@hasna/skills 0.10.26 → 0.10.28
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +29 -0
- package/bin/index.js +438 -326
- package/bin/mcp.js +265 -117
- package/bin/migrate.js +1 -1
- package/bin/server.js +1 -1
- package/bin/worker.js +1 -1
- package/dist/index.d.ts +1 -1
- package/dist/index.js +327 -218
- package/dist/lib/agent-discovery.d.ts +1 -1
- package/dist/lib/agent-integration.d.ts +1 -0
- package/dist/lib/codex-local-mcp-controls.d.ts +4 -0
- package/dist/lib/codex-mcp-discovery-projection.d.ts +7 -0
- package/dist/lib/codex-settings-witness.d.ts +15 -0
- package/dist/sdk/index.js +424 -317
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -2273,3 +2273,32 @@ review a cached skill only when its native installed/enabled plugin ID matches
|
|
|
2273
2273
|
Codex's local remote install receipt, its manifest and capability controls are
|
|
2274
2274
|
bound, and its exact path is already effectively disabled. This reviews a denied
|
|
2275
2275
|
materialization; it does not infer the installed version or enable cached skills.
|
|
2276
|
+
|
|
2277
|
+
### Reviewing Codex inference and local MCP settings
|
|
2278
|
+
|
|
2279
|
+
`codex-settings-v3` reviews tolerate model/effort/verbosity/service-tier changes,
|
|
2280
|
+
and root/profile `personality` values `none`, `friendly`, or `pragmatic`,
|
|
2281
|
+
and typed ordinary local stdio MCP configuration updates. The local MCP catalog
|
|
2282
|
+
is separate from native skill discovery; MCP servers can still supply tool
|
|
2283
|
+
context and instructions. This witness does not authenticate server responses.
|
|
2284
|
+
Provider/auth/cloud routing, instruction files, context limits, native
|
|
2285
|
+
skills/plugins/hooks, reserved Apps MCP servers and unknown fields stay bound.
|
|
2286
|
+
HTTP, OAuth, remote-environment and unsupported MCP layouts retain their full
|
|
2287
|
+
witness. V1/V2 reviews retain their original digest meaning.
|
|
2288
|
+
|
|
2289
|
+
The personality extension leaves existing V3 digests without that field unchanged.
|
|
2290
|
+
A stored review that included personality requires a fresh explicit review before
|
|
2291
|
+
its changed digest can be adopted. Unknown values and other personality fields
|
|
2292
|
+
(including `features.personality`) remain refused or bound.
|
|
2293
|
+
|
|
2294
|
+
Capture a new review with `skills hook witness --kind codex-settings-v3 --path
|
|
2295
|
+
/absolute/path/config.toml`. To migrate an existing raw, V1 or V2 review, preserve
|
|
2296
|
+
and read back its exact reviewed configuration, then use `skills hook
|
|
2297
|
+
rebind-settings --agent codex --codex-witness-version 3 --reviewed-preimage
|
|
2298
|
+
/absolute/preserved/config.toml --expected-policy-sha256 <current-policy-hash>
|
|
2299
|
+
--expected-settings-sha256 <current-config-hash>`; add `--apply` after reviewing
|
|
2300
|
+
the plan. The legacy target remains V2 when the version option is omitted.
|
|
2301
|
+
Migration compares the original witness before projecting the new contract,
|
|
2302
|
+
refuses native discovery or unknown control changes, and changes policy only.
|
|
2303
|
+
After explicit migration, ordinary supported local MCP updates require no
|
|
2304
|
+
coordinated policy write.
|