@hasna/skills 0.10.10 → 0.10.11

package/bin/index.js

@@ -36868,7 +36868,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.10",
+    version: "0.10.11",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -51082,6 +51082,33 @@ function canonicalAgentPath(path, aliases) {
   const absolute = resolve10(path), binding = aliases.find((item) => absolute === item.alias || absolute.startsWith(item.alias + sep4));
   return binding ? join20(binding.target, relative4(binding.alias, absolute)) : absolute;
 }
+function disabledCodexSkillPaths(config, aliases) {
+  const skills = config.skills;
+  if (!skills || typeof skills !== "object" || Array.isArray(skills))
+    return [];
+  const rows = skills.config;
+  if (!Array.isArray(rows))
+    return [];
+  if (rows.some((entry) => !entry || typeof entry !== "object" || Array.isArray(entry) || typeof entry.enabled !== "boolean" || entry.path !== undefined && (typeof entry.path !== "string" || !isAbsolute9(entry.path)) || entry.name !== undefined && typeof entry.name !== "string"))
+    return [];
+  if (rows.some((entry) => entry.name !== undefined))
+    return [];
+  const settings = new Map;
+  for (const entry of rows) {
+    if (typeof entry.path !== "string" || !isAbsolute9(entry.path))
+      continue;
+    let document3;
+    try {
+      document3 = realpathSync3(canonicalAgentPath(entry.path, aliases));
+    } catch {
+      continue;
+    }
+    if (!document3.endsWith(`${sep4}SKILL.md`))
+      continue;
+    settings.set(document3, [...settings.get(document3) ?? [], entry.enabled === false]);
+  }
+  return [...settings].filter(([, values2]) => values2.length === 1 && values2[0] === true).map(([document3]) => dirname10(document3));
+}
 function recheckRootAliases(aliases) {
   for (const binding of aliases) {
     if (!["claude", "codex"].includes(binding.agent) || binding.alias !== join20(binding.home, `.${binding.agent}`))
@@ -51238,6 +51265,9 @@ function projectAncestorDirectories(projects) {
 function inventoryNativeSkills(home = homedir3(), options = {}) {
   if (options.reviewedCacheAlias !== undefined && (!options.includeVendor || !isAbsolute9(options.reviewedCacheAlias) || resolve10(options.reviewedCacheAlias) !== options.reviewedCacheAlias))
     throw new Error("A reviewed cache alias requires vendor inventory and an exact absolute path");
+  if (options.disabledVendorPaths?.some((path) => !isAbsolute9(path) || resolve10(path) !== path))
+    throw new Error("Disabled vendor paths must be exact absolute paths");
+  const disabledVendorPaths = new Set(options.disabledVendorPaths ?? []);
   const aliases = rootAliases(home, options.allowRootAliases);
   const selectedAgents = options.agents ? new Set(options.agents) : undefined;
   const includesAgent = (agent) => !selectedAgents || selectedAgents.has(agent);
@@ -51259,7 +51289,7 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
       throw new Error("Native skill discovery metadata limit exceeded");
   }
   let reviewedCacheAliasFound = false;
-  function verifiedSiblingCacheAlias(path, parent) {
+  function verifiedSiblingCacheAlias(agent, path, parent) {
     const link2 = readlinkSync3(path), target = resolve10(parent, link2);
     if (dirname10(target) !== parent || (isAbsolute9(link2) ? link2 !== target : dirname10(link2) !== "."))
       return false;
@@ -51269,6 +51299,9 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
     if (!scan?.complete || scan.entries > maxAliasProofEntries)
       return false;
     if (scan.hasSkills) {
+      const targetSkills = entries.filter((entry) => entry.agent === agent && entry.vendor && (entry.path === target || entry.path.startsWith(target + sep4)));
+      if (agent === "codex" && targetSkills.length > 0 && targetSkills.every((entry) => disabledVendorPaths.has(entry.path)))
+        return true;
       if (path !== options.reviewedCacheAlias)
         return false;
       reviewedCacheAliasFound = true;
@@ -51330,7 +51363,7 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
       const child = join20(path, name);
       if (isVendor && lstatSync14(child, { throwIfNoEntry: false })?.isSymbolicLink()) {
         const target = statSync7(child, { throwIfNoEntry: false });
-        if (target?.isFile() || pluginCache && target?.isDirectory() && verifiedSiblingCacheAlias(child, path)) {
+        if (target?.isFile() || pluginCache && target?.isDirectory() && verifiedSiblingCacheAlias(agent, child, path)) {
           scan.entries++;
           continue;
         }
@@ -51538,7 +51571,8 @@ function planAgentIntegration(options) {
     }
     return resolveAgentDiscovery({ home, agent, reviewed: options.discoveryInputs, retainedReview, canonical: (path) => canonicalAgentPath(path, aliases) });
   });
-  const nativeSkills = inventoryNativeSkills(home, { includeVendor: true, guardHermes: options.agents.includes("hermes"), agents: options.agents, projectDir: options.projectDir, agentRoots: discoveries.flatMap((binding) => binding.roots.map((path) => ({ agent: binding.agent, path }))), allowRootAliases: options.allowRootAliases });
+  const codexConfig = options.agents.includes("codex") ? Bun.TOML.parse(readOptional(canonicalAgentPath(join20(home, ".codex", "config.toml"), aliases)) ?? "") : {};
+  const nativeSkills = inventoryNativeSkills(home, { includeVendor: true, guardHermes: options.agents.includes("hermes"), agents: options.agents, projectDir: options.projectDir, agentRoots: discoveries.flatMap((binding) => binding.roots.map((path) => ({ agent: binding.agent, path }))), allowRootAliases: options.allowRootAliases, disabledVendorPaths: disabledCodexSkillPaths(codexConfig, aliases) });
   const changes = [];
   for (const agent of [...new Set(options.agents)]) {
     if (!INTEGRATION_AGENTS.includes(agent))
@@ -51979,7 +52013,7 @@ function assertManagedAgentBridge(agent, options = {}) {
   } catch (error) {
     throw new Error(`NATIVE_SKILL_DRIFT: ${error.message}`);
   }
-  const inventory = inventoryNativeSkills(home, { includeVendor: true, guardHermes: agent === "hermes", agents: [agent], projectDirs: [...roots], agentRoots: discovery.roots.map((path) => ({ agent, path })), allowRootAliases: aliases.length > 0 });
+  const inventory = inventoryNativeSkills(home, { includeVendor: true, guardHermes: agent === "hermes", agents: [agent], projectDirs: [...roots], agentRoots: discovery.roots.map((path) => ({ agent, path })), allowRootAliases: aliases.length > 0, disabledVendorPaths: agent === "codex" ? disabledCodexSkillPaths(codexConfig, aliases) : [] });
   const unexpected = inventory.filter((entry) => visible(entry) && !entry.bridge && !disabledVendorSkill(entry));
   if (unexpected.length) {
     const paths = unexpected.slice(0, 3).map((entry) => {

package/bin/mcp.js

@@ -20019,7 +20019,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.10",
+    version: "0.10.11",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {

package/bin/migrate.js

@@ -7,7 +7,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.10",
+  version: "0.10.11",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/server.js

@@ -24122,7 +24122,7 @@ var init_dist_es9 = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.10",
+  version: "0.10.11",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/worker.js

@@ -24125,7 +24125,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.10",
+  version: "0.10.11",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/index.js

@@ -9611,7 +9611,7 @@ import { isAbsolute as isAbsolute11, join as join23, resolve as resolve11 } from
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.10",
+  version: "0.10.11",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -13227,6 +13227,33 @@ function canonicalAgentPath(path, aliases) {
   const absolute = resolve9(path), binding = aliases.find((item) => absolute === item.alias || absolute.startsWith(item.alias + sep4));
   return binding ? join16(binding.target, relative4(binding.alias, absolute)) : absolute;
 }
+function disabledCodexSkillPaths(config, aliases) {
+  const skills = config.skills;
+  if (!skills || typeof skills !== "object" || Array.isArray(skills))
+    return [];
+  const rows = skills.config;
+  if (!Array.isArray(rows))
+    return [];
+  if (rows.some((entry) => !entry || typeof entry !== "object" || Array.isArray(entry) || typeof entry.enabled !== "boolean" || entry.path !== undefined && (typeof entry.path !== "string" || !isAbsolute9(entry.path)) || entry.name !== undefined && typeof entry.name !== "string"))
+    return [];
+  if (rows.some((entry) => entry.name !== undefined))
+    return [];
+  const settings = new Map;
+  for (const entry of rows) {
+    if (typeof entry.path !== "string" || !isAbsolute9(entry.path))
+      continue;
+    let document2;
+    try {
+      document2 = realpathSync3(canonicalAgentPath(entry.path, aliases));
+    } catch {
+      continue;
+    }
+    if (!document2.endsWith(`${sep4}SKILL.md`))
+      continue;
+    settings.set(document2, [...settings.get(document2) ?? [], entry.enabled === false]);
+  }
+  return [...settings].filter(([, values]) => values.length === 1 && values[0] === true).map(([document2]) => dirname10(document2));
+}
 function recheckRootAliases(aliases) {
   for (const binding of aliases) {
     if (!["claude", "codex"].includes(binding.agent) || binding.alias !== join16(binding.home, `.${binding.agent}`))
@@ -13336,6 +13363,9 @@ function projectAncestorDirectories(projects) {
 function inventoryNativeSkills(home = homedir2(), options = {}) {
   if (options.reviewedCacheAlias !== undefined && (!options.includeVendor || !isAbsolute9(options.reviewedCacheAlias) || resolve9(options.reviewedCacheAlias) !== options.reviewedCacheAlias))
     throw new Error("A reviewed cache alias requires vendor inventory and an exact absolute path");
+  if (options.disabledVendorPaths?.some((path) => !isAbsolute9(path) || resolve9(path) !== path))
+    throw new Error("Disabled vendor paths must be exact absolute paths");
+  const disabledVendorPaths = new Set(options.disabledVendorPaths ?? []);
   const aliases = rootAliases(home, options.allowRootAliases);
   const selectedAgents = options.agents ? new Set(options.agents) : undefined;
   const includesAgent = (agent) => !selectedAgents || selectedAgents.has(agent);
@@ -13357,7 +13387,7 @@ function inventoryNativeSkills(home = homedir2(), options = {}) {
       throw new Error("Native skill discovery metadata limit exceeded");
   }
   let reviewedCacheAliasFound = false;
-  function verifiedSiblingCacheAlias(path, parent) {
+  function verifiedSiblingCacheAlias(agent, path, parent) {
     const link = readlinkSync3(path), target = resolve9(parent, link);
     if (dirname10(target) !== parent || (isAbsolute9(link) ? link !== target : dirname10(link) !== "."))
       return false;
@@ -13367,6 +13397,9 @@ function inventoryNativeSkills(home = homedir2(), options = {}) {
     if (!scan?.complete || scan.entries > maxAliasProofEntries)
       return false;
     if (scan.hasSkills) {
+      const targetSkills = entries.filter((entry) => entry.agent === agent && entry.vendor && (entry.path === target || entry.path.startsWith(target + sep4)));
+      if (agent === "codex" && targetSkills.length > 0 && targetSkills.every((entry) => disabledVendorPaths.has(entry.path)))
+        return true;
       if (path !== options.reviewedCacheAlias)
         return false;
       reviewedCacheAliasFound = true;
@@ -13428,7 +13461,7 @@ function inventoryNativeSkills(home = homedir2(), options = {}) {
       const child = join16(path, name);
       if (isVendor && lstatSync14(child, { throwIfNoEntry: false })?.isSymbolicLink()) {
         const target = statSync7(child, { throwIfNoEntry: false });
-        if (target?.isFile() || pluginCache && target?.isDirectory() && verifiedSiblingCacheAlias(child, path)) {
+        if (target?.isFile() || pluginCache && target?.isDirectory() && verifiedSiblingCacheAlias(agent, child, path)) {
           scan.entries++;
           continue;
         }
@@ -13636,7 +13669,8 @@ function planAgentIntegration(options) {
     }
     return resolveAgentDiscovery({ home, agent, reviewed: options.discoveryInputs, retainedReview, canonical: (path) => canonicalAgentPath(path, aliases) });
   });
-  const nativeSkills = inventoryNativeSkills(home, { includeVendor: true, guardHermes: options.agents.includes("hermes"), agents: options.agents, projectDir: options.projectDir, agentRoots: discoveries.flatMap((binding) => binding.roots.map((path) => ({ agent: binding.agent, path }))), allowRootAliases: options.allowRootAliases });
+  const codexConfig = options.agents.includes("codex") ? Bun.TOML.parse(readOptional(canonicalAgentPath(join16(home, ".codex", "config.toml"), aliases)) ?? "") : {};
+  const nativeSkills = inventoryNativeSkills(home, { includeVendor: true, guardHermes: options.agents.includes("hermes"), agents: options.agents, projectDir: options.projectDir, agentRoots: discoveries.flatMap((binding) => binding.roots.map((path) => ({ agent: binding.agent, path }))), allowRootAliases: options.allowRootAliases, disabledVendorPaths: disabledCodexSkillPaths(codexConfig, aliases) });
   const changes = [];
   for (const agent of [...new Set(options.agents)]) {
     if (!INTEGRATION_AGENTS.includes(agent))
@@ -14158,7 +14192,7 @@ function assertManagedAgentBridge(agent, options = {}) {
   } catch (error) {
     throw new Error(`NATIVE_SKILL_DRIFT: ${error.message}`);
   }
-  const inventory = inventoryNativeSkills(home, { includeVendor: true, guardHermes: agent === "hermes", agents: [agent], projectDirs: [...roots], agentRoots: discovery.roots.map((path) => ({ agent, path })), allowRootAliases: aliases.length > 0 });
+  const inventory = inventoryNativeSkills(home, { includeVendor: true, guardHermes: agent === "hermes", agents: [agent], projectDirs: [...roots], agentRoots: discovery.roots.map((path) => ({ agent, path })), allowRootAliases: aliases.length > 0, disabledVendorPaths: agent === "codex" ? disabledCodexSkillPaths(codexConfig, aliases) : [] });
   const unexpected = inventory.filter((entry) => visible(entry) && !entry.bridge && !disabledVendorSkill(entry));
   if (unexpected.length) {
     const paths = unexpected.slice(0, 3).map((entry) => {

package/dist/lib/agent-integration.d.ts

@@ -86,6 +86,7 @@ export declare function inventoryNativeSkills(home?: string, options?: {
     discoveryInputs?: ReviewedDiscoveryInputs;
     allowRootAliases?: boolean;
     reviewedCacheAlias?: string;
+    disabledVendorPaths?: readonly string[];
 }): NativeSkillEntry[];
 /** Planning is read-only; credentials and unrelated settings never appear in CLI output. */
 export declare function planAgentIntegration(options: {

package/dist/sdk/index.js

@@ -32373,7 +32373,7 @@ var init_event_sink = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.10",
+  version: "0.10.11",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -41100,6 +41100,33 @@ function canonicalAgentPath(path, aliases) {
   const absolute = resolve14(path), binding = aliases.find((item) => absolute === item.alias || absolute.startsWith(item.alias + sep4));
   return binding ? join21(binding.target, relative3(binding.alias, absolute)) : absolute;
 }
+function disabledCodexSkillPaths(config, aliases) {
+  const skills = config.skills;
+  if (!skills || typeof skills !== "object" || Array.isArray(skills))
+    return [];
+  const rows = skills.config;
+  if (!Array.isArray(rows))
+    return [];
+  if (rows.some((entry) => !entry || typeof entry !== "object" || Array.isArray(entry) || typeof entry.enabled !== "boolean" || entry.path !== undefined && (typeof entry.path !== "string" || !isAbsolute15(entry.path)) || entry.name !== undefined && typeof entry.name !== "string"))
+    return [];
+  if (rows.some((entry) => entry.name !== undefined))
+    return [];
+  const settings = new Map;
+  for (const entry of rows) {
+    if (typeof entry.path !== "string" || !isAbsolute15(entry.path))
+      continue;
+    let document2;
+    try {
+      document2 = realpathSync4(canonicalAgentPath(entry.path, aliases));
+    } catch {
+      continue;
+    }
+    if (!document2.endsWith(`${sep4}SKILL.md`))
+      continue;
+    settings.set(document2, [...settings.get(document2) ?? [], entry.enabled === false]);
+  }
+  return [...settings].filter(([, values]) => values.length === 1 && values[0] === true).map(([document2]) => dirname14(document2));
+}
 function recheckRootAliases(aliases) {
   for (const binding of aliases) {
     if (!["claude", "codex"].includes(binding.agent) || binding.alias !== join21(binding.home, `.${binding.agent}`))
@@ -41209,6 +41236,9 @@ function projectAncestorDirectories(projects) {
 function inventoryNativeSkills(home = homedir3(), options = {}) {
   if (options.reviewedCacheAlias !== undefined && (!options.includeVendor || !isAbsolute15(options.reviewedCacheAlias) || resolve14(options.reviewedCacheAlias) !== options.reviewedCacheAlias))
     throw new Error("A reviewed cache alias requires vendor inventory and an exact absolute path");
+  if (options.disabledVendorPaths?.some((path) => !isAbsolute15(path) || resolve14(path) !== path))
+    throw new Error("Disabled vendor paths must be exact absolute paths");
+  const disabledVendorPaths = new Set(options.disabledVendorPaths ?? []);
   const aliases = rootAliases(home, options.allowRootAliases);
   const selectedAgents = options.agents ? new Set(options.agents) : undefined;
   const includesAgent = (agent) => !selectedAgents || selectedAgents.has(agent);
@@ -41230,7 +41260,7 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
       throw new Error("Native skill discovery metadata limit exceeded");
   }
   let reviewedCacheAliasFound = false;
-  function verifiedSiblingCacheAlias(path, parent) {
+  function verifiedSiblingCacheAlias(agent, path, parent) {
     const link = readlinkSync3(path), target = resolve14(parent, link);
     if (dirname14(target) !== parent || (isAbsolute15(link) ? link !== target : dirname14(link) !== "."))
       return false;
@@ -41240,6 +41270,9 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
     if (!scan?.complete || scan.entries > maxAliasProofEntries)
       return false;
     if (scan.hasSkills) {
+      const targetSkills = entries.filter((entry) => entry.agent === agent && entry.vendor && (entry.path === target || entry.path.startsWith(target + sep4)));
+      if (agent === "codex" && targetSkills.length > 0 && targetSkills.every((entry) => disabledVendorPaths.has(entry.path)))
+        return true;
       if (path !== options.reviewedCacheAlias)
         return false;
       reviewedCacheAliasFound = true;
@@ -41301,7 +41334,7 @@ function inventoryNativeSkills(home = homedir3(), options = {}) {
       const child = join21(path, name);
       if (isVendor && lstatSync18(child, { throwIfNoEntry: false })?.isSymbolicLink()) {
         const target = statSync5(child, { throwIfNoEntry: false });
-        if (target?.isFile() || pluginCache && target?.isDirectory() && verifiedSiblingCacheAlias(child, path)) {
+        if (target?.isFile() || pluginCache && target?.isDirectory() && verifiedSiblingCacheAlias(agent, child, path)) {
           scan.entries++;
           continue;
         }
@@ -41509,7 +41542,8 @@ function planAgentIntegration(options) {
     }
     return resolveAgentDiscovery({ home, agent, reviewed: options.discoveryInputs, retainedReview, canonical: (path) => canonicalAgentPath(path, aliases) });
   });
-  const nativeSkills = inventoryNativeSkills(home, { includeVendor: true, guardHermes: options.agents.includes("hermes"), agents: options.agents, projectDir: options.projectDir, agentRoots: discoveries.flatMap((binding) => binding.roots.map((path) => ({ agent: binding.agent, path }))), allowRootAliases: options.allowRootAliases });
+  const codexConfig = options.agents.includes("codex") ? Bun.TOML.parse(readOptional(canonicalAgentPath(join21(home, ".codex", "config.toml"), aliases)) ?? "") : {};
+  const nativeSkills = inventoryNativeSkills(home, { includeVendor: true, guardHermes: options.agents.includes("hermes"), agents: options.agents, projectDir: options.projectDir, agentRoots: discoveries.flatMap((binding) => binding.roots.map((path) => ({ agent: binding.agent, path }))), allowRootAliases: options.allowRootAliases, disabledVendorPaths: disabledCodexSkillPaths(codexConfig, aliases) });
   const changes = [];
   for (const agent of [...new Set(options.agents)]) {
     if (!INTEGRATION_AGENTS.includes(agent))
@@ -42031,7 +42065,7 @@ function assertManagedAgentBridge(agent, options = {}) {
   } catch (error) {
     throw new Error(`NATIVE_SKILL_DRIFT: ${error.message}`);
   }
-  const inventory = inventoryNativeSkills(home, { includeVendor: true, guardHermes: agent === "hermes", agents: [agent], projectDirs: [...roots], agentRoots: discovery.roots.map((path) => ({ agent, path })), allowRootAliases: aliases.length > 0 });
+  const inventory = inventoryNativeSkills(home, { includeVendor: true, guardHermes: agent === "hermes", agents: [agent], projectDirs: [...roots], agentRoots: discovery.roots.map((path) => ({ agent, path })), allowRootAliases: aliases.length > 0, disabledVendorPaths: agent === "codex" ? disabledCodexSkillPaths(codexConfig, aliases) : [] });
   const unexpected = inventory.filter((entry) => visible(entry) && !entry.bridge && !disabledVendorSkill(entry));
   if (unexpected.length) {
     const paths = unexpected.slice(0, 3).map((entry) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/skills",
-  "version": "0.10.10",
+  "version": "0.10.11",
   "description": "Skills library for AI coding agents",
   "type": "module",
   "bin": {