), mode: regular(bootstrap).mode & 0o777 });
+    const policy = join(agentContext, "session-policy.md");
+    regular(policy);
+    entries.push({ source: "agent-context/session-policy.md", destination: "ccl-skills/session-policy.md", sha256: sha256(policy), mode: regular(policy).mode & 0o777 });
     entries.push(...walk(commands, "packages/opencode-plugin/commands", "commands").filter((entry) => /^commands\/ccl-[^/]+\.md$/.test(entry.destination)));
-    entries.push(...walk(hooks, "hooks", "ccl-skills/runtime/hooks").filter((entry) => entry.source === "hooks/hooks.json" || /^hooks\/(?!test_)[^/]+\.sh$/.test(entry.source)));
+    entries.push(...walk(hooks, "hooks", "ccl-skills/runtime/hooks").filter((entry) => ["hooks/hooks.json", "hooks/host-input.py", "hooks/skill-loading.py"].includes(entry.source) || /^hooks\/(?!test_)[^/]+\.sh$/.test(entry.source)));
     entries.push(...walk(ownerDispatch, "scripts/owner-dispatch", "ccl-skills/runtime/scripts/owner-dispatch").filter((entry) => entry.source === "scripts/owner-dispatch/owner-dispatch.sh"));
-    entries.push(...walk(agentContext, "agent-context", "ccl-skills/runtime/agent-context").filter((entry) => /^agent-context\/(session-start|subagent-start)\.md$/.test(entry.source)));
+    entries.push(...walk(agentContext, "agent-context", "ccl-skills/runtime/agent-context").filter((entry) => /^agent-context\/(session-start|session-policy|subagent-start)\.md$/.test(entry.source)));
     entries = entries.sort((a, b) => a.destination.localeCompare(b.destination));
     const snapshotHash = createHash("sha256").update(JSON.stringify(entries.map(({ source: s, sha256: hash, mode }) => ({ source: s, sha256: hash, mode })))).digest("hex");
     const release = readRelease(join(p.assets, "release.json"));
@@ -90,7 +95,7 @@ function source(context) {
     return { root, entries, snapshotHash, version: release.version, sourceCommit, sourceKind: override ? "override" : "bundled" };
 }
 function allowedDestination(path) {
-    return /^skills\/[^/]+\/.+/.test(path) || path === "plugins/ccl-skills.ts" || path === "ccl-skills/bootstrap.md" || /^commands\/ccl-[^/]+\.md$/.test(path) || /^ccl-skills\/runtime\/(hooks|scripts\/owner-dispatch|agent-context)\/[^/]+$/.test(path);
+    return /^skills\/[^/]+\/.+/.test(path) || path === "plugins/ccl-skills.ts" || path === "ccl-skills/bootstrap.md" || path === "ccl-skills/session-policy.md" || /^commands\/ccl-[^/]+\.md$/.test(path) || /^ccl-skills\/runtime\/(hooks|scripts\/owner-dispatch|agent-context)\/[^/]+$/.test(path);
 }
 function readManifest(path, root) {
     if (!existsSync(path))

package/dist/operations.js

@@ -5,6 +5,7 @@ import { checkHost, marketplaceAdd, marketplaceRemove, pluginAdd, pluginRemove,
 import { manifestFor, MetadataError, readManifest, readRelease, } from "./manifest.js";
 import { paths, } from "./paths.js";
 import { compare } from "./version.js";
+import { inspectHooks } from "./codex-hooks.js";
 const pending = (message, details = {}) => ({
     code: 3,
     status: "installed-hooks-pending",
@@ -485,9 +486,13 @@ function doctor(context) {
             status: "public-state-mismatch",
             message: "owned files exist but Codex registration does not match the manifest",
         };
-    return pending("plugin is installed; hooks trust is pending/unverified", {
-        version: manifest.active.version,
-    });
+    const pluginPrefix = "marketplace/plugins/ccl-skills/";
+    const pluginFiles = manifest.active.ownedFiles.filter(file => file.path.startsWith(pluginPrefix)).map(file => ({ ...file, path: file.path.slice(pluginPrefix.length) }));
+    const hooks = inspectHooks(p.codexHome, join(marketPath(p.root, manifest.active.path), "plugins/ccl-skills"), pluginFiles);
+    const details = { version: manifest.active.version, hooks };
+    if (hooks.status === "trusted" || hooks.status === "managed")
+        return { code: 0, status: "installed-hooks-trusted", message: "plugin hooks are configured and trusted; runtime execution is not verified", details };
+    return pending(`plugin is installed; hook trust: ${hooks.status}; runtime execution is not verified`, details);
 }
 function installOrUpdate(command, options, context) {
     const p = paths(context);
@@ -534,13 +539,12 @@ function installOrUpdate(command, options, context) {
                 message: "public state does not match the owned manifest",
             };
         const comparison = compare(release.version, old.active.version);
-        if (comparison === 0)
+        if (comparison === 0) {
+            const report = doctor(context);
             return command === "install"
-                ? {
-                    ...doctor(context),
-                    message: "same version is already installed; hooks trust remains pending/unverified",
-                }
-                : doctor(context);
+                ? { ...report, message: `same version is already installed; ${report.message}` }
+                : report;
+        }
         if (command === "install")
             return {
                 code: 3,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ccoalm/ccl-skills",
-	"version": "0.18.1",
+	"version": "0.18.3",
   "description": "Reusable workflows that help coding agents plan, build, test, review, and release software — for Claude Code, Codex, and OpenCode",
 	"keywords": ["skills", "agent-skills", "claude", "claude-code", "codex", "opencode", "agent", "ai", "ai-agents", "cli", "anthropic", "developer-tools"],
   "type": "module",