@hasna/skills 0.10.27 → 0.10.30

package/README.md

@@ -247,6 +247,21 @@ validates the complete resulting policy before writing configuration or backups;
 the same limits apply when reading and guarding native context. A rejected plan
 leaves the previous policy intact.
 
+Sumi uses its native V2 plugin API, independently of OpenCode. Its managed
+`plugins/skills-cli.js` plugin validates prompt admission and adds selected
+instructions to transient request context. Real native session IDs and parent
+IDs bind exact inherited pins; native agent definitions are not Hasna identities.
+Native payload tool calls and prompt attachments are refused except for the
+`skills-cli` bridge. The supported configuration resolver honors `SUMI_CONFIG_DIR`,
+`XDG_CONFIG_HOME` and `SUMI_HOME` without performing native home adoption.
+
+Sumi integration refuses unresolved JSONC, inline/additional config, remote or
+relative skill sources, flat Markdown skills and foreign plugin packages.
+Resolve or review these sources before applying integration. The adapter was
+checked against Sumi 0.2.52. That release watches plugin sources for hot reload;
+installation alone does not prove an existing session adopted the plugin.
+Verify actual prompt consumption on each target after installation.
+
 Hermes 0.20.5 uses `pre_llm_call` to add selected context and `pre_tool_call`
 with `fail_closed: true` and a small owned supervisor to guard tool calls. The
 supervisor maps Skills child failures, timeouts and missing/invalid directives
@@ -1214,6 +1229,28 @@ Stable command shapes:
 - MCP registration: `mcp --register <agent> --json` returns
   `{ "registered": number, "results": [...] }`.
 
+## Query a caller-owned catalog
+
+The package root exports category and tag helpers that accept a readonly catalog:
+
+```ts
+import { getSkillsByCategory, getSkillsByTag, getAllTags } from "@hasna/skills";
+
+const catalog = [
+  { name: "write-brief", category: "Writing", tags: ["Research", "Writing"], credits: 5 },
+] as const;
+
+const writing = getSkillsByCategory("Writing", catalog);
+const research = getSkillsByTag("search", catalog);
+const tags = getAllTags(catalog); // ["research", "writing"]
+```
+
+An explicit catalog, including `[]`, is queried without loading local configuration
+or installed skills. Category matching is exact; tag matching is a case-insensitive
+substring search. An empty tag query matches records with at least one tag.
+Filtered arrays keep the original record references, types and extra fields.
+Omitting the catalog, or passing `undefined`, retains the configured local registry.
+
 ## Remote Registry
 
 The npm package ships no skill corpus. Authenticated discovery reads the
@@ -2276,7 +2313,8 @@ materialization; it does not infer the installed version or enable cached skills
 
 ### Reviewing Codex inference and local MCP settings
 
-`codex-settings-v3` reviews tolerate model/effort/verbosity/service-tier changes
+`codex-settings-v3` reviews tolerate model/effort/verbosity/service-tier changes,
+and root/profile `personality` values `none`, `friendly`, or `pragmatic`,
 and typed ordinary local stdio MCP configuration updates. The local MCP catalog
 is separate from native skill discovery; MCP servers can still supply tool
 context and instructions. This witness does not authenticate server responses.
@@ -2285,6 +2323,11 @@ skills/plugins/hooks, reserved Apps MCP servers and unknown fields stay bound.
 HTTP, OAuth, remote-environment and unsupported MCP layouts retain their full
 witness. V1/V2 reviews retain their original digest meaning.
 
+The personality extension leaves existing V3 digests without that field unchanged.
+A stored review that included personality requires a fresh explicit review before
+its changed digest can be adopted. Unknown values and other personality fields
+(including `features.personality`) remain refused or bound.
+
 Capture a new review with `skills hook witness --kind codex-settings-v3 --path
 /absolute/path/config.toml`. To migrate an existing raw, V1 or V2 review, preserve
 and read back its exact reviewed configuration, then use `skills hook