@hasna/skills 0.10.36 → 0.10.39

package/bin/mcp.js

@@ -20019,7 +20019,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.36",
+    version: "0.10.39",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -20069,8 +20069,8 @@ var init_package = __esm(() => {
     types: "./dist/index.d.ts",
     scripts: {
       clean: "rm -rf bin/ dist/",
-      build: "bun run clean && bun build ./src/cli/index.tsx --outdir ./bin --target bun && bun build ./src/mcp/index.ts --outfile ./bin/mcp.js --target bun && bun build ./src/server/index.ts --outfile ./bin/server.js --target bun && bun build ./src/server/worker.ts --outfile ./bin/worker.js --target bun && bun build ./src/server/migrate.ts --outfile ./bin/migrate.js --target bun && bun build ./src/server/maintenance.ts --outfile ./bin/maintenance.js --target bun && bun build ./src/index.ts ./src/storage.ts ./src/sdk/index.ts ./src/admin-contract.ts --outdir ./dist --target bun && tsc --emitDeclarationOnly --declaration --outDir dist",
-      "build:js": "rm -rf dist && bun build ./src/index.ts ./src/storage.ts ./src/sdk/index.ts ./src/admin-contract.ts --outdir ./dist --target bun && tsc --emitDeclarationOnly --declaration --outDir dist",
+      build: "bun run clean && bun build --external @hasna/contracts/kernel-lock ./src/cli/index.tsx --outdir ./bin --target bun && bun build --external @hasna/contracts/kernel-lock ./src/mcp/index.ts --outfile ./bin/mcp.js --target bun && bun build --external @hasna/contracts/kernel-lock ./src/server/index.ts --outfile ./bin/server.js --target bun && bun build --external @hasna/contracts/kernel-lock ./src/server/worker.ts --outfile ./bin/worker.js --target bun && bun build --external @hasna/contracts/kernel-lock ./src/server/migrate.ts --outfile ./bin/migrate.js --target bun && bun build --external @hasna/contracts/kernel-lock ./src/server/maintenance.ts --outfile ./bin/maintenance.js --target bun && bun build --external @hasna/contracts/kernel-lock ./src/index.ts ./src/storage.ts ./src/sdk/index.ts ./src/admin-contract.ts --outdir ./dist --target bun && tsc --emitDeclarationOnly --declaration --outDir dist",
+      "build:js": "rm -rf dist && bun build --external @hasna/contracts/kernel-lock ./src/index.ts ./src/storage.ts ./src/sdk/index.ts ./src/admin-contract.ts --outdir ./dist --target bun && tsc --emitDeclarationOnly --declaration --outDir dist",
       test: "bun test --timeout 30000",
       dev: "bun run ./src/cli/index.tsx",
       "dev:watch": "bun --watch run ./src/cli/index.tsx",
@@ -20108,7 +20108,6 @@ var init_package = __esm(() => {
     author: "Hasna",
     license: "Apache-2.0",
     devDependencies: {
-      "@hasna/contracts": "1.1.0",
       "@types/bun": "1.3.14",
       "@types/node": "25.2.3",
       "@types/react": "^18.2.0",
@@ -20130,7 +20129,8 @@ var init_package = __esm(() => {
       "ink-spinner": "^5.0.0",
       "ink-text-input": "^6.0.0",
       react: "^18.2.0",
-      zod: "^4.3.6"
+      zod: "^4.3.6",
+      "@hasna/contracts": "1.3.5"
     },
     engines: {
       bun: ">=1.0.0"
@@ -20424,11 +20424,14 @@ function readCredentialFile(path, apiKeyKeys, pointerKey) {
   }
   return values[0] === undefined ? null : { apiKey: values[0] };
 }
-function appConfigDiskValue(name, env, keys) {
+function appConfigDiskValue(name, env, keys, profile = null) {
+  if (profile !== null && !SAFE_PROFILE.test(profile)) {
+    throw new CredentialResolutionError(name, "The selected configuration profile is invalid.", ["profile"]);
+  }
   const wanted = keys.filter((key) => !CREDENTIAL_SHAPED_KEY.test(key));
   if (wanted.length === 0)
     return null;
-  for (const path of credentialDiskSources(name, env)) {
+  for (const path of profileDiskSources(name, env, profile)) {
     const parsed = readAppConfigFile(path);
     if (!parsed)
       continue;
@@ -38255,7 +38258,7 @@ function assertAgentPolicyCollections(policy) {
     }
   if (bridge.codexPluginSkills !== undefined)
     for (const control of array3(bridge.codexPluginSkills, 4096)) {
-      requireBound(object4(control) && Object.keys(control).every((key) => ["name", "pluginId", "namespace", "pluginParent", "manifestSha256", "appSha256", "mcpSha256", "remotePluginId"].includes(key)));
+      requireBound(object4(control) && Object.keys(control).every((key) => ["name", "pluginId", "namespace", "pluginParent", "manifestSha256", "appSha256", "mcpSha256", "remotePluginId", "skillsOnly"].includes(key)));
       text(control.name, 129);
       text(control.pluginId, 1024);
       text(control.namespace, 64);
@@ -38263,6 +38266,8 @@ function assertAgentPolicyCollections(policy) {
       requireBound(isAbsolute3(control.pluginParent) && resolve2(control.pluginParent) === control.pluginParent && /^[a-f0-9]{64}$/.test(control.manifestSha256));
       if (control.remotePluginId !== undefined)
         requireBound(typeof control.remotePluginId === "string" && /^[A-Za-z0-9_~-]{1,1024}$/.test(control.remotePluginId));
+      if (control.skillsOnly !== undefined)
+        requireBound(control.skillsOnly === true && control.appSha256 === undefined && control.mcpSha256 === undefined);
       if (control.mcpSha256 !== undefined)
         requireBound(typeof control.mcpSha256 === "string" && /^[a-f0-9]{64}$/.test(control.mcpSha256));
       if (control.appSha256 !== undefined)
@@ -38292,6 +38297,26 @@ function assertAgentPolicyCollections(policy) {
     text(agent, 128);
     requireBound(object4(value));
     text(value.agent, 128);
+    if (value.codexRetiredMaterializations !== undefined) {
+      const proof = record3(value.codexRetiredMaterializations, 3), roots = array3(proof.roots, AGENT_POLICY_LIMITS.discoveryRoots), parents = proof.parents === undefined ? [] : array3(proof.parents, AGENT_POLICY_LIMITS.discoveryRoots);
+      requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && Object.keys(proof).every((key) => ["roots", "parents", "directories"].includes(key)) && roots.length + parents.length > 0 && new Set(roots).size === roots.length && new Set(parents).size === parents.length);
+      for (const root of roots) {
+        text(root);
+        requireBound(isAbsolute3(root) && resolve2(root) === root);
+      }
+      for (const parent of parents) {
+        text(parent);
+        requireBound(isAbsolute3(parent) && resolve2(parent) === parent);
+      }
+      for (const directory of array3(proof.directories, AGENT_POLICY_LIMITS.discoveryDirectories)) {
+        requireBound(object4(directory));
+        text(directory.path);
+        requireBound(directory.sha256 === null || typeof directory.sha256 === "string" && /^[a-f0-9]{64}$/.test(directory.sha256));
+        if (directory.entries !== undefined)
+          for (const entry of array3(directory.entries, AGENT_POLICY_LIMITS.discoveryDirectoryEntries))
+            text(entry, AGENT_POLICY_LIMITS.pathCharacters * 6 + 100);
+      }
+    }
     if (value.codexInstallationInputs !== undefined) {
       const proof = record3(value.codexInstallationInputs, 4), inputs = array3(proof.plugins, 4096), ids = new Set;
       requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && proof.version === "codex-cli 0.160.0" && typeof proof.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(proof.catalogSha256) && inputs.length > 0 && object4(bridge.codexPluginSkillReview) && bridge.codexPluginSkillReview.version === proof.version && bridge.codexPluginSkillReview.catalogSha256 === proof.catalogSha256);
@@ -45411,8 +45436,10 @@ function safe(path) {
 function same(before, after) {
   return Boolean(after && after.isDirectory() && before.dev === after.dev && before.ino === after.ino && before.mtimeMs === after.mtimeMs && before.ctimeMs === after.ctimeMs);
 }
-function capture(path, budget, excludedRoots) {
+function capture(path, budget, excludedRoots, omittedRoots = [], rows) {
   safe(path);
+  if (omittedRoots.some((root2) => path === root2 || path.startsWith(root2 + "/")))
+    return { path, sha256: null };
   const root = lstatSync5(path, { throwIfNoEntry: false });
   if (!root)
     return { path, sha256: null };
@@ -45432,6 +45459,8 @@ function capture(path, budget, excludedRoots) {
     need(new Set(names).size === names.length, "Ambiguous native discovery directory names");
     for (const name of names.sort()) {
       const child = join11(current, name), childRelative = relative3 ? `${relative3}/${name}` : name;
+      if (omittedRoots.includes(child))
+        continue;
       need(child.length <= AGENT_POLICY_LIMITS.pathCharacters, "Native discovery directory path limit exceeded");
       const stat = lstatSync5(child);
       need(stat.isFile() || stat.isDirectory(), "Refusing symlink or special native discovery directory member");
@@ -45440,6 +45469,7 @@ function capture(path, budget, excludedRoots) {
       budget.bytes += Buffer.byteLength(row);
       need(budget.bytes <= AGENT_POLICY_LIMITS.discoveryDirectoryBytes, "Native discovery directory metadata limit exceeded");
       hash2.update(row);
+      rows?.push(row);
       if (stat.isDirectory() && !excludedRoots.includes(child))
         walk(child, childRelative, stat, depth + 1);
     }
@@ -45449,6 +45479,44 @@ function capture(path, budget, excludedRoots) {
   safe(path);
   return { path, sha256: hash2.digest("hex") };
 }
+function captureDiscoveryDirectoryProjection(paths, omittedRoots) {
+  need(Array.isArray(paths) && paths.length <= AGENT_POLICY_LIMITS.discoveryDirectories && new Set(paths).size === paths.length, "Invalid projected discovery directory collection");
+  need(omittedRoots.length <= AGENT_POLICY_LIMITS.discoveryRoots && new Set(omittedRoots).size === omittedRoots.length, "Invalid inactive discovery roots");
+  for (const root of omittedRoots)
+    safe(root);
+  const budget = { entries: 0, bytes: 0 };
+  return paths.map((path) => {
+    const entries = [];
+    return { ...capture(path, budget, [], omittedRoots, entries), entries };
+  });
+}
+function verifyDiscoveryDirectoryProjection(directories, omittedRoots) {
+  need(directories.length <= AGENT_POLICY_LIMITS.discoveryDirectories, "Invalid projected discovery directory collection");
+  let count = 0, bytes = 0;
+  const expected = directories.map((directory) => {
+    safe(directory.path);
+    need(Array.isArray(directory.entries), "Missing reviewed directory membership inventory");
+    const hash2 = createHash2("sha256");
+    const kept = [];
+    for (const row of directory.entries) {
+      need(typeof row === "string" && ++count <= AGENT_POLICY_LIMITS.discoveryDirectoryEntries, "Invalid reviewed directory membership rows");
+      bytes += Buffer.byteLength(row);
+      need(bytes <= AGENT_POLICY_LIMITS.discoveryDirectoryBytes, "Reviewed directory membership byte limit exceeded");
+      const value = JSON.parse(row);
+      need(Array.isArray(value) && value.length === 2 && typeof value[0] === "string" && value[0] && !isAbsolute5(value[0]) && !value[0].split("/").some((part) => !part || part === "." || part === "..") && ["file", "directory"].includes(value[1]) && row === JSON.stringify(value) + `
+`, "Invalid reviewed directory member");
+      hash2.update(row);
+      const path = join11(directory.path, value[0]);
+      if (!omittedRoots.some((root) => path === root || path.startsWith(root + "/")))
+        kept.push(row);
+    }
+    need(directory.sha256 === null ? directory.entries.length === 0 : hash2.digest("hex") === directory.sha256, "Reviewed directory inventory does not match its fingerprint");
+    const absent = omittedRoots.some((root) => directory.path === root || directory.path.startsWith(root + "/"));
+    return { path: directory.path, sha256: absent || directory.sha256 === null ? null : createHash2("sha256").update(kept.join("")).digest("hex") };
+  });
+  const current = captureDiscoveryDirectoryProjection(directories.map((item) => item.path), omittedRoots);
+  need(current.every((item, index) => item.sha256 === expected[index].sha256), "Native discovery directory membership changed outside retired Codex roots");
+}
 function captureDiscoveryDirectories(paths, excludedRoots = []) {
   need(Array.isArray(paths) && paths.length <= AGENT_POLICY_LIMITS.discoveryDirectories && new Set(paths).size === paths.length, "Invalid native discovery directory collection");
   const budget = { entries: 0, bytes: 0 };
@@ -47297,6 +47365,10 @@ async function prepareSkillDependencies(skillPath, env, timeoutMs = DEFAULT_PREP
 var DEPENDENCY_PREPARATION_MARKER = ".skills-dependency-preparation", RECOVERY = "Skill dependency preparation is incomplete. Confirm no installer is running, successfully run bun install --no-save in the skill directory, then remove only .skills-dependency-preparation. See docs/skill-standard.md#recovering-interrupted-dependency-preparation.", DEFAULT_PREPARATION_TIMEOUT_MS = 60000;
 var init_dependency_preparation = () => {};
 
+// src/lib/codex-corpus-write.ts
+import { KernelLock } from "@hasna/contracts/kernel-lock";
+var init_codex_corpus_write = () => {};
+
 // src/lib/codex-local-mcp-controls.ts
 function isCodexLocalStdioMcpServer(name, server) {
   const identifier2 = (value) => typeof value === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(value);
@@ -47664,6 +47736,7 @@ var init_codex_native_compatibility = __esm(() => {
 
 // src/lib/codex-hook-rpc.ts
 var init_codex_hook_rpc = __esm(() => {
+  init_codex_corpus_write();
   init_codex_native_compatibility();
   init_codex_native_compatibility();
 });
@@ -47673,6 +47746,7 @@ function codexPluginSourceIsConfigControlled(plugin) {
   const remoteRealms = ["openai-curated-remote", "created-by-me-remote", "workspace-directory", "workspace-shared-with-me", "workspace-shared-with-me-private", "workspace-shared-with-me-unlisted"];
   return Boolean(plugin.sourceType && ["local", "git", "npm"].includes(plugin.sourceType) && plugin.sourceSha256 && /^[a-f0-9]{64}$/.test(plugin.sourceSha256) && !plugin.remotePluginId && !remoteRealms.includes(plugin.id.slice(plugin.id.lastIndexOf("@") + 1)));
 }
+var remotePluginIdentifier = (value) => typeof value === "string" && /^[A-Za-z0-9_~-]{1,1024}$/.test(value);
 var init_codex_native_skill_catalog = __esm(() => {
   init_codex_hook_rpc();
   init_codex_native_compatibility();
@@ -47685,6 +47759,214 @@ import { lstatSync as lstatSync11, readdirSync as readdirSync6, readlinkSync as
 function refuse() {
   throw new Error("CODEX_NATIVE_SKILL_IDENTITY_UNSUPPORTED: review native plugin names and hook controls");
 }
+function remoteInstallationMatches(parent, remotePluginId, read) {
+  try {
+    if (!remotePluginIdentifier(remotePluginId) || !lstatSync11(parent).isDirectory() || realpathSync3(parent) !== parent)
+      return false;
+    const path = join16(parent, ".codex-remote-plugin-install.json"), stat = lstatSync11(path, { throwIfNoEntry: false });
+    if (!stat?.isFile() || stat.isSymbolicLink() || stat.size > 16384)
+      return false;
+    const text2 = read(path);
+    hashNativeJsonControls(text2);
+    const value = JSON.parse(text2);
+    return Boolean(value && typeof value === "object" && !Array.isArray(value) && Object.keys(value).length === 2 && value.schema_version === 1 && value.remote_plugin_id === remotePluginId);
+  } catch {
+    return false;
+  }
+}
+function appControls(path, read) {
+  const text2 = read(path);
+  let value, sha2562;
+  try {
+    sha2562 = hashNativeJsonControls(text2);
+    value = JSON.parse(text2);
+  } catch {
+    refuse();
+  }
+  const object7 = (v) => Boolean(v && typeof v === "object" && !Array.isArray(v));
+  if (!object7(value) || Object.keys(value).length !== 1 || !object7(value.apps))
+    refuse();
+  const apps = Object.entries(value.apps);
+  if (!apps.length || apps.length > 256)
+    refuse();
+  for (const [name, entry] of apps) {
+    if (!identifier2(name) || !object7(entry) || !Object.keys(entry).every((key) => ["id", "category", "required"].includes(key)) || typeof entry.id !== "string" || !/^[A-Za-z0-9_-]{1,256}$/.test(entry.id) || entry.category !== undefined && (typeof entry.category !== "string" || !entry.category.trim() || entry.category.length > 256 || /[\x00-\x1f\x7f]/.test(entry.category)) || entry.required !== undefined && typeof entry.required !== "boolean")
+      refuse();
+  }
+  return sha2562;
+}
+function mcpControls(path, read) {
+  const text2 = read(path);
+  let value, sha2562;
+  try {
+    sha2562 = hashNativeJsonControls(text2);
+    value = JSON.parse(text2);
+  } catch {
+    refuse();
+  }
+  const object7 = (v) => Boolean(v && typeof v === "object" && !Array.isArray(v));
+  if (!object7(value) || Object.keys(value).length !== 1 || !object7(value.mcpServers))
+    refuse();
+  const servers = Object.entries(value.mcpServers);
+  if (!servers.length || servers.length > 256)
+    refuse();
+  for (const [name, server] of servers)
+    if (!isCodexLocalStdioMcpServer(name, server))
+      refuse();
+  return sha2562;
+}
+function isBundledCleanupHooks(root, namespace, value) {
+  const object7 = (v) => Boolean(v && typeof v === "object" && !Array.isArray(v));
+  const exactKeys = (v, keys) => Object.keys(v).length === keys.length && keys.every((key) => Object.hasOwn(v, key));
+  if (basename5(dirname10(root)) !== namespace || basename5(dirname10(dirname10(root))) !== "openai-bundled")
+    return false;
+  const server = namespace === "unified-computer-use" ? "cua_repl" : ["browser", "chrome", "chrome-dev", "chrome-internal", "computer-use"].includes(namespace) ? "node_repl" : undefined;
+  if (!server || !object7(value) || !exactKeys(value, ["hooks"]) || !object7(value.hooks))
+    return false;
+  const events = Object.entries(value.hooks);
+  if (!events.length || events.length > 3)
+    return false;
+  for (const [event, groups] of events) {
+    if (!["Interrupt", "SubagentStop", "Stop"].includes(event) || !Array.isArray(groups) || groups.length !== 1)
+      return false;
+    const group = groups[0];
+    if (!object7(group) || !exactKeys(group, ["hooks"]) || !Array.isArray(group.hooks) || group.hooks.length !== 1)
+      return false;
+    const handler = group.hooks[0];
+    if (!object7(handler) || !exactKeys(handler, ["type", "server", "tool", "input"]) || handler.type !== "mcp_tool" || handler.server !== server || handler.tool !== "turn_ended" || !object7(handler.input) || !exactKeys(handler.input, ["hook_event_name", "session_id", "turn_id"]) || handler.input.hook_event_name !== "${hook_event_name}" || handler.input.turn_id !== "${turn_id}" || handler.input.session_id !== (event === "SubagentStop" ? "${agent_id}" : "${session_id}"))
+      return false;
+  }
+  return true;
+}
+function rootControls(root, read) {
+  const manifestPath = join16(root, ".codex-plugin/plugin.json"), manifestFile = lstatSync11(manifestPath, { throwIfNoEntry: false });
+  if (!lstatSync11(join16(root, ".codex-plugin"), { throwIfNoEntry: false })?.isDirectory() || !manifestFile?.isFile() || manifestFile.size > 1024 * 1024)
+    refuse();
+  let manifest, manifestSha256;
+  try {
+    const text2 = read(manifestPath);
+    manifestSha256 = hashNativeJsonControls(text2, "version");
+    manifest = JSON.parse(text2);
+  } catch {
+    refuse();
+  }
+  if (!manifest || typeof manifest !== "object" || Array.isArray(manifest) || !identifier2(manifest.name))
+    refuse();
+  const cacheVersion = basename5(root), declaredVersion = manifest.version === undefined ? "" : typeof manifest.version === "string" ? manifest.version.trim() : null;
+  if (declaredVersion === null || (declaredVersion ? declaredVersion !== cacheVersion : cacheVersion !== CODEX_DEFAULT_AGENT_PLUGIN_VERSION))
+    refuse();
+  if (manifest.hooks !== undefined && !isBundledCleanupHooks(root, manifest.name, manifest.hooks) || manifest.commands !== undefined || manifest.mcpServers !== undefined && manifest.mcpServers !== "./.mcp.json" || manifest.apps !== undefined && manifest.apps !== "./.app.json" || lstatSync11(join16(root, "hooks"), { throwIfNoEntry: false }))
+    refuse();
+  const mcp = join16(root, ".mcp.json"), mcpPresent = lstatSync11(mcp, { throwIfNoEntry: false });
+  if (manifest.hooks !== undefined && (manifest.mcpServers !== undefined || mcpPresent))
+    refuse();
+  if (mcpPresent && (!mcpPresent.isFile() || mcpPresent.isSymbolicLink() || mcpPresent.size > 1024 * 1024 || realpathSync3(mcp) !== mcp))
+    refuse();
+  if (Boolean(mcpPresent) !== (manifest.mcpServers !== undefined))
+    refuse();
+  const mcpSha256 = mcpPresent ? mcpControls(mcp, read) : undefined;
+  const app = join16(root, ".app.json"), present = lstatSync11(app, { throwIfNoEntry: false });
+  if (present && (!present.isFile() || present.isSymbolicLink() || present.size > 1024 * 1024))
+    refuse();
+  if (manifest.apps !== undefined && !present)
+    refuse();
+  const appSha256 = present ? appControls(app, read) : undefined;
+  return { namespace: manifest.name, manifestSha256, ...appSha256 ? { appSha256 } : {}, ...mcpSha256 ? { mcpSha256 } : {} };
+}
+function reviewedDisabledCodexPluginParent(cache, parent, controls, rules) {
+  try {
+    const parts = relative4(cache, parent).split(sep4), enrolled = controls.filter((control) => control.pluginParent === parent);
+    if (resolve9(parent) !== parent || parts.length !== 2 || parts.some((part) => !identifier2(part)) || !enrolled.length || !Array.isArray(rules))
+      return false;
+    for (let cursor = parent;; cursor = dirname10(cursor)) {
+      const stat = lstatSync11(cursor, { throwIfNoEntry: false });
+      if (stat && (!stat.isDirectory() || stat.isSymbolicLink()))
+        return false;
+      if (dirname10(cursor) === cursor)
+        break;
+    }
+    return enrolled.every((control) => control.namespace === parts[1] && control.pluginId === `${parts[1]}@${parts[0]}` && remotePluginIdentifier(control.remotePluginId) && control.skillsOnly === true && !control.appSha256 && !control.mcpSha256 && control.name.startsWith(control.namespace + ":") && /^[a-f0-9]{64}$/.test(control.manifestSha256) && rules.some((rule) => typeof rule?.name === "string" && rule.name.trim() === control.name && rule.enabled === false) && !rules.some((rule) => (typeof rule?.name === "string" && rule.name.trim() === control.name || typeof rule?.path === "string" && (rule.path === parent || rule.path.startsWith(parent + sep4))) && rule.enabled !== false));
+  } catch {
+    return false;
+  }
+}
+function absentDisabledCodexPluginParent(cache, parent, controls, rules) {
+  return reviewedDisabledCodexPluginParent(cache, parent, controls, rules) && !lstatSync11(parent, { throwIfNoEntry: false });
+}
+function reviewedRetiredCodexRoot(cache, root, controls, rules, read, allowAbsent = false) {
+  try {
+    const parent = dirname10(root), parts = relative4(cache, parent).split(sep4), enrolled = controls.filter((control) => control.pluginParent === parent);
+    if (resolve9(root) !== root || parts.length !== 2 || parts.some((part) => !identifier2(part)) || !basename5(root) || basename5(root) === "latest" || !enrolled.length || !Array.isArray(rules))
+      return false;
+    for (let cursor = root;; cursor = dirname10(cursor)) {
+      const stat = lstatSync11(cursor, { throwIfNoEntry: false });
+      if (stat && (!stat.isDirectory() || stat.isSymbolicLink()))
+        return false;
+      if (dirname10(cursor) === cursor)
+        break;
+    }
+    if (!enrolled.every((control) => control.namespace === parts[1] && control.pluginId === `${parts[1]}@${parts[0]}` && remotePluginIdentifier(control.remotePluginId) && control.skillsOnly === true && !control.appSha256 && !control.mcpSha256 && control.name.startsWith(control.namespace + ":") && /^[a-f0-9]{64}$/.test(control.manifestSha256) && rules.some((rule) => typeof rule?.name === "string" && rule.name.trim() === control.name && rule.enabled === false) && !rules.some((rule) => (typeof rule?.name === "string" && rule.name.trim() === control.name || typeof rule?.path === "string" && (rule.path === parent || rule.path === root || rule.path.startsWith(root + sep4))) && rule.enabled !== false)))
+      return false;
+    if (!lstatSync11(root, { throwIfNoEntry: false }))
+      return allowAbsent && (lstatSync11(parent, { throwIfNoEntry: false }) ? enrolled.every((control) => remoteInstallationMatches(parent, control.remotePluginId, read)) : absentDisabledCodexPluginParent(cache, parent, controls, rules));
+    if (!enrolled.every((control) => remoteInstallationMatches(parent, control.remotePluginId, read)))
+      return false;
+    const parsed = rootControls(root, read);
+    if (JSON.parse(read(join16(root, ".codex-plugin/plugin.json"))).hooks !== undefined)
+      return false;
+    if (!enrolled.some((control) => control.namespace === parsed.namespace && control.manifestSha256 === parsed.manifestSha256 && !parsed.appSha256 && !parsed.mcpSha256))
+      return false;
+    let entries = 0;
+    const emptySkills = (directory, depth) => depth <= 64 && readdirSync6(directory).every((name) => {
+      if (++entries > 4096 || name === "SKILL.md")
+        return false;
+      const path = join16(directory, name), stat = lstatSync11(path);
+      return !stat.isSymbolicLink() && (stat.isFile() || stat.isDirectory() && emptySkills(path, depth + 1));
+    });
+    return emptySkills(root, 0);
+  } catch {
+    return false;
+  }
+}
+function reviewedCodexPluginCapabilitiesUnchanged(cache, controls, read, rules) {
+  if (!Array.isArray(controls) || controls.length > 4096)
+    return false;
+  let entries = 0;
+  try {
+    for (const parent of new Set(controls.map((control) => control.pluginParent))) {
+      if (absentDisabledCodexPluginParent(cache, parent, controls, rules))
+        continue;
+      if (!parent.startsWith(cache + sep4) || !lstatSync11(parent, { throwIfNoEntry: false })?.isDirectory() || realpathSync3(parent) !== parent)
+        return false;
+      for (const control of controls.filter((control2) => control2.pluginParent === parent)) {
+        if (control.remotePluginId !== undefined && !remoteInstallationMatches(parent, control.remotePluginId, read))
+          return false;
+      }
+      const names = readdirSync6(parent);
+      entries += names.length;
+      if (entries > 4096)
+        return false;
+      for (const name of names) {
+        let root = join16(parent, name), stat = lstatSync11(root);
+        if (stat.isSymbolicLink()) {
+          const target = resolve9(parent, readlinkSync3(root));
+          if (name !== "latest" || dirname10(target) !== parent || !lstatSync11(target).isDirectory() || realpathSync3(target) !== target)
+            return false;
+          root = target;
+          stat = lstatSync11(root);
+        }
+        if (!stat.isDirectory() || ![".codex-plugin/plugin.json", ".app.json", "hooks", ".mcp.json"].some((path) => lstatSync11(join16(root, path), { throwIfNoEntry: false })))
+          continue;
+        const parsed = rootControls(root, read);
+        if (!controls.some((control) => control.pluginParent === parent && control.namespace === parsed.namespace && control.manifestSha256 === parsed.manifestSha256 && control.appSha256 === parsed.appSha256 && control.mcpSha256 === parsed.mcpSha256))
+          return false;
+      }
+    }
+    return true;
+  } catch {
+    return false;
+  }
+}
 function sourceInputUnchanged(input2, cache, read) {
   try {
     const parts = relative4(cache, input2.pluginParent).split(sep4);
@@ -47709,7 +47991,7 @@ function reviewedCodexPluginSourceRoots(cache, inputs, read) {
     refuse();
   return roots;
 }
-var identifier2 = (v) => typeof v === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(v);
+var identifier2 = (v) => typeof v === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(v), CODEX_DEFAULT_AGENT_PLUGIN_VERSION = "1.0.0";
 var init_codex_plugin_skill_controls = __esm(() => {
   init_claude_settings_witness();
   init_codex_native_compatibility();
@@ -48235,6 +48517,7 @@ var init_codex_hook_trust_files = () => {};
 
 // src/lib/agent-integration.ts
 var init_agent_integration = __esm(() => {
+  init_codex_corpus_write();
   init_codex_plugin_skill_controls();
   init_codex_native_skill_catalog();
   init_codex_settings_witness();
@@ -48261,6 +48544,7 @@ var init_home_migration = __esm(() => {
 
 // src/lib/agent-sync.ts
 var init_agent_sync = __esm(() => {
+  init_codex_corpus_write();
   init_agent_integration();
   init_portable_skills();
   init_home_migration();
@@ -48502,6 +48786,7 @@ function readBundledSkillVersion(name) {
 }
 var AGENT_TARGETS, AGENT_LABELS;
 var init_installer = __esm(() => {
+  init_codex_corpus_write();
   init_agent_sync();
   init_agent_integration();
   init_portable_skills();
@@ -49921,6 +50206,94 @@ function projected(source, changes, budget = discoveryByteBudget()) {
     return digest(text2);
   return projectNativeDiscoveryFields(text2, source.format, source.fields ?? [], source.path);
 }
+function absentCodexSkillRoots(binding) {
+  const controls = binding.codexDisabledPluginSkills;
+  if (controls === undefined || Array.isArray(controls) && !controls.length)
+    return [];
+  if (binding.agent !== "codex" || !Array.isArray(controls) || controls.length > 4096)
+    throw new Error("Invalid disabled Codex discovery proof");
+  if (binding.method !== "reviewed" || controls.every((control) => lstatSync18(control.pluginParent, { throwIfNoEntry: false })))
+    return [];
+  const cache = dirname15(dirname15(controls[0].pluginParent)), config2 = join25(dirname15(dirname15(cache)), "config.toml");
+  const source = binding.sources.find((source2) => source2.path === config2 && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined);
+  if (!source || projected(source) !== source.sha256)
+    throw new Error("Missing current disabled Codex configuration witness");
+  const rules = Bun.TOML.parse(read(config2)).skills?.config ?? [];
+  return [...new Set(controls.map((control) => control.pluginParent))].filter((parent) => !codexDirectHookSelects(cache, parent) && absentDisabledCodexPluginParent(cache, parent, controls, rules));
+}
+function codexDirectHookSelects(cache, root) {
+  const codex = dirname15(dirname15(cache)), config2 = Bun.TOML.parse(read(join25(codex, "config.toml")) ?? "");
+  const hooks = read(join25(codex, "hooks.json"));
+  if (hooks !== null)
+    hashNativeJsonControls(hooks);
+  return JSON.stringify(config2.hooks ?? {}).includes(root) || hooks !== null && JSON.stringify(JSON.parse(hooks)).includes(root);
+}
+function retiredCodexRoots(binding) {
+  const proof = binding.codexRetiredMaterializations;
+  if (proof === undefined)
+    return [];
+  const controls = binding.codexDisabledPluginSkills;
+  if (binding.agent !== "codex" || binding.method !== "reviewed" || !Array.isArray(controls) || !controls.length || !Array.isArray(proof.roots) || proof.roots.length > AGENT_POLICY_LIMITS.discoveryRoots || new Set(proof.roots).size !== proof.roots.length || !Array.isArray(proof.directories) || proof.parents !== undefined && (!Array.isArray(proof.parents) || proof.parents.length > AGENT_POLICY_LIMITS.discoveryRoots || new Set(proof.parents).size !== proof.parents.length) || !proof.roots.length && !proof.parents?.length)
+    throw new Error("Invalid retired Codex materialization proof");
+  const cache = dirname15(dirname15(controls[0].pluginParent)), config2 = join25(dirname15(dirname15(cache)), "config.toml");
+  const source = binding.sources.find((source2) => source2.path === config2 && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined);
+  if (!source || projected(source) !== source.sha256)
+    throw new Error("Missing current retired Codex configuration witness");
+  const rules = Bun.TOML.parse(read(config2)).skills?.config ?? [];
+  if ((proof.parents ?? []).some((parent) => codexDirectHookSelects(cache, parent) || !reviewedDisabledCodexPluginParent(cache, parent, controls, rules)) || !reviewedCodexPluginCapabilitiesUnchanged(cache, controls, (path) => read(path), rules))
+    throw new Error("Retired Codex parent capabilities changed");
+  for (const root of proof.roots) {
+    const manifest = binding.sources.find((source2) => source2.path === join25(root, ".codex-plugin/plugin.json") && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined && [undefined, "bytes"].includes(source2.hashMode));
+    if (!manifest || codexDirectHookSelects(cache, root) || !reviewedRetiredCodexRoot(cache, root, controls, rules, (path) => read(path), true))
+      throw new Error("Retired Codex materialization changed");
+  }
+  return proof.roots;
+}
+function absentRetiredClaudeRoots(binding) {
+  if (binding.agent !== "claude" || binding.method !== "reviewed")
+    return [];
+  const result = new Set;
+  for (const source of binding.sources) {
+    if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || ![undefined, "bytes"].includes(source.hashMode) || source.sha256 === null)
+      continue;
+    const marker = sep5 + ".claude" + sep5 + "plugins" + sep5 + "cache" + sep5, at = source.path.indexOf(marker);
+    if (at < 0 || source.path.indexOf(marker, at + 1) >= 0)
+      continue;
+    const cache = source.path.slice(0, at + marker.length - 1), parts = source.path.slice(at + marker.length).split(sep5);
+    if (parts.length < 4 || parts.slice(0, 3).some((part) => !part || part === "." || part === ".."))
+      continue;
+    const root = join25(cache, ...parts.slice(0, 3));
+    safe4(root);
+    if (lstatSync18(root, { throwIfNoEntry: false }))
+      continue;
+    const claude = dirname15(dirname15(cache)), settings = join25(claude, "settings.json"), registry2 = join25(claude, "plugins/installed_plugins.json");
+    const full = (path) => binding.sources.find((item) => item.path === path && item.sha256 !== null && item.format === undefined && item.fields === undefined);
+    const configSource = full(settings), registrySource = full(registry2);
+    if (!configSource || !registrySource || projected(configSource) !== configSource.sha256 || projected(registrySource) !== registrySource.sha256)
+      continue;
+    const settingsText = read(settings), registryText = read(registry2);
+    hashNativeJsonControls(settingsText);
+    hashNativeJsonControls(registryText);
+    const config2 = JSON.parse(settingsText), installed = JSON.parse(registryText), id = `${parts[1]}@${parts[0]}`;
+    if (installed.version !== 2 || !installed.plugins || typeof installed.plugins !== "object" || Array.isArray(installed.plugins) || config2.enabledPlugins?.[id] !== true)
+      continue;
+    if (JSON.stringify(config2.hooks ?? {}).includes(root))
+      continue;
+    const rows = installed.plugins[id];
+    if (!Array.isArray(rows) || rows.length !== 1 || rows[0]?.scope !== "user" || typeof rows[0]?.installPath !== "string")
+      continue;
+    const active = rows[0].installPath;
+    if (rows[0].version !== basename8(active) || resolve15(active) !== active || dirname15(active) !== dirname15(root) || active === root || !lstatSync18(active, { throwIfNoEntry: false })?.isDirectory() || realpathSync5(active) !== active)
+      continue;
+    const activeManifest = full(join25(active, ".claude-plugin/plugin.json"));
+    if (!activeManifest || projected(activeManifest) !== activeManifest.sha256)
+      continue;
+    if (Object.values(installed.plugins).some((value) => !Array.isArray(value) || value.some((row) => !row || typeof row.installPath !== "string" || row.installPath === root || row.installPath.startsWith(root + sep5) || root.startsWith(row.installPath + sep5))))
+      continue;
+    result.add(root);
+  }
+  return [...result];
+}
 function verifyAgentDiscovery(binding, codexRecovery) {
   if (codexRecovery)
     assertCodexHookDiscoveryRecovery(binding, codexRecovery);
@@ -49929,15 +50302,33 @@ function verifyAgentDiscovery(binding, codexRecovery) {
   if (binding.agent === "hermes" && !binding.directories?.length)
     throw new Error("Hermes discovery requires directory membership coverage; run skills hook install with a fresh discovery review");
   const installationRoots = codexInstallationRoots(binding);
+  const retiredRoots = retiredCodexRoots(binding);
   const installationInput = (path) => installationRoots.some((root) => path === root || path.startsWith(root + sep5));
   if (binding.directories !== undefined) {
     const projected2 = binding.codexInstallationInputs?.directories ?? [];
     const ancestors2 = binding.directories.filter((directory) => installationRoots.some((root) => root.startsWith(directory.path + sep5)));
     if (projected2.length !== ancestors2.length || projected2.some((directory) => !ancestors2.some((original) => original.path === directory.path)))
       throw new Error("Missing installation input directory projection");
-    verifyDiscoveryDirectories(binding.directories.filter((directory) => !installationInput(directory.path) && !ancestors2.includes(directory)));
+    const ordinary = binding.directories.filter((directory) => !installationInput(directory.path) && !ancestors2.includes(directory));
+    if (binding.codexRetiredMaterializations) {
+      const projection = binding.codexRetiredMaterializations.directories;
+      if (projection.length !== ordinary.length || projection.some((item, index) => item.path !== ordinary[index]?.path))
+        throw new Error("Missing retired Codex directory projection");
+      const omitted = [...retiredRoots, ...(binding.codexRetiredMaterializations.parents ?? []).filter((parent) => !lstatSync18(parent, { throwIfNoEntry: false }))];
+      if (projection.every((item) => Array.isArray(item.entries)))
+        verifyDiscoveryDirectoryProjection(projection, omitted);
+      else {
+        if (omitted.some((root) => !retiredRoots.includes(root)))
+          throw new Error("Missing reviewed directory membership inventory; provide a fresh discovery review");
+        const current = captureDiscoveryDirectoryProjection(ordinary.map((item) => item.path), retiredRoots).map(({ entries, ...item }) => item);
+        if (!isDeepStrictEqual3(current, projection))
+          throw new Error("Native discovery directory membership changed outside retired Codex roots");
+      }
+    } else
+      verifyDiscoveryDirectories(ordinary);
     verifyDiscoveryDirectories(projected2, installationRoots);
   }
+  const absentRoots = [...absentCodexSkillRoots(binding), ...absentRetiredClaudeRoots(binding), ...retiredRoots.filter((root) => !lstatSync18(root, { throwIfNoEntry: false }))];
   const budget = discoveryByteBudget();
   for (const source of binding.sources) {
     assertMarketplaceBinding(binding, source);
@@ -49951,12 +50342,21 @@ function verifyAgentDiscovery(binding, codexRecovery) {
       safe4(source.path);
       continue;
     }
+    if (absentRoots.some((root) => source.path.startsWith(root + sep5)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)) {
+      safe4(source.path);
+      continue;
+    }
     const current = projected(source, undefined, budget);
     if (current !== source.sha256 && !verifiesCodexHookDiscoverySource(binding, source, current, codexRecovery))
       throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
   }
   for (const root of binding.roots)
     safe4(root);
+  for (const root of absentRoots) {
+    safe4(root);
+    if (lstatSync18(root, { throwIfNoEntry: false }))
+      throw new Error("Retired native materialization changed during discovery verification");
+  }
 }
 function codexInstallationRoots(binding) {
   const proof = binding.codexInstallationInputs;

package/bin/migrate.js

@@ -7,7 +7,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.36",
+  version: "0.10.39",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -57,8 +57,8 @@ var package_default = {
   types: "./dist/index.d.ts",
   scripts: {
     clean: "rm -rf bin/ dist/",
-    build: "bun run clean && bun build ./src/cli/index.tsx --outdir ./bin --target bun && bun build ./src/mcp/index.ts --outfile ./bin/mcp.js --target bun && bun build ./src/server/index.ts --outfile ./bin/server.js --target bun && bun build ./src/server/worker.ts --outfile ./bin/worker.js --target bun && bun build ./src/server/migrate.ts --outfile ./bin/migrate.js --target bun && bun build ./src/server/maintenance.ts --outfile ./bin/maintenance.js --target bun && bun build ./src/index.ts ./src/storage.ts ./src/sdk/index.ts ./src/admin-contract.ts --outdir ./dist --target bun && tsc --emitDeclarationOnly --declaration --outDir dist",
-    "build:js": "rm -rf dist && bun build ./src/index.ts ./src/storage.ts ./src/sdk/index.ts ./src/admin-contract.ts --outdir ./dist --target bun && tsc --emitDeclarationOnly --declaration --outDir dist",
+    build: "bun run clean && bun build --external @hasna/contracts/kernel-lock ./src/cli/index.tsx --outdir ./bin --target bun && bun build --external @hasna/contracts/kernel-lock ./src/mcp/index.ts --outfile ./bin/mcp.js --target bun && bun build --external @hasna/contracts/kernel-lock ./src/server/index.ts --outfile ./bin/server.js --target bun && bun build --external @hasna/contracts/kernel-lock ./src/server/worker.ts --outfile ./bin/worker.js --target bun && bun build --external @hasna/contracts/kernel-lock ./src/server/migrate.ts --outfile ./bin/migrate.js --target bun && bun build --external @hasna/contracts/kernel-lock ./src/server/maintenance.ts --outfile ./bin/maintenance.js --target bun && bun build --external @hasna/contracts/kernel-lock ./src/index.ts ./src/storage.ts ./src/sdk/index.ts ./src/admin-contract.ts --outdir ./dist --target bun && tsc --emitDeclarationOnly --declaration --outDir dist",
+    "build:js": "rm -rf dist && bun build --external @hasna/contracts/kernel-lock ./src/index.ts ./src/storage.ts ./src/sdk/index.ts ./src/admin-contract.ts --outdir ./dist --target bun && tsc --emitDeclarationOnly --declaration --outDir dist",
     test: "bun test --timeout 30000",
     dev: "bun run ./src/cli/index.tsx",
     "dev:watch": "bun --watch run ./src/cli/index.tsx",
@@ -96,7 +96,6 @@ var package_default = {
   author: "Hasna",
   license: "Apache-2.0",
   devDependencies: {
-    "@hasna/contracts": "1.1.0",
     "@types/bun": "1.3.14",
     "@types/node": "25.2.3",
     "@types/react": "^18.2.0",
@@ -118,7 +117,8 @@ var package_default = {
     "ink-spinner": "^5.0.0",
     "ink-text-input": "^6.0.0",
     react: "^18.2.0",
-    zod: "^4.3.6"
+    zod: "^4.3.6",
+    "@hasna/contracts": "1.3.5"
   },
   engines: {
     bun: ">=1.0.0"