@hasna/skills 0.10.15 → 0.10.18

package/dist/lib/agent-discovery.d.ts

@@ -6,7 +6,7 @@ export { captureDiscoveryDirectories, type DiscoveryDirectory } from "./agent-di
 export interface DiscoverySource {
     path: string;
     sha256: string | null;
-    hashMode?: "bytes" | "path-bytes" | "claude-plugin-registry" | "claude-marketplace-registry" | "claude-settings-v1" | "claude-settings-v2" | "claude-settings-v3" | "claude-marketplace-registry-v2";
+    hashMode?: "bytes" | "path-bytes" | "claude-plugin-registry" | "claude-marketplace-registry" | "claude-settings-v1" | "claude-settings-v2" | "claude-settings-v3" | "claude-marketplace-registry-v2" | "codex-settings-v1";
     managedPlugins?: ManagedPluginRegistrationWitness[];
     format?: "json" | "toml" | "yaml";
     fields?: string[];

package/dist/lib/agent-integration.d.ts

@@ -1,3 +1,4 @@
+import { type CodexNativeSkillCatalog } from "./codex-native-skill-catalog.js";
 import { type AgentDiscoveryBinding, type ReviewedDiscoveryInputs } from "./agent-discovery.js";
 import { type IntegrationAgent } from "./agent-adapters.js";
 import type { CodexHookDiscoveryRecovery } from "./codex-hook-discovery-recovery.js";
@@ -42,6 +43,30 @@ export interface AgentConfigChange {
     after: string;
 }
 export interface AgentIntegrationPlan {
+    observedNativeSources?: Array<{
+        path: string;
+        sha256: string;
+    }>;
+    codexPluginSkillReview?: {
+        version: string;
+        cwd: string;
+        catalogSha256: string;
+        configSha256: string | null;
+    };
+    observedSettings?: {
+        path: string;
+        before: string;
+    };
+    settingsWitnessUpgrade?: {
+        agent: "claude" | "codex";
+        path: string;
+        fromHashMode: string;
+        fromSha256: string;
+        toHashMode: string;
+        toSha256: string;
+        reviewedPreimage: string;
+        currentSettingsSha256: string;
+    };
     dataDir: string;
     profileId: string;
     changes: AgentConfigChange[];
@@ -87,6 +112,7 @@ export declare function inventoryNativeSkills(home?: string, options?: {
     allowRootAliases?: boolean;
     reviewedCacheAlias?: string;
     disabledVendorPaths?: readonly string[];
+    disabledVendorSkill?: (entry: NativeSkillEntry) => boolean;
 }): NativeSkillEntry[];
 /** Planning is read-only; credentials and unrelated settings never appear in CLI output. */
 export declare function planAgentIntegration(options: {
@@ -100,6 +126,7 @@ export declare function planAgentIntegration(options: {
     discoveryInputs?: ReviewedDiscoveryInputs;
     allowRootAliases?: boolean;
     reviewedCacheAlias?: string;
+    codexNativeCatalog?: CodexNativeSkillCatalog;
 }): AgentIntegrationPlan;
 /** Plan an explicitly authorized Stop hook replacement without adopting drift.
  * The caller owns authorization of its exact Stop hook delta; Skills refuses
@@ -119,6 +146,19 @@ export declare function planClaudePreToolUseHookUpdate(options: ClaudeHookUpdate
 export declare function planClaudeHookEventsUpdate(options: ClaudeHookUpdateOptions & {
     events: readonly ClaudeCoordinatedHookEvent[];
 }): AgentIntegrationPlan | null;
+/** Explicitly rebind one legacy review after exact preimage and semantic comparison.
+ * Runtime readers never relax the old witness. All other discovery sources,
+ * unknown settings, native controls and policy bytes remain guarded.
+ */
+export declare function planAgentSettingsWitnessUpgrade(options: {
+    agent: "claude" | "codex";
+    reviewedPreimage: string;
+    home?: string;
+    dataDir?: string;
+    projectDir?: string;
+    expectedPolicySha256: string;
+    expectedSettingsSha256: string;
+}): AgentIntegrationPlan;
 export declare function applyAgentIntegration(plan: AgentIntegrationPlan): {
     changed: string[];
     backups: string[];

package/dist/lib/claude-settings-witness.d.ts

@@ -9,6 +9,7 @@ export declare const CLAUDE_SETTINGS_WITNESS_LIMITS: Readonly<{
 export interface ClaudeSettingsWitnessBudget {
     remaining: number;
 }
+export declare function readNativeSettingsWitnessFile(path: string, budget: ClaudeSettingsWitnessBudget, filename?: "settings.json" | "config.toml"): string;
 /** Cooperating installers may replace only their explicitly selected event. Compare the strict syntax
  * trees, not JSON.parse values or the preference-tolerant witness digest: all
  * other hooks, discovery settings, unknown values and number spellings remain
@@ -47,6 +48,8 @@ export declare function hashClaudeSettingsReplacementV3(text: string, budget: Cl
  */
 export declare function upgradeClaudeSettingsWitness(previous: {
     path: string;
-    hashMode: "claude-settings-v1" | "claude-settings-v2";
+    hashMode?: "bytes" | "claude-settings-v1" | "claude-settings-v2";
     sha256: string;
 }, reviewedSettingsPath: string): ReturnType<typeof captureClaudeSettingsV3>;
+/** Strict bounded JSON control witness; metadata exclusion must be explicit. */
+export declare function hashNativeJsonControls(text: string, excludedMetadata?: "version"): string;

package/dist/lib/codex-hook-rpc.d.ts

@@ -1,4 +1,4 @@
-export declare const SUPPORTED_CODEX_HOOK_VERSIONS: readonly ["codex-cli 0.153.0", "codex-cli 0.154.0", "codex-cli 0.155.0", "codex-cli 0.155.1", "codex-cli 0.156.1", "codex-cli 0.157.0", "codex-cli 0.157.1", "codex-cli 0.158.0", "codex-cli 0.159.0"];
+export declare const SUPPORTED_CODEX_HOOK_VERSIONS: readonly ["codex-cli 0.153.0", "codex-cli 0.154.0", "codex-cli 0.155.0", "codex-cli 0.155.1", "codex-cli 0.156.1", "codex-cli 0.157.0", "codex-cli 0.157.1", "codex-cli 0.158.0", "codex-cli 0.159.0", "codex-cli 0.159.2"];
 export interface CodexHookRpc {
     version: string;
     processId?: number;
@@ -10,4 +10,5 @@ export declare function connectCodexHookRpc(options: {
     command: string;
     home: string;
     codexHome?: string;
+    timeoutMs?: number;
 }): Promise<CodexHookRpc>;

package/dist/lib/codex-native-skill-catalog.d.ts

@@ -0,0 +1,36 @@
+import { type CodexHookRpc } from "./codex-hook-rpc.js";
+export interface CodexNativeSkill {
+    /** Native qualified name, not a directory name or plugin identifier. */
+    name: string;
+    path: string;
+    enabled: boolean;
+    pluginId: string | null;
+}
+export interface CodexNativeSkillCatalog {
+    version: string;
+    cwd: string;
+    skills: CodexNativeSkill[];
+}
+/** Project the measured native skills/list contract without retaining descriptions,
+ * links, interfaces, errors, or any other untrusted native text. */
+export declare function projectCodexNativeSkillCatalog(response: unknown, cwd: string): CodexNativeSkill[];
+/** Read one consumer's catalog through an owned, bounded native client. The RPC
+ * transport owns request deadlines and child shutdown. Native discovery can
+ * maintain its own caches; callers must constrain writes when requiring isolation. */
+export declare function captureCodexNativeSkillCatalog(options: {
+    command: string;
+    home: string;
+    codexHome?: string;
+    cwd: string;
+    timeoutMs?: number;
+}, connect?: (options: {
+    command: string;
+    home: string;
+    codexHome?: string;
+    timeoutMs?: number;
+}) => Promise<CodexHookRpc>): Promise<CodexNativeSkillCatalog>;
+/** Evaluate already-selected user/session rules in native order. This is a rule
+ * projection, not proof that an existing live consumer adopted the rules. Names
+ * use exact equality; paths use native canonicalization with lexical fallback.
+ * Unknown fields remain the caller's property and are not rewritten here. */
+export declare function isCodexNativeSkillDisabled(skill: CodexNativeSkill, rules: unknown): boolean;

package/dist/lib/codex-plugin-skill-controls.d.ts

@@ -0,0 +1,16 @@
+import { type CodexNativeSkillCatalog } from "./codex-native-skill-catalog.js";
+export interface CodexPluginSkillControl {
+    name: string;
+    pluginId: string;
+    namespace: string;
+    pluginParent: string;
+    manifestSha256: string;
+    appSha256?: string;
+}
+type Read = (path: string) => string;
+/** Capability controls remain bound even after every native Skill body disappears. */
+export declare function reviewedCodexPluginCapabilitiesUnchanged(cache: string, controls: CodexPluginSkillControl[], read: Read): boolean;
+export declare function reviewCodexPluginSkillControls(catalog: CodexNativeSkillCatalog, documents: string[], cache: string, cwd: string, read: Read): CodexPluginSkillControl[];
+export declare function isReviewedCodexPluginSkillDisabled(document: string, cache: string, controls: CodexPluginSkillControl[], rules: unknown, read: Read): boolean;
+export declare function disableReviewedCodexPluginNames(text: string, controls: CodexPluginSkillControl[]): string;
+export {};

package/dist/lib/codex-settings-witness.d.ts

@@ -0,0 +1,12 @@
+import { type ClaudeSettingsWitnessBudget } from "./claude-settings-witness.js";
+export declare function hashCodexSettingsReplacement(text: string, budget?: ClaudeSettingsWitnessBudget): string;
+export declare function captureCodexSettings(path: string, budget?: ClaudeSettingsWitnessBudget): {
+    path: string;
+    hashMode: "codex-settings-v1";
+    sha256: string;
+};
+export declare function upgradeCodexSettingsWitness(previous: {
+    path: string;
+    hashMode?: "bytes";
+    sha256: string;
+}, reviewedSettingsPath: string): ReturnType<typeof captureCodexSettings>;

package/dist/lib/hook-diagnostics.d.ts

@@ -5,3 +5,5 @@ export declare class HookDiagnosticError extends Error {
 }
 export declare function hookChildError(stdout: string, stage: "context" | "sync"): HookDiagnosticError;
 export declare function hookFailureReason(error: unknown, profileId?: string): string;
+export declare function isOptionalHookContextFailure(error: unknown): error is HookDiagnosticError;
+export declare function hookUnavailableContext(error: HookDiagnosticError, profileId?: string): string;