@hasna/skills 0.10.36 → 0.10.38

package/dist/lib/agent-discovery-directories.d.ts

@@ -3,6 +3,15 @@ export interface DiscoveryDirectory {
     path: string;
     sha256: string | null;
 }
+export interface DiscoveryDirectoryProjection extends DiscoveryDirectory {
+    entries: string[];
+}
+/** A separate planner-created projection retains membership outside exact
+ * reviewed inactive roots. It never replaces a historical full witness. */
+export declare function captureDiscoveryDirectoryProjection(paths: string[], omittedRoots: readonly string[]): DiscoveryDirectoryProjection[];
+/** Compare a planner-captured inventory after removing only exact inert graphs.
+ * The stored rows must reproduce their original digest before projection. */
+export declare function verifyDiscoveryDirectoryProjection(directories: DiscoveryDirectoryProjection[], omittedRoots: readonly string[]): void;
 /** Read-only capture; callers must review both membership and source bytes. */
 export declare function captureDiscoveryDirectories(paths: string[], excludedRoots?: readonly string[]): DiscoveryDirectory[];
 export declare function verifyDiscoveryDirectories(directories: DiscoveryDirectory[], excludedRoots?: readonly string[]): void;

package/dist/lib/agent-discovery.d.ts

@@ -2,7 +2,7 @@ import type { IntegrationAgent } from "./agent-adapters.js";
 import { type DiscoveryDirectory } from "./agent-discovery-directories.js";
 import { type ManagedPluginRegistrationWitness } from "./plugin-discovery.js";
 import { type CodexHookDiscoveryRecovery } from "./codex-hook-discovery-recovery.js";
-import { type CodexPluginSourceInput } from "./codex-plugin-skill-controls.js";
+import { type CodexPluginSkillControl, type CodexPluginSourceInput } from "./codex-plugin-skill-controls.js";
 export { captureDiscoveryDirectories, type DiscoveryDirectory } from "./agent-discovery-directories.js";
 export interface DiscoverySource {
     path: string;
@@ -19,6 +19,14 @@ export interface AgentDiscoveryBinding {
     directories?: DiscoveryDirectory[];
     method: "automatic" | "reviewed";
     builtinNames?: string[];
+    codexDisabledPluginSkills?: CodexPluginSkillControl[];
+    codexRetiredMaterializations?: {
+        roots: string[];
+        parents?: string[];
+        directories: Array<DiscoveryDirectory & {
+            entries?: string[];
+        }>;
+    };
     codexInstallationInputs?: {
         version: "codex-cli 0.160.0";
         catalogSha256: string;
@@ -39,6 +47,9 @@ export interface ReviewedDiscoveryInputs {
 /** Project one native configuration's witnessed fields, exactly as discovery
  * binds them. Used for both the current file and a preserved reviewed preimage. */
 export declare function projectNativeDiscoveryFields(text: string, format: "json" | "toml" | "yaml", fields: readonly string[], path: string): string;
+/** Called only after the owning planner validated discovery and capabilities.
+ * New roots must already be body-free; absent roots need the prior typed proof. */
+export declare function captureRetiredCodexDiscovery(binding: AgentDiscoveryBinding, controls: CodexPluginSkillControl[], rules: unknown): AgentDiscoveryBinding;
 export declare function verifyAgentDiscovery(binding: AgentDiscoveryBinding, codexRecovery?: CodexHookDiscoveryRecovery): void;
 export declare function rebindAgentDiscovery(binding: AgentDiscoveryBinding, changes: Map<string, string>): AgentDiscoveryBinding;
 /** Capture full byte witnesses for reviewed source or executable files; never import or execute them. */

package/dist/lib/agent-integration.d.ts

@@ -1,3 +1,5 @@
+import { type CodexCorpusWriteOptions } from "./codex-corpus-write.js";
+import { type ReviewedCodexSkillDenial } from "./codex-plugin-skill-controls.js";
 import { type CodexNativeSkillCatalog } from "./codex-native-skill-catalog.js";
 import { type AgentDiscoveryBinding, type ReviewedDiscoveryInputs } from "./agent-discovery.js";
 import { type IntegrationAgent } from "./agent-adapters.js";
@@ -24,6 +26,7 @@ export interface NativeSkillEntry {
     bridge?: boolean;
     bridgeHome?: string;
     rootAlias?: AgentRootAlias;
+    codexHome?: string;
 }
 export interface NativeMigrationTarget {
     agent: string;
@@ -45,7 +48,7 @@ export interface AgentConfigChange {
 export interface AgentIntegrationPlan {
     observedNativeSources?: Array<{
         path: string;
-        sha256: string;
+        sha256: string | null;
     }>;
     codexPluginSkillReview?: {
         version: string;
@@ -132,6 +135,7 @@ export declare function planAgentIntegration(options: {
     allowRootAliases?: boolean;
     reviewedCacheAlias?: string;
     codexNativeCatalog?: CodexNativeSkillCatalog;
+    codexSkillDenials?: ReviewedCodexSkillDenial[];
 }): AgentIntegrationPlan;
 export interface ClaudeManagedHookProjection {
     schema: "hasna.claude-managed-hook-projection.v1";
@@ -192,12 +196,12 @@ export declare function planAgentSettingsWitnessUpgrade(options: {
     expectedPolicySha256: string;
     expectedSettingsSha256: string;
 }): AgentIntegrationPlan;
-export declare function applyAgentIntegration(plan: AgentIntegrationPlan): {
+export declare function applyAgentIntegration(plan: AgentIntegrationPlan, options?: CodexCorpusWriteOptions): {
     changed: string[];
     backups: string[];
     rootAliases?: AgentRootAlias[];
 };
-export declare function archiveNativeSkills(inventory: NativeSkillEntry[], options: {
+export declare function archiveNativeSkills(inventory: NativeSkillEntry[], options: CodexCorpusWriteOptions & {
     dataDir?: string;
     includeUnmanaged?: boolean;
     includeVendor?: boolean;

package/dist/lib/agent-sync.d.ts

@@ -1,3 +1,4 @@
+import { type CodexCorpusWriteOptions } from "./codex-corpus-write.js";
 /**
  * `skills sync` — the last mile: write skills from this machine's corpus
  * (the migrated owner-layout cache ~/.hasna/skills/skills/<name>/, or the
@@ -82,7 +83,7 @@ export interface AgentSyncAction {
     action: SyncActionKind;
     reason?: string;
 }
-export interface SyncSkillsOptions {
+export interface SyncSkillsOptions extends CodexCorpusWriteOptions {
     /** Specific skills to sync. When empty, every corpus skill is synced. */
     names?: string[];
     /** Explicit; the default when no names are given is already "all". */
@@ -133,7 +134,7 @@ export declare function resolveSyncCorpus(options?: SyncSkillsOptions): {
     source: "source" | "corpus";
 };
 export declare function syncSkillsToAgents(options?: SyncSkillsOptions): SyncSkillsResult;
-export interface WriteManagedAgentSkillParams {
+export interface WriteManagedAgentSkillParams extends CodexCorpusWriteOptions {
     skill: string;
     agent: SyncAgent;
     skillMd: string;
@@ -159,7 +160,7 @@ export interface ManagedDirWriteResult {
     path: string;
     reason?: string;
 }
-export interface ManagedDirWriteOptions {
+export interface ManagedDirWriteOptions extends CodexCorpusWriteOptions {
     skill: string;
     source?: string;
     resourceDir?: string;
@@ -180,4 +181,4 @@ export declare function writeManagedSkillDir(dir: string, skillMd: string, optio
  * did not write (no valid Skills ownership marker). Foreign or malformed markers
  * grant no deletion authority, and removal has no force override.
  */
-export declare function removeManagedAgentSkill(skill: string, agent: SyncAgent, homeDir?: string): boolean;
+export declare function removeManagedAgentSkill(skill: string, agent: SyncAgent, homeDir?: string, options?: CodexCorpusWriteOptions): boolean;

package/dist/lib/codex-corpus-write.d.ts

@@ -0,0 +1,16 @@
+export interface CodexCorpusWriteOptions {
+    /** The selected native executable; never a shell command. */
+    codexCommand?: string;
+    /** Existing callers with a reviewed executable binding retain that binding. */
+    codexSha256?: string;
+}
+/** Protected aliases fail closed; unrelated project paths remain usable. */
+export declare function codexCorpusRootForPath(path: string): string | undefined;
+export declare function acquireCodexCorpusWrite(roots: readonly string[], options: CodexCorpusWriteOptions): {
+    assertCurrent: () => void;
+    close: () => void;
+};
+/** Keep the descriptor through preimage checks, writes, rollback and readback. */
+export declare function withCodexCorpusWrite<T>(roots: readonly string[], run: (assertCurrent: () => void) => T, options?: CodexCorpusWriteOptions): T;
+/** The callback must await every native child's close before settling. */
+export declare function withCodexCorpusWriteAsync<T>(roots: readonly string[], run: (assertCurrent: () => void) => Promise<T>, options?: CodexCorpusWriteOptions): Promise<T>;

package/dist/lib/codex-plugin-skill-controls.d.ts

@@ -8,6 +8,7 @@ export interface CodexPluginSkillControl {
     appSha256?: string;
     mcpSha256?: string;
     remotePluginId?: string;
+    skillsOnly?: true;
 }
 /** A native nonremote installation disabled by the witnessed configuration.
  * Its cache is inert; this makes no claim about reviewed hook capabilities. */
@@ -18,6 +19,11 @@ export interface CodexInactivePluginControl {
     sourceType: "local" | "git" | "npm";
     sourceSha256: string;
 }
+export interface ReviewedCodexSkillDenial {
+    name: string;
+    path: string;
+    sha256: string;
+}
 export interface CodexPluginSourceInput {
     pluginId: string;
     namespace: string;
@@ -26,9 +32,16 @@ export interface CodexPluginSourceInput {
     sourceSha256: string;
 }
 type Read = (path: string) => string;
+/** Establish the reviewed denial/skills-only role for an exact remote parent.
+ * Walk every ancestor: a dangling alias or non-directory is never absence. */
+export declare function reviewedDisabledCodexPluginParent(cache: string, parent: string, controls: CodexPluginSkillControl[], rules: unknown): boolean;
+export declare function absentDisabledCodexPluginParent(cache: string, parent: string, controls: CodexPluginSkillControl[], rules: unknown): boolean;
+/** A body-free historical remote version has no remaining native skill entry.
+ * Bind its capability-identical, skills-only identity before projecting it. */
+export declare function reviewedRetiredCodexRoot(cache: string, root: string, controls: CodexPluginSkillControl[], rules: unknown, read: Read, allowAbsent?: boolean): boolean;
 /** Capability controls remain bound even after every native Skill body disappears. */
-export declare function reviewedCodexPluginCapabilitiesUnchanged(cache: string, controls: CodexPluginSkillControl[], read: Read): boolean;
-export declare function reviewCodexPluginControls(catalog: CodexNativeSkillCatalog, documents: string[], cache: string, cwd: string, read: Read, rules: unknown, pluginSettings?: unknown, plannedRules?: unknown): {
+export declare function reviewedCodexPluginCapabilitiesUnchanged(cache: string, controls: CodexPluginSkillControl[], read: Read, rules?: unknown): boolean;
+export declare function reviewCodexPluginControls(catalog: CodexNativeSkillCatalog, documents: string[], cache: string, cwd: string, read: Read, rules: unknown, pluginSettings?: unknown, plannedRules?: unknown, denials?: ReviewedCodexSkillDenial[]): {
     skills: CodexPluginSkillControl[];
     inactivePlugins: CodexInactivePluginControl[];
     sourceInputs: CodexPluginSourceInput[];

package/dist/lib/home-adoption.d.ts

@@ -1,5 +1,6 @@
 import { type SyncAgent, type SyncMarker } from "./agent-sync.js";
 import type { PortableSkillOptions } from "./portable-skills.js";
+import { type CodexCorpusWriteOptions } from "./codex-corpus-write.js";
 export declare const CONFLICTS_LEDGER_FILE = "conflicts.json";
 export declare const ROLLBACK_DIRNAME = "rollback";
 export interface HomeSkillEntry {
@@ -28,7 +29,7 @@ export interface AdoptionScan {
     /** Already-marked dirs, counted only. */
     managed: number;
 }
-export interface AdoptionOptions extends PortableSkillOptions {
+export interface AdoptionOptions extends PortableSkillOptions, CodexCorpusWriteOptions {
     agents?: SyncAgent[];
     /** Optional selected home/corpus names; omitted means all names. */
     names?: string[];

package/dist/lib/installer.d.ts

@@ -1,12 +1,4 @@
-/**
- * Skill setup and project preferences.
- *
- * Skills are discovered through the CLI/MCP registry and executed from the bundled
- * package or the remote platform. Project state remains metadata-only pins. Agent skill
- * folders, however, are now written by the last-mile sync: installSkillForAgent() writes a
- * per-tool-adapted SKILL.md into an agent's folder, non-clobbering, marking each directory
- * it owns so a re-sync never overwrites a skill the user hand-authored.
- */
+import { type CodexCorpusWriteOptions } from "./codex-corpus-write.js";
 import { type SkillMeta } from "./registry.js";
 import { type ProjectSkillPin } from "./project-state.js";
 export interface InstallResult {
@@ -95,7 +87,7 @@ export type AgentScope = "global" | "project";
 export declare const AGENT_TARGETS: AgentTarget[];
 export declare const AGENT_LABELS: Record<AgentTarget, string>;
 export declare function resolveAgents(agentArg: string): AgentTarget[];
-export interface AgentInstallOptions {
+export interface AgentInstallOptions extends CodexCorpusWriteOptions {
     agent: AgentTarget;
     scope?: AgentScope;
     projectDir?: string;