@hasna/skills 0.10.23 → 0.10.25

package/dist/lib/agent-discovery-directories.d.ts

@@ -4,5 +4,5 @@ export interface DiscoveryDirectory {
     sha256: string | null;
 }
 /** Read-only capture; callers must review both membership and source bytes. */
-export declare function captureDiscoveryDirectories(paths: string[]): DiscoveryDirectory[];
-export declare function verifyDiscoveryDirectories(directories: DiscoveryDirectory[]): void;
+export declare function captureDiscoveryDirectories(paths: string[], excludedRoots?: readonly string[]): DiscoveryDirectory[];
+export declare function verifyDiscoveryDirectories(directories: DiscoveryDirectory[], excludedRoots?: readonly string[]): void;

package/dist/lib/agent-discovery.d.ts

@@ -2,6 +2,7 @@ import type { IntegrationAgent } from "./agent-adapters.js";
 import { type DiscoveryDirectory } from "./agent-discovery-directories.js";
 import { type ManagedPluginRegistrationWitness } from "./plugin-discovery.js";
 import { type CodexHookDiscoveryRecovery } from "./codex-hook-discovery-recovery.js";
+import { type CodexPluginSourceInput } from "./codex-plugin-skill-controls.js";
 export { captureDiscoveryDirectories, type DiscoveryDirectory } from "./agent-discovery-directories.js";
 export interface DiscoverySource {
     path: string;
@@ -18,6 +19,12 @@ export interface AgentDiscoveryBinding {
     directories?: DiscoveryDirectory[];
     method: "automatic" | "reviewed";
     builtinNames?: string[];
+    codexInstallationInputs?: {
+        version: "codex-cli 0.160.0";
+        catalogSha256: string;
+        plugins: CodexPluginSourceInput[];
+        directories?: DiscoveryDirectory[];
+    };
 }
 export interface ReviewedDiscoveryInputs {
     version: 1;

package/dist/lib/agent-integration.d.ts

@@ -117,6 +117,7 @@ export declare function inventoryNativeSkills(home?: string, options?: {
     reviewedCacheAlias?: string;
     disabledVendorPaths?: readonly string[];
     disabledVendorSkill?: (entry: NativeSkillEntry) => boolean;
+    codexInstallationInputRoots?: readonly string[];
 }): NativeSkillEntry[];
 /** Planning is read-only; credentials and unrelated settings never appear in CLI output. */
 export declare function planAgentIntegration(options: {

package/dist/lib/codex-native-skill-catalog.d.ts

@@ -22,8 +22,16 @@ export interface CodexInstalledPlugin {
     localVersion: string | null;
     /** Native remote identity; never a guessed installed cache version. */
     remotePluginId?: string;
-    sourceType?: "remote";
+    sourceType?: "remote" | "local" | "git" | "npm";
+    /** Fingerprint of the complete native nonremote source declaration. */
+    sourceSha256?: string;
+    /** Declared local installation input, distinct from the loaded cache root. */
+    sourcePath?: string;
 }
+/** Codex 0.160 derives remote installed keys from these native scope realms.
+ * A nonremote declaration in one of them cannot prove config-owned enablement:
+ * remote reconciliation may replace enabled even while config stays disabled. */
+export declare function codexPluginSourceIsConfigControlled(plugin: Pick<CodexInstalledPlugin, "id" | "sourceType" | "sourceSha256" | "remotePluginId">): boolean;
 export declare const remotePluginIdentifier: (value: unknown) => value is string;
 /** Project the measured native skills/list contract without retaining descriptions,
  * links, interfaces, errors, or any other untrusted native text. */

package/dist/lib/codex-plugin-skill-controls.d.ts

@@ -9,10 +9,37 @@ export interface CodexPluginSkillControl {
     mcpSha256?: string;
     remotePluginId?: string;
 }
+/** A native nonremote installation disabled by the witnessed configuration.
+ * Its cache is inert; this makes no claim about reviewed hook capabilities. */
+export interface CodexInactivePluginControl {
+    pluginId: string;
+    namespace: string;
+    pluginParent: string;
+    sourceType: "local" | "git" | "npm";
+    sourceSha256: string;
+}
+export interface CodexPluginSourceInput {
+    pluginId: string;
+    namespace: string;
+    pluginParent: string;
+    sourceRoot: string;
+    sourceSha256: string;
+}
 type Read = (path: string) => string;
 /** Capability controls remain bound even after every native Skill body disappears. */
 export declare function reviewedCodexPluginCapabilitiesUnchanged(cache: string, controls: CodexPluginSkillControl[], read: Read): boolean;
-export declare function reviewCodexPluginSkillControls(catalog: CodexNativeSkillCatalog, documents: string[], cache: string, cwd: string, read: Read, rules: unknown): CodexPluginSkillControl[];
+export declare function reviewCodexPluginControls(catalog: CodexNativeSkillCatalog, documents: string[], cache: string, cwd: string, read: Read, rules: unknown, pluginSettings?: unknown): {
+    skills: CodexPluginSkillControl[];
+    inactivePlugins: CodexInactivePluginControl[];
+    sourceInputs: CodexPluginSourceInput[];
+};
+/** Validate installation-input roles before omitting them from runtime inventory.
+ * Discovery witnesses still cover the sources; migration inventory stays full. */
+export declare function reviewedCodexPluginSourceRoots(cache: string, inputs: CodexPluginSourceInput[], read: Read): string[];
+export declare function reviewCodexPluginSkillControls(catalog: CodexNativeSkillCatalog, documents: string[], cache: string, cwd: string, read: Read, rules: unknown, pluginSettings?: unknown): CodexPluginSkillControl[];
+/** Cache refresh cannot reactivate a config-controlled disabled installation.
+ * The caller verifies discovery/config witnesses before consuming this result. */
+export declare function isReviewedCodexPluginInactive(document: string, cache: string, controls: CodexInactivePluginControl[], pluginSettings: unknown, rules: unknown, read: Read): boolean;
 export declare function isReviewedCodexPluginSkillDisabled(document: string, cache: string, controls: CodexPluginSkillControl[], rules: unknown, read: Read): boolean;
 export declare function disableReviewedCodexPluginNames(text: string, controls: CodexPluginSkillControl[]): string;
 export {};