@hasna/skills 0.10.19 → 0.10.20

package/bin/mcp.js

@@ -20019,7 +20019,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.19",
+    version: "0.10.20",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {

package/bin/migrate.js

@@ -7,7 +7,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.19",
+  version: "0.10.20",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/server.js

@@ -24122,7 +24122,7 @@ var init_dist_es9 = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.19",
+  version: "0.10.20",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/worker.js

@@ -24125,7 +24125,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.19",
+  version: "0.10.20",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/index.d.ts

@@ -71,4 +71,4 @@ export type { RemoteCreditCheckoutOptions, RemoteCreditCheckout, RemoteCreditChe
 export { assertPortableAuthoringPath, type PortableAuthoringPathOptions } from "./lib/authoring-path.js";
 export { CLAUDE_COORDINATED_HOOK_EVENTS, type ClaudeCoordinatedHookEvent } from "./lib/claude-settings-witness.js";
 export { captureCodexSettings, upgradeCodexSettingsWitness } from "./lib/codex-settings-witness.js";
-export { projectCodexNativeSkillCatalog, captureCodexNativeSkillCatalog, isCodexNativeSkillDisabled, type CodexNativeSkillCatalog, type CodexNativeSkill } from "./lib/codex-native-skill-catalog.js";
+export { projectCodexNativeSkillCatalog, projectCodexInstalledPlugins, projectCodexInstalledPluginEntries, captureCodexNativeSkillCatalog, isCodexNativeSkillDisabled, type CodexNativeSkillCatalog, type CodexNativeSkill, type CodexInstalledPlugin } from "./lib/codex-native-skill-catalog.js";

package/dist/index.js

@@ -7262,7 +7262,7 @@ import {
   statSync as statSync10,
   writeFileSync as writeFileSync8
 } from "fs";
-import { basename as basename10, dirname as dirname19, isAbsolute as isAbsolute17, join as join29, normalize as normalize3, relative as relative5, resolve as resolve17, sep as sep8 } from "path";
+import { basename as basename11, dirname as dirname19, isAbsolute as isAbsolute17, join as join29, normalize as normalize3, relative as relative6, resolve as resolve17, sep as sep8 } from "path";
 
 // src/lib/registry-data/index.ts
 var SKILLS = [];
@@ -8920,7 +8920,7 @@ var NATIVE_SKILL_ROOTS = [
 // src/lib/authoring-path.ts
 import { lstatSync as lstatSync22, realpathSync as realpathSync8 } from "fs";
 import { homedir as homedir6 } from "os";
-import { basename as basename9, dirname as dirname18, join as join28, resolve as resolve16, sep as sep7 } from "path";
+import { basename as basename10, dirname as dirname18, join as join28, resolve as resolve16, sep as sep7 } from "path";
 
 // src/lib/agent-adapters.ts
 var INTEGRATION_AGENTS = ["claude", "codex", "gemini", "opencode", "cursor", "hermes"];
@@ -9105,7 +9105,7 @@ function assertAgentPolicyCollections(policy) {
 // src/lib/agent-discovery.ts
 import { createHash as createHash17 } from "crypto";
 import { lstatSync as lstatSync21, readFileSync as readFileSync17, readdirSync as readdirSync10, realpathSync as realpathSync7 } from "fs";
-import { basename as basename8, dirname as dirname17, isAbsolute as isAbsolute16, join as join27, resolve as resolve15, sep as sep6 } from "path";
+import { basename as basename9, dirname as dirname17, isAbsolute as isAbsolute16, join as join27, resolve as resolve15, sep as sep6 } from "path";
 import { isDeepStrictEqual as isDeepStrictEqual3 } from "util";
 
 // node_modules/yaml/dist/index.js
@@ -9616,7 +9616,7 @@ function hashDiscoveryPathFile(path, budget, changes) {
 
 // src/lib/plugin-discovery.ts
 import { closeSync as closeSync10, constants as constants9, fstatSync as fstatSync10, lstatSync as lstatSync18, openSync as openSync10, opendirSync as opendirSync5, readSync as readSync8 } from "fs";
-import { basename as basename6, dirname as dirname14, isAbsolute as isAbsolute14, join as join26, resolve as resolve13 } from "path";
+import { basename as basename7, dirname as dirname14, isAbsolute as isAbsolute14, join as join26, resolve as resolve13 } from "path";
 
 // src/lib/plugin-admission.ts
 import { homedir as homedir5 } from "os";
@@ -10877,7 +10877,7 @@ function replaceSkillSession(expected, replacement, plan, options = {}, beforeCo
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.19",
+  version: "0.10.20",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -12710,7 +12710,7 @@ import {
   writeFileSync as writeFileSync5
 } from "fs";
 import { homedir as homedir3 } from "os";
-import { basename as basename5, dirname as dirname12, join as join18 } from "path";
+import { basename as basename6, dirname as dirname12, join as join18 } from "path";
 
 // src/lib/claude-settings-witness.ts
 import { createHash as createHash8 } from "crypto";
@@ -13024,7 +13024,7 @@ function hashNativeJsonControls(text2, excludedMetadata) {
 }
 
 // src/lib/codex-plugin-skill-controls.ts
-import { dirname as dirname10, join as join14, resolve as resolve9, sep as sep4 } from "path";
+import { basename as basename5, dirname as dirname10, join as join14, relative as relative4, resolve as resolve9, sep as sep4 } from "path";
 import { lstatSync as lstatSync12, readdirSync as readdirSync6, readlinkSync as readlinkSync3, realpathSync as realpathSync5 } from "fs";
 
 // src/lib/codex-native-skill-catalog.ts
@@ -13178,6 +13178,7 @@ async function connectCodexHookRpc(options) {
 var MAX_SKILLS = 4096;
 var MAX_NAME_BYTES = 1024;
 var MAX_PATH_BYTES = 16384;
+var MAX_PLUGIN_ID_BYTES = 1024;
 var SUPPORTED_NAME_CONTROL_VERSIONS = new Set(["codex-cli 0.159.2"]);
 function refuse() {
   throw new Error("CODEX_NATIVE_SKILL_CATALOG_INVALID");
@@ -13201,6 +13202,35 @@ function projectCodexNativeSkillCatalog(response, cwd) {
     return { name: value.name, path: value.path, enabled: value.enabled, pluginId: value.pluginId ?? null };
   });
 }
+function projectCodexInstalledPlugins(response) {
+  if (!object4(response) || !Array.isArray(response.marketplaces) || !Array.isArray(response.marketplaceLoadErrors) || response.marketplaceLoadErrors.length !== 0 || response.marketplaces.length > MAX_SKILLS)
+    refuse();
+  const plugins = [];
+  for (const marketplace of response.marketplaces) {
+    if (!object4(marketplace) || !scalar(marketplace.name, MAX_NAME_BYTES) || !Array.isArray(marketplace.plugins) || marketplace.plugins.length > MAX_SKILLS)
+      refuse();
+    for (const value of marketplace.plugins) {
+      if (!object4(value) || !scalar(value.id, MAX_PLUGIN_ID_BYTES) || !scalar(value.name, MAX_NAME_BYTES) || value.id !== `${value.name}@${marketplace.name}`)
+        refuse();
+      plugins.push({ ...value, marketplace: marketplace.name });
+    }
+  }
+  return projectCodexInstalledPluginEntries(plugins);
+}
+function projectCodexInstalledPluginEntries(value) {
+  if (!Array.isArray(value) || value.length > MAX_SKILLS)
+    refuse();
+  const ids = new Set;
+  return value.map((item) => {
+    if (!object4(item) || !scalar(item.id, MAX_PLUGIN_ID_BYTES) || !scalar(item.name, MAX_NAME_BYTES) || typeof item.installed !== "boolean" || typeof item.enabled !== "boolean" || item.localVersion !== null && !scalar(item.localVersion, MAX_NAME_BYTES))
+      refuse();
+    const at = item.id.lastIndexOf("@");
+    if (at < 1 || item.id.slice(0, at) !== item.name || at === item.id.length - 1 || ids.has(item.id))
+      refuse();
+    ids.add(item.id);
+    return { id: item.id, name: item.name, installed: item.installed, enabled: item.enabled, localVersion: item.localVersion ?? null };
+  });
+}
 async function captureCodexNativeSkillCatalog(options, connect = connectCodexHookRpc) {
   if (!absolutePath2(options.cwd) || !absolutePath2(options.home))
     refuse();
@@ -13214,7 +13244,13 @@ async function captureCodexNativeSkillCatalog(options, connect = connectCodexHoo
     if (!SUPPORTED_NAME_CONTROL_VERSIONS.has(rpc.version))
       throw new Error("CODEX_NATIVE_SKILL_CATALOG_UNSUPPORTED_VERSION");
     const response = await rpc.request("skills/list", { cwds: [options.cwd], forceReload: true });
-    return { version: rpc.version, cwd: options.cwd, skills: projectCodexNativeSkillCatalog(response, options.cwd) };
+    const installed = await rpc.request("plugin/installed", { cwds: [options.cwd] });
+    return {
+      version: rpc.version,
+      cwd: options.cwd,
+      skills: projectCodexNativeSkillCatalog(response, options.cwd),
+      plugins: projectCodexInstalledPlugins(installed)
+    };
   } finally {
     await rpc.close();
   }
@@ -13259,6 +13295,7 @@ function isCodexNativeSkillDisabled(skill, rules) {
 
 // src/lib/codex-plugin-skill-controls.ts
 var identifier2 = (v) => typeof v === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(v);
+var CODEX_DEFAULT_AGENT_PLUGIN_VERSION = "1.0.0";
 function refuse2() {
   throw new Error("CODEX_NATIVE_SKILL_IDENTITY_UNSUPPORTED: review native plugin names and hook controls");
 }
@@ -13297,6 +13334,9 @@ function rootControls(root, read2) {
   }
   if (!manifest || typeof manifest !== "object" || Array.isArray(manifest) || !identifier2(manifest.name))
     refuse2();
+  const cacheVersion = basename5(root), declaredVersion = manifest.version === undefined ? "" : typeof manifest.version === "string" ? manifest.version.trim() : null;
+  if (declaredVersion === null || (declaredVersion ? declaredVersion !== cacheVersion : cacheVersion !== CODEX_DEFAULT_AGENT_PLUGIN_VERSION))
+    refuse2();
   if (manifest.hooks !== undefined || manifest.mcpServers !== undefined || manifest.commands !== undefined || manifest.apps !== undefined && manifest.apps !== "./.app.json" || ["hooks", ".mcp.json"].some((path) => lstatSync12(join14(root, path), { throwIfNoEntry: false })))
     refuse2();
   const app = join14(root, ".app.json"), present = lstatSync12(app, { throwIfNoEntry: false });
@@ -13373,22 +13413,48 @@ function reviewedCodexPluginCapabilitiesUnchanged(cache, controls, read2) {
     return false;
   }
 }
-function reviewCodexPluginSkillControls(catalog, documents, cache, cwd, read2) {
+function reviewCodexPluginSkillControls(catalog, documents, cache, cwd, read2, rules) {
   if (catalog?.version !== "codex-cli 0.159.2" || catalog.cwd !== cwd)
     refuse2();
   const skills = projectCodexNativeSkillCatalog({ data: [{ cwd, errors: [], skills: catalog.skills }] }, cwd);
   const allowed = new Set(documents), result = [];
-  for (const skill of skills) {
-    if (!allowed.has(skill.path) || !skill.path.startsWith(cache + sep4))
+  let installedPlugins;
+  try {
+    installedPlugins = projectCodexInstalledPluginEntries(catalog.plugins ?? []);
+  } catch {
+    refuse2();
+  }
+  const candidates = catalog.plugins === undefined ? skills.map((skill) => skill.path).filter((path) => allowed.has(path)) : allowed;
+  for (const document2 of candidates) {
+    if (!document2.startsWith(cache + sep4))
       continue;
-    if (skills.filter((other) => other.name === skill.name).length !== 1)
+    const parsed = identity3(document2, cache, read2);
+    if (parsed.name === "skills-cli" || parsed.name.endsWith(":skills-cli"))
+      refuse2();
+    const cacheParts = relative4(cache, parsed.pluginParent).split(sep4);
+    if (cacheParts.length !== 2 || cacheParts.some((part) => !identifier2(part)))
       refuse2();
-    if (!skill.pluginId || skill.name === "skills-cli" || skill.name.endsWith(":skills-cli"))
+    const [marketplace, pluginName] = cacheParts;
+    if (pluginName !== parsed.namespace)
       refuse2();
-    const parsed = identity3(skill.path, cache, read2);
-    if (parsed.name !== skill.name)
+    const expectedPluginId = `${pluginName}@${marketplace}`;
+    const listed = skills.filter((skill) => skill.path === document2);
+    if (listed.length > 1)
       refuse2();
-    result.push({ ...parsed, pluginId: skill.pluginId });
+    if (listed.length === 1) {
+      if (listed[0].name !== parsed.name || listed[0].pluginId !== expectedPluginId)
+        refuse2();
+    } else {
+      const installed = installedPlugins.filter((plugin) => plugin.id === expectedPluginId && plugin.name === pluginName);
+      if (installed.length !== 1 || !installed[0].installed || !installed[0].enabled || !installed[0].localVersion)
+        refuse2();
+      if (installed[0].localVersion !== basename5(dirname10(dirname10(dirname10(document2)))))
+        continue;
+      const exactPathDeny = Array.isArray(rules) && rules.some((rule) => rule?.path === document2 && rule?.enabled === false);
+      if (!exactPathDeny || !isCodexNativeSkillDisabled({ name: parsed.name, path: document2, pluginId: expectedPluginId, enabled: true }, rules))
+        refuse2();
+    }
+    result.push({ ...parsed, pluginId: expectedPluginId });
   }
   if (!result.length || new Set(result.map((item) => item.name)).size !== result.length)
     refuse2();
@@ -13531,7 +13597,7 @@ function upgradeCodexSettingsWitness(previous, reviewedSettingsPath) {
 // src/lib/agent-integration.ts
 import { createHash as createHash11, randomUUID as randomUUID2 } from "crypto";
 import { existsSync as existsSync8, lstatSync as lstatSync15, statSync as statSync8, mkdirSync as mkdirSync5, readFileSync as readFileSync12, readdirSync as readdirSync8, opendirSync as opendirSync3, readlinkSync as readlinkSync4, realpathSync as realpathSync6, renameSync as renameSync2, rmdirSync as rmdirSync2, writeFileSync as writeFileSync4, unlinkSync as unlinkSync3, chmodSync, openSync as openSync8, closeSync as closeSync8, fsyncSync as fsyncSync2, fstatSync as fstatSync8, readSync as readSync6, constants as constants7, linkSync } from "fs";
-import { dirname as dirname11, join as join17, resolve as resolve10, relative as relative4, isAbsolute as isAbsolute11, sep as sep5 } from "path";
+import { dirname as dirname11, join as join17, resolve as resolve10, relative as relative5, isAbsolute as isAbsolute11, sep as sep5 } from "path";
 import { homedir as homedir2 } from "os";
 
 // src/lib/managed-policy.ts
@@ -13950,7 +14016,7 @@ function readRootAlias(home, agent) {
   const targetStat = lstatSync15(targetPath, { throwIfNoEntry: false });
   if (!targetStat?.isDirectory())
     throw new Error(`Agent root alias must target an existing directory: ${alias}`);
-  const target = realpathSync6(targetPath), inside = relative4(realHome, target);
+  const target = realpathSync6(targetPath), inside = relative5(realHome, target);
   if (!inside || inside === ".." || inside.startsWith(`..${sep5}`) || isAbsolute11(inside))
     throw new Error(`Agent root alias target must be inside the real home: ${alias}`);
   return { agent, home: realHome, alias, target, link, aliasIdentity: `${stat.dev}:${stat.ino}:${stat.ctimeNs}`, targetIdentity: `${targetStat.dev}:${targetStat.ino}` };
@@ -13968,7 +14034,7 @@ function rootAliases(home, allowed = false) {
 }
 function canonicalAgentPath(path, aliases) {
   const absolute = resolve10(path), binding = aliases.find((item) => absolute === item.alias || absolute.startsWith(item.alias + sep5));
-  return binding ? join17(binding.target, relative4(binding.alias, absolute)) : absolute;
+  return binding ? join17(binding.target, relative5(binding.alias, absolute)) : absolute;
 }
 function disabledCodexSkillPaths(config, aliases) {
   const skills = config.skills;
@@ -14039,7 +14105,7 @@ function treeHash(root) {
     const stat = lstatSync15(path);
     if (stat.isSymbolicLink())
       throw new Error(`Refusing symlink in skill: ${path}`);
-    const rel = relative4(root, path);
+    const rel = relative5(root, path);
     if (stat.isDirectory()) {
       hash2.update(`d\x00${rel}\x00`);
       for (const name of readdirSync8(path).sort())
@@ -14065,7 +14131,7 @@ function selectNativeMigrationTargets(inventory, manifest) {
   const identities = new Set;
   const selected = [];
   for (const target of manifest.targets) {
-    const projectRoot = resolve10(target.projectRoot), normalized = relative4(projectRoot, resolve10(projectRoot, target.path));
+    const projectRoot = resolve10(target.projectRoot), normalized = relative5(projectRoot, resolve10(projectRoot, target.path));
     if (!isAbsolute11(target.projectRoot) || projectRoot !== target.projectRoot || !existsSync8(projectRoot) || !lstatSync15(projectRoot).isDirectory())
       throw new Error(`Native migration target project root must be an existing absolute directory: ${target.projectRoot}`);
     assertSafePath(projectRoot);
@@ -14420,7 +14486,7 @@ function planAgentIntegration(options) {
     const bytes = readNativeBytes(path, 1024 * 1024);
     observedNativeSources.push({ path, sha256: sha2(bytes) });
     return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
-  }) : policy.bridge?.codexPluginSkills ?? [];
+  }, codexConfig.skills?.config ?? []) : policy.bridge?.codexPluginSkills ?? [];
   const changes = [];
   for (const agent of [...new Set(options.agents)]) {
     if (!INTEGRATION_AGENTS.includes(agent))
@@ -14498,7 +14564,7 @@ function planAgentIntegration(options) {
     profiles: Object.fromEntries([...new Set([...priorAgents, ...options.agents])].sort().map((agent) => [agent, bindings.get(agent)?.profileId ?? policy.bridge?.profiles?.[agent] ?? policy.profileId])),
     disabledBuiltins: options.agents.includes("codex") ? nativeSkills.filter((entry) => entry.agent === "codex" && entry.vendor && entry.path.startsWith(canonicalAgentPath(join17(home, ".codex", "skills", ".system"), aliases) + sep5)).map((entry) => ({ path: entry.path, hash: entry.hash })) : policy.bridge?.disabledBuiltins ?? [],
     rootAliases: aliases,
-    ...codexPluginSkills.length ? { codexPluginSkills, codexPluginSkillReview: options.codexNativeCatalog ? { version: options.codexNativeCatalog.version, cwd: options.codexNativeCatalog.cwd, catalogSha256: sha2(JSON.stringify({ version: options.codexNativeCatalog.version, cwd: options.codexNativeCatalog.cwd, skills: projectCodexNativeSkillCatalog({ data: [{ cwd: options.codexNativeCatalog.cwd, errors: [], skills: options.codexNativeCatalog.skills }] }, options.codexNativeCatalog.cwd) })), configSha256: changes.find((change) => change.path === canonicalAgentPath(join17(home, ".codex/config.toml"), aliases))?.before === null ? null : sha2(readOptional(canonicalAgentPath(join17(home, ".codex/config.toml"), aliases)) ?? "") } : policy.bridge?.codexPluginSkillReview } : {},
+    ...codexPluginSkills.length ? { codexPluginSkills, codexPluginSkillReview: options.codexNativeCatalog ? { version: options.codexNativeCatalog.version, cwd: options.codexNativeCatalog.cwd, catalogSha256: sha2(JSON.stringify({ version: options.codexNativeCatalog.version, cwd: options.codexNativeCatalog.cwd, skills: projectCodexNativeSkillCatalog({ data: [{ cwd: options.codexNativeCatalog.cwd, errors: [], skills: options.codexNativeCatalog.skills }] }, options.codexNativeCatalog.cwd), ...options.codexNativeCatalog.plugins === undefined ? {} : { plugins: projectCodexInstalledPluginEntries(options.codexNativeCatalog.plugins) } })), configSha256: changes.find((change) => change.path === canonicalAgentPath(join17(home, ".codex/config.toml"), aliases))?.before === null ? null : sha2(readOptional(canonicalAgentPath(join17(home, ".codex/config.toml"), aliases)) ?? "") } : policy.bridge?.codexPluginSkillReview } : {},
     discovery: { ...policy.bridge?.discovery, ...Object.fromEntries(discoveryAfter.map((binding) => [binding.agent, binding])) }
   } };
   const serializedPolicy = serializeManagedSkillPolicy(nextPolicy);
@@ -14516,7 +14582,7 @@ function planClaudePreToolUseHookUpdate(options) {
 function claudeSettingsConsumers(home, path, discoveries, aliases) {
   const canonical4 = (value) => canonicalAgentPath(value, aliases);
   const containsSettings = (root) => {
-    const distance = relative4(canonical4(root), path);
+    const distance = relative5(canonical4(root), path);
     return distance === "" || distance !== ".." && !distance.startsWith(`..${sep5}`) && !isAbsolute11(distance);
   };
   return discoveries.filter((binding) => binding.agent === "claude" || binding.agent === "opencode" || canonical4(join17(home, AGENT_ADAPTERS[binding.agent].config)) === path || binding.sources.some((source) => canonical4(source.path) === path) || binding.roots.some(containsSettings) || binding.directories?.some((directory) => containsSettings(directory.path))).map((binding) => binding.agent);
@@ -15261,7 +15327,7 @@ function writeManagedSkillDir(dir, skillMd, options) {
     return { action, path: skillMdPath };
   const parentDir = dirname12(dir);
   mkdirSync6(parentDir, { recursive: true });
-  const transactionDir = mkdtempSync(join18(parentDir, `.hasna-skills-write-${basename5(dir)}-`));
+  const transactionDir = mkdtempSync(join18(parentDir, `.hasna-skills-write-${basename6(dir)}-`));
   const candidateDir = join18(transactionDir, "candidate");
   const backupDir = join18(transactionDir, "backup");
   const candidateSkillMdPath = join18(candidateDir, "SKILL.md");
@@ -16566,7 +16632,7 @@ function directoryNames(path) {
 function snapshotPluginTree(root, options = {}) {
   const chain = ancestors(root), entries = [], files = [], directories = [];
   let bytes = 0, visited = 0;
-  const visit2 = (directory, relative5) => {
+  const visit2 = (directory, relative6) => {
     const before = stat(directory);
     pluginNeed(before && before.isDirectory() && !before.isSymbolicLink(), "Plugin tree must contain real directories");
     const names = directoryNames(directory);
@@ -16574,18 +16640,18 @@ function snapshotPluginTree(root, options = {}) {
     directories.push({ path: directory, stat: before, names });
     for (const name of names) {
       pluginNeed(++visited <= PLUGIN_PROJECTION_LIMITS.files * 50, "Plugin tree membership exceeds its limit");
-      const path = relative5 ? `${relative5}/${name}` : name;
+      const path = relative6 ? `${relative6}/${name}` : name;
       pluginNeed(new TextEncoder().encode(path).byteLength <= 100 && !/[\\:\x00-\x1f\x7f]/u.test(path), "Plugin entry path exceeds its limit or is unsafe");
       const absolute = join23(directory, name), entryStat = stat(absolute);
       pluginNeed(entryStat, "Plugin tree member disappeared");
-      if (relative5 === "" && name === ".orphaned_at" && (options.nativeRuntime === "claude-2.1.274" || options.nativeRuntime === "claude-2.1.276")) {
+      if (relative6 === "" && name === ".orphaned_at" && (options.nativeRuntime === "claude-2.1.274" || options.nativeRuntime === "claude-2.1.276")) {
         const bytes2 = readBytes(absolute, 32, "native-pin");
         pluginNeed(/^[1-9][0-9]{12}$/.test(new TextDecoder().decode(bytes2)), "Malformed native orphan timestamp");
         same3(entryStat, stat(absolute));
         files.push({ path: absolute, stat: entryStat });
         continue;
       }
-      if (relative5 === "" && name === ".in_use" && (options.nativeRuntime === "claude-2.1.274" || options.nativeRuntime === "claude-2.1.276")) {
+      if (relative6 === "" && name === ".in_use" && (options.nativeRuntime === "claude-2.1.274" || options.nativeRuntime === "claude-2.1.276")) {
         pluginNeed(entryStat.isDirectory() && !entryStat.isSymbolicLink(), "Native plugin pins require a real directory");
         owner(entryStat);
         const pins = directoryNames(absolute);
@@ -17268,7 +17334,7 @@ function hashManagedPluginRegistry(path, managed) {
       pluginNeed(/^(?:[A-Za-z0-9][A-Za-z0-9._+-]*-)?[a-f0-9]{12}$/.test(row.version) && row.installPath === join26(cacheRoot, row.version), "Managed plugin cache path or version is outside its registration");
       const approval = (producer) => {
         pluginText(producer);
-        const digest = `sha256:${basename6(producer)}`;
+        const digest = `sha256:${basename7(producer)}`;
         const receipt2 = readPluginAdmissionReceipt(witness.storeRoot, witness.bindingId, digest);
         pluginNeed(receipt2.materializedPath === producer, "Managed producer path is not an approved immutable projection");
         if (!verified.has(producer)) {
@@ -17332,7 +17398,7 @@ function captureManagedPluginRegistry(path, managedPlugins) {
 // src/lib/claude-marketplace-registry.ts
 import { createHash as createHash14 } from "crypto";
 import { closeSync as closeSync11, constants as constants10, fstatSync as fstatSync11, lstatSync as lstatSync19, openSync as openSync11, readSync as readSync9 } from "fs";
-import { basename as basename7, dirname as dirname15, isAbsolute as isAbsolute15, resolve as resolve14 } from "path";
+import { basename as basename8, dirname as dirname15, isAbsolute as isAbsolute15, resolve as resolve14 } from "path";
 var CLAUDE_MARKETPLACE_REGISTRY_LIMITS = Object.freeze({ bytes: 1024 * 1024, rows: 1024, depth: 32, nodes: 65536, stringCharacters: 16384, pathCharacters: 4096 });
 function need4(value, reason) {
   if (!value)
@@ -17354,7 +17420,7 @@ function parents2(path) {
 }
 function readRegistry2(path, budget) {
   absolutePath3(path);
-  need4(basename7(path) === "known_marketplaces.json", "requires known_marketplaces.json");
+  need4(basename8(path) === "known_marketplaces.json", "requires known_marketplaces.json");
   need4(Number.isSafeInteger(budget.remaining) && budget.remaining >= 0, "has an invalid byte budget");
   const ancestors2 = parents2(path), initial = lstatSync19(path, { bigint: true });
   need4(initial.isFile() && !initial.isSymbolicLink() && initial.size <= BigInt(CLAUDE_MARKETPLACE_REGISTRY_LIMITS.bytes), "is not a bounded regular file");
@@ -17694,9 +17760,9 @@ function verifyAgentDiscovery(binding, codexRecovery) {
     safe4(root2);
 }
 function assertMarketplaceBinding(binding, source) {
-  if (source.hashMode === "codex-settings-v1" && (binding.agent !== "codex" || binding.method !== "reviewed" || basename8(source.path) !== "config.toml"))
+  if (source.hashMode === "codex-settings-v1" && (binding.agent !== "codex" || binding.method !== "reviewed" || basename9(source.path) !== "config.toml"))
     throw new Error("Codex settings witnesses require explicit reviewed Codex configuration");
-  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || source.hashMode === "claude-settings-v3") && (binding.agent !== "claude" || binding.method !== "reviewed" || basename8(source.path) !== "settings.json"))
+  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || source.hashMode === "claude-settings-v3") && (binding.agent !== "claude" || binding.method !== "reviewed" || basename9(source.path) !== "settings.json"))
     throw new Error("Claude settings witnesses require explicit reviewed Claude configuration");
   if ((source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2") && (binding.agent !== "claude" || binding.method !== "reviewed"))
     throw new Error("Claude marketplace witnesses require explicit reviewed Claude discovery");
@@ -17993,7 +18059,7 @@ function physicalPath(path) {
   let cursor = resolve16(path);
   const suffix = [];
   while (!lstatSync22(cursor, { throwIfNoEntry: false })) {
-    suffix.unshift(basename9(cursor));
+    suffix.unshift(basename10(cursor));
     const parent = dirname18(cursor);
     if (parent === cursor)
       return resolve16(path);
@@ -18212,7 +18278,7 @@ function physicalImportPath(path) {
   let ancestor = resolve17(path);
   const suffix = [];
   while (!existsSync13(ancestor)) {
-    suffix.unshift(basename10(ancestor));
+    suffix.unshift(basename11(ancestor));
     ancestor = dirname19(ancestor);
   }
   return join29(realpathSync9(ancestor), ...suffix);
@@ -18221,7 +18287,7 @@ function assertDisjointImportPaths(source, destination) {
   const sourcePath = realpathSync9(source);
   const destinationPath = physicalImportPath(destination);
   const contains2 = (parent, child) => {
-    const path = relative5(parent, child);
+    const path = relative6(parent, child);
     return path === "" || !isAbsolute17(path) && path !== ".." && !path.startsWith(`..${sep8}`);
   };
   if (contains2(sourcePath, destinationPath) || contains2(destinationPath, sourcePath)) {
@@ -18237,8 +18303,8 @@ function portPortableSkill(sourcePath, options = {}) {
   const explicitName = options.name != null;
   const skillName = normalizeNewPortableSkillName(options.name ?? inferred.name);
   if (isOfficialSkillName(skillName) && !options.allowShadow) {
-    const sourceSlug = safeNormalizeName(basename10(absoluteSource));
-    const via = explicitName ? `Name '${skillName}' matches a bundled official skill.` : `Inferred name '${skillName}'${sourceSlug && sourceSlug !== skillName ? ` (from source folder '${basename10(absoluteSource)}')` : ""} matches a bundled official skill.`;
+    const sourceSlug = safeNormalizeName(basename11(absoluteSource));
+    const via = explicitName ? `Name '${skillName}' matches a bundled official skill.` : `Inferred name '${skillName}'${sourceSlug && sourceSlug !== skillName ? ` (from source folder '${basename11(absoluteSource)}')` : ""} matches a bundled official skill.`;
     throw new Error(`${via} Importing it would shadow the official '${skillName}'. ` + `Pass --name to choose a different name, or --allow-shadow to override deliberately.`);
   }
   const readOnlyDestination = join29(resolvePortableSkillsRoot(options, false), skillName);
@@ -18821,7 +18887,7 @@ function getAllTags() {
 // src/lib/run-state.ts
 import { createHash as createHash18, randomBytes } from "crypto";
 import { existsSync as existsSync15, mkdirSync as mkdirSync10, readFileSync as readFileSync19, readdirSync as readdirSync13, statSync as statSync11, writeFileSync as writeFileSync9 } from "fs";
-import { extname, join as join31, relative as relative6 } from "path";
+import { extname, join as join31, relative as relative7 } from "path";
 function createSkillRun(params, targetDir = process.cwd()) {
   const now = new Date;
   const id = createRunId(now);
@@ -18977,7 +19043,7 @@ function createRunId(now) {
   return `run_${now.getTime().toString(36)}_${randomBytes(4).toString("hex")}`;
 }
 function toProjectRelative(targetDir, path) {
-  const rel = relative6(targetDir, path).split(/[\\/]/).join("/");
+  const rel = relative7(targetDir, path).split(/[\\/]/).join("/");
   return rel.startsWith(".") ? rel : `./${rel}`;
 }
 function mimeForPath(path) {
@@ -41951,7 +42017,7 @@ function findSkillsParityForMcpTool(tool) {
 }
 // src/lib/registry-sync.ts
 import { mkdirSync as mkdirSync13, writeFileSync as writeFileSync12 } from "fs";
-import { dirname as dirname21, relative as relative7 } from "path";
+import { dirname as dirname21, relative as relative8 } from "path";
 function createRegistrySyncArtifact(options = {}) {
   const profile = options.profile ?? "all";
   const includeDocs = options.includeDocs ?? true;
@@ -41963,7 +42029,7 @@ function createRegistrySyncArtifact(options = {}) {
   const registry2 = [...loadRegistryProfile(profile)].sort((a, b) => a.name.localeCompare(b.name));
   const skills = registry2.map((skill) => {
     const skillPath = getSkillPath(skill.name);
-    const directory2 = relative7(process.cwd(), skillPath) || skillPath;
+    const directory2 = relative8(process.cwd(), skillPath) || skillPath;
     const validation = includeValidation ? validateSkillDirectory(skill.name, skillPath, skill) : undefined;
     const docs = includeDocs ? buildDocs(skill.name) : undefined;
     return {
@@ -43161,7 +43227,7 @@ import {
   statSync as statSync12,
   writeFileSync as writeFileSync13
 } from "fs";
-import { dirname as dirname23, join as join35, normalize as normalize4, relative as relative8, sep as sep9 } from "path";
+import { dirname as dirname23, join as join35, normalize as normalize4, relative as relative9, sep as sep9 } from "path";
 var SKILLS_STORAGE_TABLES = [
   "skills_sync_records",
   "skills_sync_cursors"
@@ -43324,7 +43390,7 @@ function exportSkillsLocalSnapshot(targetDir = process.cwd(), options = {}) {
   if (existsSync19(projectStateDir)) {
     for (const filePath of walkFiles2(projectStateDir)) {
       const bytes = readFileSync23(filePath);
-      const relativePath = toPosix(relative8(targetDir, filePath));
+      const relativePath = toPosix(relative9(targetDir, filePath));
       files.push({
         path: relativePath,
         sizeBytes: bytes.byteLength,
@@ -43745,7 +43811,7 @@ import {
   statSync as statSync14,
   writeFileSync as writeFileSync14
 } from "fs";
-import { dirname as dirname24, isAbsolute as isAbsolute19, relative as relative9, resolve as resolve18, sep as sep11 } from "path";
+import { dirname as dirname24, isAbsolute as isAbsolute19, relative as relative10, resolve as resolve18, sep as sep11 } from "path";
 
 // src/lib/portable-snapshot-filter.ts
 import { readdirSync as readdirSync15, statSync as statSync13 } from "fs";
@@ -44010,7 +44076,7 @@ function writeStationSnapshot(options) {
   const untouched = [];
   for (const plan of plans) {
     const destination = resolve18(repoRoot, plan.destination);
-    const destinationRelative = relative9(repoRoot, destination);
+    const destinationRelative = relative10(repoRoot, destination);
     if (destinationRelative.startsWith("..") || destinationRelative.startsWith(sep11) || isAbsolute19(destinationRelative)) {
       throw new StationSnapshotError("DESTINATION_ESCAPE", `destination escapes repo root: ${plan.destination}`);
     }
@@ -44613,9 +44679,9 @@ async function buildSkillContext(input2, options = {}) {
   if (prompt.length > 128 * 1024 || (input2.paths?.length ?? 0) > 100 || (input2.skills?.length ?? 0) > 100) {
     throw new SkillSelectionError("CONTEXT_INPUT_TOO_LARGE", "The Skills context input exceeds its size limit.");
   }
-  const maxChars = options.maxChars ?? 8000;
+  const maxChars = options.maxChars;
   const maxSkills = options.maxSkills ?? 3;
-  if (!Number.isInteger(maxChars) || maxChars < 512 || maxChars > 64000 || !Number.isInteger(maxSkills) || maxSkills < 1 || maxSkills > 20) {
+  if (maxChars !== undefined && (!Number.isInteger(maxChars) || maxChars < 512 || maxChars > 64000) || !Number.isInteger(maxSkills) || maxSkills < 1 || maxSkills > 20) {
     throw new SkillSelectionError("INVALID_CONTEXT_BUDGET", "Context limits must be 512\u201364000 characters and 1\u201320 skills.");
   }
   const profileId = input2.profileId ?? "default";
@@ -44672,7 +44738,7 @@ async function buildSkillContext(input2, options = {}) {
     const { content } = readSelectedDocument(entries);
     const section = `Skill ${selection.slug}@${selection.version} (${selection.bundleDigest}; ${reason})
 ${content}`;
-    if (chars + section.length + (sections.length ? 2 : 0) > maxChars) {
+    if (maxChars !== undefined && chars + section.length + (sections.length ? 2 : 0) > maxChars) {
       omitted.push({ slug: selection.slug, version: selection.version, reason: "context-budget", loadCommand });
       continue;
     }
@@ -44871,6 +44937,8 @@ export {
   publicDiscoveryDocumentation,
   publicDiscoveryDependencies,
   projectCodexNativeSkillCatalog,
+  projectCodexInstalledPlugins,
+  projectCodexInstalledPluginEntries,
   preparePrivatePublication,
   portPortableSkillDirectory,
   portPortableSkill,

package/dist/lib/codex-native-skill-catalog.d.ts

@@ -10,10 +10,26 @@ export interface CodexNativeSkillCatalog {
     version: string;
     cwd: string;
     skills: CodexNativeSkill[];
+    /** Added in 0.10.20; older reviewed skills/list receipts remain valid for listed skills. */
+    plugins?: CodexInstalledPlugin[];
+}
+/** Safe installed-plugin identity needed when Codex hides a path-disabled skill. */
+export interface CodexInstalledPlugin {
+    id: string;
+    name: string;
+    installed: boolean;
+    enabled: boolean;
+    localVersion: string | null;
 }
 /** Project the measured native skills/list contract without retaining descriptions,
  * links, interfaces, errors, or any other untrusted native text. */
 export declare function projectCodexNativeSkillCatalog(response: unknown, cwd: string): CodexNativeSkill[];
+/** Project only the installed plugin identity needed to bind cache inventory.
+ * Marketplace errors fail closed because an incomplete inventory cannot prove
+ * that an absent skill belongs to the one measured installed plugin. */
+export declare function projectCodexInstalledPlugins(response: unknown): CodexInstalledPlugin[];
+/** Validate the bounded stored projection when it is consumed by a review. */
+export declare function projectCodexInstalledPluginEntries(value: unknown): CodexInstalledPlugin[];
 /** Read one consumer's catalog through an owned, bounded native client. The RPC
  * transport owns request deadlines and child shutdown. Native discovery can
  * maintain its own caches; callers must constrain writes when requiring isolation. */

package/dist/lib/codex-plugin-skill-controls.d.ts

@@ -10,7 +10,7 @@ export interface CodexPluginSkillControl {
 type Read = (path: string) => string;
 /** Capability controls remain bound even after every native Skill body disappears. */
 export declare function reviewedCodexPluginCapabilitiesUnchanged(cache: string, controls: CodexPluginSkillControl[], read: Read): boolean;
-export declare function reviewCodexPluginSkillControls(catalog: CodexNativeSkillCatalog, documents: string[], cache: string, cwd: string, read: Read): CodexPluginSkillControl[];
+export declare function reviewCodexPluginSkillControls(catalog: CodexNativeSkillCatalog, documents: string[], cache: string, cwd: string, read: Read, rules: unknown): CodexPluginSkillControl[];
 export declare function isReviewedCodexPluginSkillDisabled(document: string, cache: string, controls: CodexPluginSkillControl[], rules: unknown, read: Read): boolean;
 export declare function disableReviewedCodexPluginNames(text: string, controls: CodexPluginSkillControl[]): string;
 export {};