@hasna/skills 0.10.28 → 0.10.31
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +37 -0
- package/bin/index.js +1149 -921
- package/bin/mcp.js +357 -278
- package/bin/migrate.js +1 -1
- package/bin/server.js +1 -1
- package/bin/worker.js +1 -1
- package/dist/index.js +684 -471
- package/dist/lib/agent-adapters.d.ts +7 -1
- package/dist/lib/agent-sumi.d.ts +15 -0
- package/dist/lib/native-discovery-roots.d.ts +1 -1
- package/dist/lib/registry.d.ts +20 -3
- package/dist/lib/selection-resolver.d.ts +1 -0
- package/dist/lib/skill-context.d.ts +2 -0
- package/dist/sdk/index.js +676 -467
- package/docs/plugin-admission.md +21 -0
- package/package.json +1 -1
package/docs/plugin-admission.md
CHANGED
|
@@ -364,3 +364,24 @@ their exact witnesses and trust state; they must still pass their own consumer
|
|
|
364
364
|
checks before use. The plan's `managedAgentChecks.agents` and `nativeSkills`
|
|
365
365
|
describe this scoped runtime check, not a fleet health result. A path-identity
|
|
366
366
|
witness intersecting the write still refuses instead of adopting a new inode.
|
|
367
|
+
|
|
368
|
+
## Codex bundled cleanup controls
|
|
369
|
+
|
|
370
|
+
Qualified native skill review supports a narrow subset of Codex 0.159.2 and
|
|
371
|
+
0.160.0's bundled cleanup hooks. The identities `browser`, `chrome`, `chrome-dev`,
|
|
372
|
+
`chrome-internal` and `computer-use` in `openai-bundled` may call
|
|
373
|
+
`node_repl.turn_ended`; `unified-computer-use` may call `cua_repl.turn_ended`.
|
|
374
|
+
Only `Interrupt`, `SubagentStop` and `Stop` are accepted, with one group and one
|
|
375
|
+
MCP handler per event. Inputs are the exact native event, turn and session
|
|
376
|
+
placeholders; `SubagentStop` uses the child `agent_id` for its session value.
|
|
377
|
+
Commands, matchers, other arguments, external hook files and a plugin MCP
|
|
378
|
+
declaration alongside these hooks remain refused. Apps cleanup routing requires
|
|
379
|
+
connector identity from a native tool catalog and is not admitted by this path.
|
|
380
|
+
|
|
381
|
+
The complete inline hooks stay in the manifest fingerprint across cache versions,
|
|
382
|
+
including after all native skill bodies disappear. A changed hook fails guarded
|
|
383
|
+
apply and subsequent discovery checks. This review preserves native cleanup;
|
|
384
|
+
it neither enables plugins nor grants hook trust, browser authority or signing.
|
|
385
|
+
The upstream contracts are
|
|
386
|
+
[0.159.2 bundled hooks](https://github.com/openai/codex/blob/ff6aec96948b70d94983af2641a6b67c94faeff5/codex-rs/plugin/src/bundled_hooks.rs)
|
|
387
|
+
and [0.160.0 bundled hooks](https://github.com/openai/codex/blob/a956835d020762cb2b570053af06f643a11c0ecc/codex-rs/plugin/src/bundled_hooks.rs).
|