@hasna/skills 0.10.3 → 0.10.5

package/README.md

@@ -561,6 +561,18 @@ skills pull --all --selection-profile default --json
 skills pull pdf-generate@0.5.2 --selection-profile default --json
 ```
 
+To inspect a published version that is not selected, export its immutable bundle
+to an existing owner-only directory outside Git and agent-native discovery:
+
+```bash
+skills review-export example-skill@1.0.0 --output /absolute/private/review/example-skill-1.0.0.tar.gz --json
+```
+
+The command verifies the version metadata, response headers, byte count, and
+SHA-256 before creating a mode-0600 file. It prints a metadata-only receipt and
+does not install or select the skill. Review and scan the private archive before
+reading its content.
+
 Use `sync --selection-profile default --station station-example` when you also
 need a station receipt. Native-folder migration options belong to the older
 sync mode and cannot be mixed with profile sync.
@@ -945,6 +957,7 @@ of app folders, and `XDG_CONFIG_HOME` is not consulted at all.
 | `skills hook agents --json` | | Report maintained adapters and explicit coverage limits |
 | `skills migrate native` | | Inventory native copies; `--apply` archives managed copies, with explicit `--include-unmanaged`, `--include-vendor`, or reviewed `--target-manifest` selection |
 | `skills pull --all --selection-profile <id>` | | With CLI loading active, refresh the selected profile into the verified cache |
+| `skills review-export <slug@version> --output <path>` | | Export one immutable hosted bundle to a private archive for review without selecting it |
 | `skills sync --selection-profile <id> [--check] [--station <id>]` | | Sync or check the selected profile/cache; optionally record station state |
 | `skills station-state <id>` | | Read a station's sync receipt in the authenticated workspace |
 | `skills run <name> [args]` | | Execute a skill directly |

package/bin/index.js

@@ -36868,7 +36868,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.3",
+    version: "0.10.5",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -51946,12 +51946,20 @@ function assertManagedAgentBridge(agent, options = {}) {
   const setting = (path) => (codexConfig.skills?.config ?? []).filter((entry) => typeof entry.path === "string" && [path, join20(path, "SKILL.md")].includes(canonicalAgentPath(entry.path, aliases)));
   if (agent === "codex" && [...setting(expected), ...(codexConfig.skills?.config ?? []).filter((entry) => typeof entry.name === "string" && entry.name.trim() === CLI_BRIDGE_NAME)].some((entry) => entry.enabled === false))
     throw new Error("NATIVE_SKILL_DRIFT: the Codex CLI bridge is disabled; run skills hook install");
-  const disabledBuiltin = (entry) => {
-    if (agent !== "codex" || !entry.vendor || !entry.path.startsWith(canonicalAgentPath(join20(home, ".codex", "skills", ".system"), aliases) + sep4))
+  const disabledVendorSkill = (entry) => {
+    if (agent !== "codex" || !entry.vendor)
       return false;
-    const matched = Array.isArray(binding.disabledBuiltins) && binding.disabledBuiltins.some((item) => item.path === entry.path && item.hash === entry.hash);
     const settings = setting(entry.path);
-    return matched && settings.length === 1 && settings[0]?.enabled === false;
+    if (settings.length !== 1 || settings[0]?.enabled !== false)
+      return false;
+    if (entry.path.startsWith(canonicalAgentPath(join20(home, ".codex", "plugins", "cache"), aliases) + sep4))
+      return true;
+    const runtimeCache = canonicalAgentPath(join20(home, ".cache", "codex-runtimes"), aliases);
+    if (entry.path.startsWith(runtimeCache + sep4) && discovery?.method === "automatic" && discovery.roots.some((root) => entry.path.startsWith(root + sep4)))
+      return true;
+    if (!entry.path.startsWith(canonicalAgentPath(join20(home, ".codex", "skills", ".system"), aliases) + sep4))
+      return false;
+    return Array.isArray(binding.disabledBuiltins) && binding.disabledBuiltins.some((item) => item.path === entry.path && item.hash === entry.hash);
   };
   if (!discovery || discovery.agent !== agent)
     throw new Error("NATIVE_SKILL_DRIFT: native discovery coverage is missing; run skills hook install");
@@ -51968,7 +51976,7 @@ function assertManagedAgentBridge(agent, options = {}) {
     throw new Error(`NATIVE_SKILL_DRIFT: ${error.message}`);
   }
   const inventory = inventoryNativeSkills(home, { includeVendor: true, guardHermes: agent === "hermes", agents: [agent], projectDirs: [...roots], agentRoots: discovery.roots.map((path) => ({ agent, path })), allowRootAliases: aliases.length > 0 });
-  const unexpected = inventory.filter((entry) => visible(entry) && !entry.bridge && !disabledBuiltin(entry));
+  const unexpected = inventory.filter((entry) => visible(entry) && !entry.bridge && !disabledVendorSkill(entry));
   if (unexpected.length) {
     const paths = unexpected.slice(0, 3).map((entry) => {
       const escaped = JSON.stringify(entry.path).replace(/[\u007f-\u009f\u061c\u200e\u200f\u2028-\u202e\u2066-\u2069]/g, (character) => `\\u${character.charCodeAt(0).toString(16).padStart(4, "0")}`);
@@ -111804,10 +111812,100 @@ var init_registry_sync = __esm(() => {
   init_skill_validation();
 });
 
+// src/lib/review-export.ts
+import { constants as constants22, closeSync as closeSync25, existsSync as existsSync35, fstatSync as fstatSync25, fsyncSync as fsyncSync7, lstatSync as lstatSync31, openSync as openSync25, realpathSync as realpathSync15, statSync as statSync23, writeFileSync as writeFileSync30 } from "fs";
+import { basename as basename14, dirname as dirname36, isAbsolute as isAbsolute29, join as join61, parse as parse12, resolve as resolve26, sep as sep13 } from "path";
+function exactVersion(spec) {
+  const at2 = spec.indexOf("@");
+  const slug2 = spec.slice(0, at2);
+  const version2 = spec.slice(at2 + 1);
+  if (at2 < 1 || slug2.length > 128 || !SLUG2.test(slug2) || !isValidSkillVersion(version2)) {
+    throw new Error("Review export requires an exact valid slug@version.");
+  }
+  return { slug: slug2, version: version2 };
+}
+function assertPrivateDestination(output2) {
+  if (!isAbsolute29(output2) || resolve26(output2) !== output2 || !basename14(output2).endsWith(".tar.gz")) {
+    throw new Error("Review output must be an absolute, normalized .tar.gz path.");
+  }
+  const parent = dirname36(output2);
+  if (realpathSync15(parent) !== parent || lstatSync31(parent).isSymbolicLink()) {
+    throw new Error("Review output parent must be a real directory, not a symlink.");
+  }
+  const parentStat = statSync23(parent);
+  if (!parentStat.isDirectory() || (parentStat.mode & 63) !== 0 || process.getuid && parentStat.uid !== process.getuid()) {
+    throw new Error("Review output parent must be an owner-only directory (mode 0700).");
+  }
+  const segments = parent.toLowerCase().split(sep13);
+  if (segments.some((segment) => NATIVE_CONTAINERS.has(segment)) || segments.some((segment, index) => segment === ".config" && segments[index + 1] === "opencode") || segments.some((segment, index) => segment === ".hasna" && segments[index + 1] === "skills")) {
+    throw new Error("Review output cannot be placed in agent-native discovery or Skills installation paths.");
+  }
+  for (let current = parent;; current = dirname36(current)) {
+    if (existsSync35(join61(current, ".git"))) {
+      throw new Error("Review output cannot be placed inside a Git worktree.");
+    }
+    if (current === parse12(current).root)
+      break;
+  }
+  return output2;
+}
+async function exportSkillVersionForReview(spec, output2, client2) {
+  const { slug: slug2, version: version2 } = exactVersion(spec);
+  const target = assertPrivateDestination(output2);
+  if (existsSync35(target))
+    throw new Error("Review output already exists; choose a new filename.");
+  const metadata = await client2.getSkillVersion(slug2, version2);
+  if (!metadata)
+    throw new Error(`Published skill version ${slug2}@${version2} was not found.`);
+  if (!/^[a-f0-9]{64}$/i.test(metadata.bundleSha256) || !Number.isSafeInteger(metadata.bundleByteSize) || metadata.bundleByteSize < 1 || metadata.bundleByteSize > MAX_REVIEW_BUNDLE_BYTES) {
+    throw new Error("Published bundle metadata is invalid or exceeds the review size limit.");
+  }
+  const response = await client2.getBundle(slug2, version2);
+  if (!response)
+    throw new Error(`Published bundle for ${slug2}@${version2} is unavailable.`);
+  if (!response.ok) {
+    response.body?.cancel().catch(() => {});
+    throw new Error(`Published bundle request failed: HTTP ${response.status}.`);
+  }
+  const headerSha = response.headers.get("X-Skill-Bundle-Sha256");
+  const headerVersion = response.headers.get("X-Skill-Version");
+  if (!headerSha || headerSha.toLowerCase() !== metadata.bundleSha256.toLowerCase() || headerVersion !== version2) {
+    response.body?.cancel().catch(() => {});
+    throw new Error("Published bundle headers do not match the exact version metadata.");
+  }
+  const bytes = await readBoundedResponse(response, Math.min(metadata.bundleByteSize, MAX_REVIEW_BUNDLE_BYTES));
+  if (bytes.byteLength !== metadata.bundleByteSize || sha256Hex(bytes) !== metadata.bundleSha256.toLowerCase()) {
+    throw new Error("Published bundle bytes do not match the exact version metadata.");
+  }
+  const fd = openSync25(target, constants22.O_WRONLY | constants22.O_CREAT | constants22.O_EXCL | constants22.O_NOFOLLOW, 384);
+  try {
+    writeFileSync30(fd, bytes);
+    fsyncSync7(fd);
+    if (fstatSync25(fd).size !== bytes.byteLength)
+      throw new Error("Incomplete review output write.");
+  } catch (error61) {
+    throw new Error(`Review output write failed. A private partial file may remain at ${target}; use Trash to remove it before reusing this path.`, { cause: error61 });
+  } finally {
+    closeSync25(fd);
+  }
+  return { slug: slug2, version: version2, bundleSha256: metadata.bundleSha256.toLowerCase(), bundleByteSize: bytes.byteLength, output: target };
+}
+var MAX_REVIEW_BUNDLE_BYTES, SLUG2, NATIVE_CONTAINERS;
+var init_review_export = __esm(() => {
+  init_remote_files();
+  init_skill_bundle();
+  init_skill_version();
+  init_native_discovery_roots();
+  MAX_REVIEW_BUNDLE_BYTES = 32 * 1024 * 1024;
+  SLUG2 = /^[a-z0-9][a-z0-9._-]*$/;
+  NATIVE_CONTAINERS = new Set(NATIVE_SKILL_ROOTS.map(([, root2]) => root2.split("/")[0]).filter((root2) => root2 !== ".config"));
+});
+
 // src/cli/commands/registry.ts
 var exports_registry2 = {};
 __export(exports_registry2, {
   registerVersions: () => registerVersions,
+  registerReviewExport: () => registerReviewExport,
   registerRegistry: () => registerRegistry,
   registerPull: () => registerPull,
   registerLifecycle: () => registerLifecycle
@@ -111819,12 +111917,12 @@ function registerRegistry(parent) {
 async function writeJson2(value, space) {
   const text4 = `${JSON.stringify(value, null, space)}
 `;
-  await new Promise((resolve26, reject2) => {
+  await new Promise((resolve27, reject2) => {
     process.stdout.write(text4, (error61) => {
       if (error61)
         reject2(error61);
       else
-        resolve26();
+        resolve27();
     });
   });
 }
@@ -111966,6 +112064,26 @@ Versions of ${name}
     }
   });
 }
+function registerReviewExport(parent) {
+  parent.command("review-export").argument("<slug@version>", "Exact published skill version to review").requiredOption("--output <path>", "New .tar.gz path inside an existing owner-only directory outside Git and agent discovery").option("--json", "Print a metadata-only receipt", false).description("Export an exact hosted bundle for private review without changing skill selection").action(async (spec, options) => {
+    try {
+      const client2 = await createRemoteSkillsClient();
+      if (!client2)
+        throw new Error("No Skills instance credential is configured. Run skills login.");
+      const receipt = await exportSkillVersionForReview(spec, options.output, client2);
+      if (options.json)
+        console.log(JSON.stringify(receipt));
+      else
+        console.log(`Exported ${receipt.slug}@${receipt.version} to ${receipt.output} (${receipt.bundleSha256}).`);
+    } catch (error61) {
+      if (options.json)
+        console.log(JSON.stringify({ error: error61.message }));
+      else
+        console.error(source_default.red(error61.message));
+      process.exitCode = 1;
+    }
+  });
+}
 function registerLifecycle(parent) {
   parent.command("lifecycle").argument("<name>", "Skill name on the configured instance").requiredOption("--state <state>", "Lifecycle state: active or archived").requiredOption("--revision <revision>", "Exact revision id from skills info/get").option("--reason <reason>", "Bounded archive reason").option("--replacement <slug>", "Optional successor slug").option("--json", "Output as JSON", false).description("Change a hosted skill's active/archive lifecycle with an exact revision guard").action(async (name, options) => {
     if (options.state !== "active" && options.state !== "archived")
@@ -111994,6 +112112,7 @@ var init_registry2 = __esm(() => {
   init_selection_resolver();
   init_context();
   init_selection_cache();
+  init_review_export();
 });
 
 // src/cli/commands/publish.ts
@@ -112007,9 +112126,9 @@ __export(exports_publish, {
   PushSkillError: () => PushSkillError
 });
 import { execFileSync as execFileSync2 } from "child_process";
-import { existsSync as existsSync35, readFileSync as readFileSync43 } from "fs";
+import { existsSync as existsSync36, readFileSync as readFileSync43 } from "fs";
 import { hostname as hostname5 } from "os";
-import { join as join61 } from "path";
+import { join as join62 } from "path";
 function registerPublish(parent) {
   parent.command("push").argument("<name>", "Name of a skill in the local corpus (~/.hasna/skills/installed or the migrated ~/.hasna/skills/skills)").option("--version <version>", "Override the version recorded on the instance").option("--force-new-version", "If name@version already exists with different content, publish as the next patch version", false).option("--dry-run", "Pack and validate without uploading", false).option("--json", "Output result as JSON", false).description("Publish a local skill to the configured skills instance").action(async (name, options) => {
     try {
@@ -112061,8 +112180,8 @@ async function pushSkill(name, options = {}) {
   const packed = packSkillBundle(skill.path, { maxUnpackedBytes: MAX_UNPACKED_BYTES });
   await verifyPackedCanonicalHash(skill.name, packed);
   const versionManifest = buildVersionManifest(skill.path, packed);
-  const skillMdPath = join61(skill.path, "SKILL.md");
-  const skillMd = existsSync35(skillMdPath) ? readFileSync43(skillMdPath, "utf-8") : undefined;
+  const skillMdPath = join62(skill.path, "SKILL.md");
+  const skillMd = existsSync36(skillMdPath) ? readFileSync43(skillMdPath, "utf-8") : undefined;
   const base3 = {
     slug: skill.name,
     path: skill.path,
@@ -112300,7 +112419,7 @@ var exports_private_publications = {};
 __export(exports_private_publications, {
   registerPrivatePublications: () => registerPrivatePublications
 });
-import { resolve as resolve26 } from "path";
+import { resolve as resolve27 } from "path";
 function verifyOptions(options, action) {
   if (options.userId === undefined !== (options.membershipId === undefined) || options.userId !== undefined && (!publicationUuid(options.userId) || !publicationUuid(options.membershipId)))
     throw new PrivatePublicationError("PUBLICATION_CONTEXT_REQUIRED", "Provide both observed --user-id and --membership-id UUIDs.");
@@ -112345,9 +112464,9 @@ function registerPrivatePublications(parent) {
         if (code2 === null)
           return;
         const context2 = options.userId ? { userId: options.userId, membershipId: options.membershipId } : undefined;
-        const client2 = await privatePublicationSession(options.email, code2, context2), directory2 = resolve26(options.recoveryDir);
+        const client2 = await privatePublicationSession(options.email, code2, context2), directory2 = resolve27(options.recoveryDir);
         if (action === "publish")
-          await preparePrivatePublication(client2, resolve26(args2[0]), directory2, { skillId: options.skillId, expectedCurrentVersionId: options.expectedCurrentVersion ?? null, idempotencyKey: options.idempotencyKey });
+          await preparePrivatePublication(client2, resolve27(args2[0]), directory2, { skillId: options.skillId, expectedCurrentVersionId: options.expectedCurrentVersion ?? null, idempotencyKey: options.idempotencyKey });
         const result2 = action === "publish" || action === "resume" ? await continuePrivatePublication(client2, directory2, { confirm: true, waitMs: Number(options.waitSeconds) * 1000 }) : await inspectPrivatePublication(client2, directory2, action === "cancel");
         print2(result2, options.json);
       } catch (error61) {
@@ -112449,7 +112568,7 @@ __export(exports_auth, {
 import { createInterface as createInterface3 } from "readline";
 function prompt(question) {
   const rl = createInterface3({ input: process.stdin, output: process.stdout });
-  return new Promise((resolve27) => {
+  return new Promise((resolve28) => {
     let settled = false;
     const finish = (answer) => {
       if (settled)
@@ -112458,7 +112577,7 @@ function prompt(question) {
       rl.close();
       if (answer === null)
         process.exitCode = 130;
-      resolve27(answer);
+      resolve28(answer);
     };
     rl.once("SIGINT", () => finish(null));
     rl.once("close", () => finish(null));
@@ -112636,7 +112755,7 @@ Skipped. Run it any time: skills setup agents`));
 function promptHidden(question) {
   const stdin = process.stdin;
   process.stdout.write(question);
-  return new Promise((resolve27) => {
+  return new Promise((resolve28) => {
     let value = "";
     const done = (answer) => {
       stdin.off("data", onData);
@@ -112646,7 +112765,7 @@ function promptHidden(question) {
 `);
       if (answer === null)
         process.exitCode = 130;
-      resolve27(answer);
+      resolve28(answer);
     };
     const onData = (chunk2) => {
       for (const character of chunk2.toString()) {
@@ -113192,7 +113311,7 @@ function promptInvitationProof(kind) {
   const label = kind === "token" ? "invitation token" : "recovery code";
   const character = kind === "token" ? /^[A-Za-z0-9_-]$/ : /^\d$/;
   const { stdin, stderr: output2 } = process, wasRaw = stdin.isRaw, wasFlowing = stdin.readableFlowing;
-  return new Promise((resolve27) => {
+  return new Promise((resolve28) => {
     let value = "", settled = false, overflow = false;
     const finish = (answer) => {
       if (settled)
@@ -113209,7 +113328,7 @@ function promptInvitationProof(kind) {
 `);
       if (answer === null)
         process.exitCode = 130;
-      resolve27(answer);
+      resolve28(answer);
     };
     const cancel = () => finish(null);
     const keypress = (text4, key) => {
@@ -113781,11 +113900,11 @@ var init_storage2 = __esm(() => {
 });
 
 // src/lib/registry-reconcile.ts
-import { existsSync as existsSync36, readFileSync as readFileSync44, statSync as statSync23, writeFileSync as writeFileSync30 } from "fs";
-import { join as join62 } from "path";
+import { existsSync as existsSync37, readFileSync as readFileSync44, statSync as statSync24, writeFileSync as writeFileSync31 } from "fs";
+import { join as join63 } from "path";
 function isDirectory2(path) {
   try {
-    return statSync23(path).isDirectory();
+    return statSync24(path).isDirectory();
   } catch {
     return false;
   }
@@ -113793,12 +113912,12 @@ function isDirectory2(path) {
 function migrationNeeded(options) {
   if (options.rootDir)
     return false;
-  const appDir = options.homeDir ? join62(options.homeDir, ".hasna", "skills") : getDataDir();
-  return !(isOwnerLayoutMigrated(appDir) && isDirectory2(join62(appDir, SKILLS_CACHE_DIRNAME)));
+  const appDir = options.homeDir ? join63(options.homeDir, ".hasna", "skills") : getDataDir();
+  return !(isOwnerLayoutMigrated(appDir) && isDirectory2(join63(appDir, SKILLS_CACHE_DIRNAME)));
 }
 function readBaseline(skillDir) {
-  const markerPath = join62(skillDir, PULL_MARKER_FILE);
-  if (!existsSync36(markerPath))
+  const markerPath = join63(skillDir, PULL_MARKER_FILE);
+  if (!existsSync37(markerPath))
     return;
   try {
     const marker = JSON.parse(readFileSync44(markerPath, "utf-8"));
@@ -113813,8 +113932,8 @@ function readBaseline(skillDir) {
   }
 }
 function readCursor(root2) {
-  const path = join62(root2, SYNC_CURSOR_FILE);
-  if (!existsSync36(path))
+  const path = join63(root2, SYNC_CURSOR_FILE);
+  if (!existsSync37(path))
     return { runCount: 0 };
   try {
     const cursor2 = JSON.parse(readFileSync44(path, "utf-8"));
@@ -113826,12 +113945,12 @@ function readCursor(root2) {
 function resolveCorpusRootReadOnly(options) {
   if (options.rootDir)
     return { root: options.rootDir, migrationPending: false };
-  const appDir = options.homeDir ? join62(options.homeDir, ".hasna", "skills") : getDataDirReadOnly();
-  const cache3 = join62(appDir, SKILLS_CACHE_DIRNAME);
+  const appDir = options.homeDir ? join63(options.homeDir, ".hasna", "skills") : getDataDirReadOnly();
+  const cache3 = join63(appDir, SKILLS_CACHE_DIRNAME);
   if (isOwnerLayoutMigrated(appDir) && isDirectory2(cache3)) {
     return { root: cache3, migrationPending: false };
   }
-  return { root: join62(appDir, INSTALLED_SKILLS_DIRNAME), migrationPending: true };
+  return { root: join63(appDir, INSTALLED_SKILLS_DIRNAME), migrationPending: true };
 }
 function remoteRowToSkill(record11) {
   const slug2 = typeof record11.slug === "string" ? record11.slug : typeof record11.name === "string" ? record11.name : undefined;
@@ -113845,7 +113964,7 @@ function remoteRowToSkill(record11) {
 }
 function recheckLocalSide(plannedLocal, localDir, ops = {
   pack: (dir) => packSkillBundle(dir).sha256,
-  exists: existsSync36
+  exists: existsSync37
 }) {
   let localNow;
   try {
@@ -113965,7 +114084,7 @@ async function reconcileRegistry(options = {}) {
   for (const slug2 of allSlugs) {
     const local = locals.get(slug2);
     const remote = remotes.get(slug2);
-    const baseline = local ? readBaseline(join62(root2, slug2)) : undefined;
+    const baseline = local ? readBaseline(join63(root2, slug2)) : undefined;
     const { state, reason } = classifySkill(local, remote, baseline);
     let { action, reason: actionReason } = resolveAction(state, direction, conflict);
     if (state === "remote-only" && isDigestless(remote)) {
@@ -114024,7 +114143,7 @@ async function reconcileRegistry(options = {}) {
       try {
         await pushSkill(slug2, { rootDir: root2, client: client2 });
         const pushed = locals.get(slug2);
-        writePullMarker(join62(root2, slug2), {
+        writePullMarker(join63(root2, slug2), {
           skill: slug2,
           ...pushed?.version ? { version: pushed.version } : {},
           ...pushed?.sha256 ? { contentHash: pushed.sha256 } : {},
@@ -114096,7 +114215,7 @@ async function reconcileRegistry(options = {}) {
         runCount: readCursor(root2).runCount + 1,
         summary
       };
-      writeFileSync30(join62(root2, SYNC_CURSOR_FILE), `${JSON.stringify(cursor2, null, 2)}
+      writeFileSync31(join63(root2, SYNC_CURSOR_FILE), `${JSON.stringify(cursor2, null, 2)}
 `);
       return {
         corpusRoot: root2,
@@ -122402,11 +122521,12 @@ var { registerPortableSkillCommands: registerPortableSkillCommands2 } = await Pr
 registerPortableSkillCommands2(program2);
 var { registerSchedule: registerSchedule2 } = await Promise.resolve().then(() => (init_schedule(), exports_schedule));
 registerSchedule2(program2);
-var { registerRegistry: registerRegistry2, registerPull: registerPull2, registerVersions: registerVersions2, registerLifecycle: registerLifecycle2 } = await Promise.resolve().then(() => (init_registry2(), exports_registry2));
+var { registerRegistry: registerRegistry2, registerPull: registerPull2, registerVersions: registerVersions2, registerLifecycle: registerLifecycle2, registerReviewExport: registerReviewExport2 } = await Promise.resolve().then(() => (init_registry2(), exports_registry2));
 registerRegistry2(program2);
 registerPull2(program2);
 registerVersions2(program2);
 registerLifecycle2(program2);
+registerReviewExport2(program2);
 var { registerPublish: registerPublish2 } = await Promise.resolve().then(() => (init_publish(), exports_publish));
 registerPublish2(program2);
 var { registerPrivatePublications: registerPrivatePublications2 } = await Promise.resolve().then(() => (init_private_publications(), exports_private_publications));

package/bin/mcp.js

@@ -20019,7 +20019,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.3",
+    version: "0.10.5",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {

package/bin/migrate.js

@@ -7,7 +7,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.3",
+  version: "0.10.5",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/server.js

@@ -24122,7 +24122,7 @@ var init_dist_es9 = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.3",
+  version: "0.10.5",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/worker.js

@@ -24125,7 +24125,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.3",
+  version: "0.10.5",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/cli/commands/registry.d.ts

@@ -13,4 +13,6 @@ export declare function registerPull(parent: Command): void;
  * instance, newest first, with the one the instance currently serves marked (hasna/apps#1630).
  */
 export declare function registerVersions(parent: Command): void;
+/** Read one immutable bundle into a private review artifact without selecting or installing it. */
+export declare function registerReviewExport(parent: Command): void;
 export declare function registerLifecycle(parent: Command): void;

package/dist/index.js

@@ -9611,7 +9611,7 @@ import { isAbsolute as isAbsolute11, join as join23, resolve as resolve11 } from
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.3",
+  version: "0.10.5",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -14125,12 +14125,20 @@ function assertManagedAgentBridge(agent, options = {}) {
   const setting = (path) => (codexConfig.skills?.config ?? []).filter((entry) => typeof entry.path === "string" && [path, join16(path, "SKILL.md")].includes(canonicalAgentPath(entry.path, aliases)));
   if (agent === "codex" && [...setting(expected), ...(codexConfig.skills?.config ?? []).filter((entry) => typeof entry.name === "string" && entry.name.trim() === CLI_BRIDGE_NAME)].some((entry) => entry.enabled === false))
     throw new Error("NATIVE_SKILL_DRIFT: the Codex CLI bridge is disabled; run skills hook install");
-  const disabledBuiltin = (entry) => {
-    if (agent !== "codex" || !entry.vendor || !entry.path.startsWith(canonicalAgentPath(join16(home, ".codex", "skills", ".system"), aliases) + sep4))
+  const disabledVendorSkill = (entry) => {
+    if (agent !== "codex" || !entry.vendor)
       return false;
-    const matched = Array.isArray(binding.disabledBuiltins) && binding.disabledBuiltins.some((item) => item.path === entry.path && item.hash === entry.hash);
     const settings = setting(entry.path);
-    return matched && settings.length === 1 && settings[0]?.enabled === false;
+    if (settings.length !== 1 || settings[0]?.enabled !== false)
+      return false;
+    if (entry.path.startsWith(canonicalAgentPath(join16(home, ".codex", "plugins", "cache"), aliases) + sep4))
+      return true;
+    const runtimeCache = canonicalAgentPath(join16(home, ".cache", "codex-runtimes"), aliases);
+    if (entry.path.startsWith(runtimeCache + sep4) && discovery?.method === "automatic" && discovery.roots.some((root) => entry.path.startsWith(root + sep4)))
+      return true;
+    if (!entry.path.startsWith(canonicalAgentPath(join16(home, ".codex", "skills", ".system"), aliases) + sep4))
+      return false;
+    return Array.isArray(binding.disabledBuiltins) && binding.disabledBuiltins.some((item) => item.path === entry.path && item.hash === entry.hash);
   };
   if (!discovery || discovery.agent !== agent)
     throw new Error("NATIVE_SKILL_DRIFT: native discovery coverage is missing; run skills hook install");
@@ -14147,7 +14155,7 @@ function assertManagedAgentBridge(agent, options = {}) {
     throw new Error(`NATIVE_SKILL_DRIFT: ${error.message}`);
   }
   const inventory = inventoryNativeSkills(home, { includeVendor: true, guardHermes: agent === "hermes", agents: [agent], projectDirs: [...roots], agentRoots: discovery.roots.map((path) => ({ agent, path })), allowRootAliases: aliases.length > 0 });
-  const unexpected = inventory.filter((entry) => visible(entry) && !entry.bridge && !disabledBuiltin(entry));
+  const unexpected = inventory.filter((entry) => visible(entry) && !entry.bridge && !disabledVendorSkill(entry));
   if (unexpected.length) {
     const paths = unexpected.slice(0, 3).map((entry) => {
       const escaped = JSON.stringify(entry.path).replace(/[\u007f-\u009f\u061c\u200e\u200f\u2028-\u202e\u2066-\u2069]/g, (character) => `\\u${character.charCodeAt(0).toString(16).padStart(4, "0")}`);

package/dist/lib/review-export.d.ts

@@ -0,0 +1,16 @@
+export interface ReviewExportClient {
+    getSkillVersion(slug: string, version: string): Promise<{
+        bundleSha256: string;
+        bundleByteSize: number;
+    } | null>;
+    getBundle(slug: string, version: string): Promise<Response | null>;
+}
+export interface ReviewExportReceipt {
+    slug: string;
+    version: string;
+    bundleSha256: string;
+    bundleByteSize: number;
+    output: string;
+}
+/** Export for human review only. This never changes corpus, cache, profiles, or native discovery. */
+export declare function exportSkillVersionForReview(spec: string, output: string, client: ReviewExportClient): Promise<ReviewExportReceipt>;

package/dist/sdk/index.js

@@ -32373,7 +32373,7 @@ var init_event_sink = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.3",
+  version: "0.10.5",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -41996,12 +41996,20 @@ function assertManagedAgentBridge(agent, options = {}) {
   const setting = (path) => (codexConfig.skills?.config ?? []).filter((entry) => typeof entry.path === "string" && [path, join21(path, "SKILL.md")].includes(canonicalAgentPath(entry.path, aliases)));
   if (agent === "codex" && [...setting(expected), ...(codexConfig.skills?.config ?? []).filter((entry) => typeof entry.name === "string" && entry.name.trim() === CLI_BRIDGE_NAME)].some((entry) => entry.enabled === false))
     throw new Error("NATIVE_SKILL_DRIFT: the Codex CLI bridge is disabled; run skills hook install");
-  const disabledBuiltin = (entry) => {
-    if (agent !== "codex" || !entry.vendor || !entry.path.startsWith(canonicalAgentPath(join21(home, ".codex", "skills", ".system"), aliases) + sep4))
+  const disabledVendorSkill = (entry) => {
+    if (agent !== "codex" || !entry.vendor)
       return false;
-    const matched = Array.isArray(binding.disabledBuiltins) && binding.disabledBuiltins.some((item) => item.path === entry.path && item.hash === entry.hash);
     const settings = setting(entry.path);
-    return matched && settings.length === 1 && settings[0]?.enabled === false;
+    if (settings.length !== 1 || settings[0]?.enabled !== false)
+      return false;
+    if (entry.path.startsWith(canonicalAgentPath(join21(home, ".codex", "plugins", "cache"), aliases) + sep4))
+      return true;
+    const runtimeCache = canonicalAgentPath(join21(home, ".cache", "codex-runtimes"), aliases);
+    if (entry.path.startsWith(runtimeCache + sep4) && discovery?.method === "automatic" && discovery.roots.some((root2) => entry.path.startsWith(root2 + sep4)))
+      return true;
+    if (!entry.path.startsWith(canonicalAgentPath(join21(home, ".codex", "skills", ".system"), aliases) + sep4))
+      return false;
+    return Array.isArray(binding.disabledBuiltins) && binding.disabledBuiltins.some((item) => item.path === entry.path && item.hash === entry.hash);
   };
   if (!discovery || discovery.agent !== agent)
     throw new Error("NATIVE_SKILL_DRIFT: native discovery coverage is missing; run skills hook install");
@@ -42018,7 +42026,7 @@ function assertManagedAgentBridge(agent, options = {}) {
     throw new Error(`NATIVE_SKILL_DRIFT: ${error.message}`);
   }
   const inventory = inventoryNativeSkills(home, { includeVendor: true, guardHermes: agent === "hermes", agents: [agent], projectDirs: [...roots], agentRoots: discovery.roots.map((path) => ({ agent, path })), allowRootAliases: aliases.length > 0 });
-  const unexpected = inventory.filter((entry) => visible(entry) && !entry.bridge && !disabledBuiltin(entry));
+  const unexpected = inventory.filter((entry) => visible(entry) && !entry.bridge && !disabledVendorSkill(entry));
   if (unexpected.length) {
     const paths = unexpected.slice(0, 3).map((entry) => {
       const escaped = JSON.stringify(entry.path).replace(/[\u007f-\u009f\u061c\u200e\u200f\u2028-\u202e\u2066-\u2069]/g, (character) => `\\u${character.charCodeAt(0).toString(16).padStart(4, "0")}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/skills",
-  "version": "0.10.3",
+  "version": "0.10.5",
   "description": "Skills library for AI coding agents",
   "type": "module",
   "bin": {