@hasna/skills 0.10.49 → 0.10.51

package/bin/maintenance.js

@@ -1909,7 +1909,7 @@ var {
 // src/server/maintenance-entry.ts
 import { closeSync, constants, fstatSync, lstatSync, openSync, readSync } from "fs";
 import { createHash as createHash3 } from "crypto";
-var {SQL: SQL2 } = globalThis.Bun;
+var {SQL: SQL3 } = globalThis.Bun;
 
 // src/server/execution-grant-store.ts
 import { randomUUID } from "crypto";
@@ -3991,6 +3991,140 @@ async function inspectEnrollment(databaseUrl, input) {
   }
 }
 
+// src/server/schema-census.ts
+var {SQL: SQL2 } = globalThis.Bun;
+
+class SchemaCensusError extends Error {
+  code;
+  constructor(code) {
+    super(code);
+    this.code = code;
+    this.name = "SchemaCensusError";
+  }
+}
+var refuse2 = (code) => {
+  throw new SchemaCensusError(code);
+};
+var FIXED_SCHEMA = "public";
+var STATEMENT_TIMEOUT_MS = 5000;
+var LOCK_TIMEOUT_MS = 1000;
+var MAX_MIGRATION_VERSIONS = 128;
+var MAX_MIGRATION_VERSION_CHARS = 64;
+var MAX_IDENTIFIER_CHARS = 128;
+var MAX_SERVER_VERSION_CHARS = 256;
+var MAX_CENSUS_BYTES = 16 * 1024;
+var boundedText = (value, max) => {
+  if (typeof value !== "string" || value.length === 0 || /[\u0000-\u001f\u007f]/.test(value))
+    return refuse2("CENSUS_INVALID_RESULT");
+  if (value.length > max)
+    return refuse2("CENSUS_OUTPUT_UNBOUNDED");
+  return value;
+};
+var boundedCount = (value) => {
+  if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0)
+    return refuse2("CENSUS_INVALID_RESULT");
+  return value;
+};
+async function inspectSchemaCensus(databaseUrl) {
+  try {
+    const url = new URL(databaseUrl);
+    if (!["postgres:", "postgresql:"].includes(url.protocol) || !url.hostname)
+      refuse2("CENSUS_POSTGRES_REQUIRED");
+  } catch {
+    refuse2("CENSUS_POSTGRES_REQUIRED");
+  }
+  let sql;
+  try {
+    sql = new SQL2(databaseUrl, { max: 1, connectionTimeout: 5, idleTimeout: 5 });
+    return await sql.begin("ISOLATION LEVEL REPEATABLE READ READ ONLY", async (tx) => {
+      await tx.unsafe("SET LOCAL statement_timeout = '5s'");
+      await tx.unsafe("SET LOCAL lock_timeout = '1s'");
+      const mode = await tx`SELECT current_setting('transaction_read_only') AS read_only,
+        current_setting('transaction_isolation') AS isolation,
+        current_setting('statement_timeout') AS statement_timeout,
+        current_setting('lock_timeout') AS lock_timeout`;
+      if (mode.length !== 1 || mode[0].read_only !== "on" || mode[0].isolation !== "repeatable read" || mode[0].statement_timeout !== "5s" || mode[0].lock_timeout !== "1s") {
+        refuse2("CENSUS_FAILED");
+      }
+      const identity = await tx`SELECT current_database() AS database, current_user AS role,
+        version() AS server_version, current_schema() AS schema`;
+      if (identity.length !== 1)
+        refuse2("CENSUS_INVALID_RESULT");
+      const database = boundedText(identity[0].database, MAX_IDENTIFIER_CHARS);
+      const role = boundedText(identity[0].role, MAX_IDENTIFIER_CHARS);
+      const serverVersion = boundedText(identity[0].server_version, MAX_SERVER_VERSION_CHARS);
+      if (identity[0].schema !== FIXED_SCHEMA)
+        refuse2("CENSUS_TARGET_MISMATCH");
+      const ledger = await tx`SELECT version FROM public.schema_migrations ORDER BY version LIMIT ${MAX_MIGRATION_VERSIONS + 1}`;
+      if (ledger.length > MAX_MIGRATION_VERSIONS)
+        refuse2("CENSUS_OUTPUT_UNBOUNDED");
+      const versions = ledger.map((row) => boundedText(row.version, MAX_MIGRATION_VERSION_CHARS));
+      const registryCount = await tx`SELECT count(*)::int AS rows FROM public.skills_registry`;
+      const versionCount = await tx`SELECT count(*)::int AS rows FROM public.skills_versions`;
+      if (registryCount.length !== 1 || versionCount.length !== 1)
+        refuse2("CENSUS_INVALID_RESULT");
+      const registryRows = boundedCount(registryCount[0].rows);
+      const versionRows = boundedCount(versionCount[0].rows);
+      const groups = await tx`SELECT lifecycle, (tombstoned_at IS NOT NULL) AS tombstoned, count(*)::int AS rows
+        FROM public.skills_registry GROUP BY 1, 2 LIMIT 5`;
+      if (groups.length > 4)
+        refuse2("CENSUS_INVALID_RESULT");
+      const lifecycle = { active: { live: 0, tombstoned: 0 }, archived: { live: 0, tombstoned: 0 } };
+      for (const group of groups) {
+        const name = group.lifecycle;
+        const tombstoned = group.tombstoned;
+        if (name !== "active" && name !== "archived" || typeof tombstoned !== "boolean")
+          return refuse2("CENSUS_INVALID_RESULT");
+        lifecycle[name][tombstoned ? "tombstoned" : "live"] = boundedCount(group.rows);
+      }
+      const epochColumn = await tx`SELECT count(*)::int AS rows FROM information_schema.columns
+        WHERE table_schema = ${FIXED_SCHEMA} AND table_name = 'skills_registry' AND column_name = 'authorization_epoch'`;
+      if (epochColumn.length !== 1)
+        refuse2("CENSUS_INVALID_RESULT");
+      const epochPresent = boundedCount(epochColumn[0].rows);
+      if (epochPresent > 1)
+        refuse2("CENSUS_INVALID_RESULT");
+      let authorizationEpoch;
+      if (epochPresent === 0)
+        authorizationEpoch = { exists: false };
+      else {
+        const epochNulls = await tx`SELECT count(*)::int AS rows FROM public.skills_registry WHERE authorization_epoch IS NULL`;
+        if (epochNulls.length !== 1)
+          refuse2("CENSUS_INVALID_RESULT");
+        authorizationEpoch = { exists: true, nullCount: boundedCount(epochNulls[0].rows) };
+      }
+      const result = {
+        status: "inspected",
+        database,
+        role,
+        serverVersion,
+        schema: FIXED_SCHEMA,
+        transaction: { readOnly: true, isolation: "repeatable read", statementTimeoutMs: STATEMENT_TIMEOUT_MS, lockTimeoutMs: LOCK_TIMEOUT_MS },
+        migrations: { count: versions.length, versions },
+        registry: { rows: registryRows },
+        versions: { rows: versionRows },
+        lifecycle,
+        authorizationEpoch
+      };
+      if (Buffer.byteLength(JSON.stringify(result), "utf8") > MAX_CENSUS_BYTES)
+        refuse2("CENSUS_OUTPUT_UNBOUNDED");
+      return result;
+    });
+  } catch (error) {
+    if (error instanceof SchemaCensusError)
+      throw error;
+    const state2 = error instanceof SQL2.PostgresError ? error.errno : undefined;
+    const code = state2 === "42P01" || state2 === "42703" ? "CENSUS_SCHEMA_UNAVAILABLE" : state2 === "42501" ? "CENSUS_ACCESS_DENIED" : state2 === "25006" ? "CENSUS_WRITE_REFUSED" : state2 === "57014" || state2 === "55P03" ? "CENSUS_TIMEOUT" : ["08000", "08001", "08003", "08004", "08006", "08007", "08P01", "28000", "28P01", "57P03"].includes(state2 ?? "") ? "CENSUS_CONNECTION_FAILED" : "CENSUS_FAILED";
+    throw new SchemaCensusError(code);
+  } finally {
+    try {
+      await sql?.close({ timeout: 1 });
+    } catch {
+      throw new SchemaCensusError("CENSUS_FAILED");
+    }
+  }
+}
+
 // src/server/maintenance-entry.ts
 class InspectionInputError extends Error {
   code;
@@ -3999,6 +4133,14 @@ class InspectionInputError extends Error {
     this.code = code;
   }
 }
+
+class SchemaCensusInputError extends Error {
+  code;
+  constructor(code) {
+    super(code);
+    this.code = code;
+  }
+}
 var MAX_MANIFEST_BYTES = 32 * 1024;
 function sha256(value) {
   return createHash3("sha256").update(value).digest("hex");
@@ -4109,6 +4251,41 @@ function readInspectionManifest(path, receiptPath) {
   }
   return parsed;
 }
+function readSchemaCensusManifest(path, receiptPath) {
+  let input;
+  let parsed;
+  try {
+    input = readBoundedJson(path);
+    const value = input.value;
+    if (!value || typeof value !== "object" || Array.isArray(value))
+      throw new Error;
+    const fields = ["app", "operation", "manifestVersion", "operationId", "stationId", "keyId", "orgId", "expiresAt", "manifestDigest"];
+    if (Object.keys(value).length !== fields.length || fields.some((field) => !Object.hasOwn(value, field)))
+      throw new Error;
+    if (value.app !== "skills" || value.operation !== "inspect-schema" || value.manifestVersion !== 1)
+      throw new Error;
+    for (const field of ["operationId", "stationId", "keyId", "orgId"]) {
+      const item = value[field];
+      if (typeof item !== "string" || item.trim().length === 0 || item.length > 256 || /[\u0000-\u001f\u007f]/.test(item))
+        throw new Error;
+    }
+    if (typeof value.expiresAt !== "string" || value.expiresAt.length > 64 || !Number.isFinite(Date.parse(value.expiresAt)) || Date.parse(value.expiresAt) <= Date.now())
+      throw new Error;
+    if (typeof value.manifestDigest !== "string" || !/^[a-f0-9]{64}$/.test(value.manifestDigest))
+      throw new Error;
+    if (sha256(canonical(value)) !== value.manifestDigest)
+      throw new Error;
+    parsed = value;
+  } catch {
+    throw new SchemaCensusInputError("INVALID_CENSUS_MANIFEST");
+  }
+  try {
+    verifyOperatorReceipt(input, readBoundedJson(receiptPath).value);
+  } catch {
+    throw new SchemaCensusInputError("INVALID_OPERATOR_RECEIPT");
+  }
+  return parsed;
+}
 function registerMaintenance(parent) {
   const maintenance = parent.command("maintenance").description("Run protected, metadata-only Skills maintenance operations");
   maintenance.command("inspect-enrollment").description("Inspect one enrollment with a database-enforced read-only snapshot").requiredOption("--manifest <path>", "Fresh inspection authorization supplied by the protected task wrapper").requiredOption("--operator-receipt <path>", "Verified actor receipt written by the protected task wrapper").option("--json", "Output a safe JSON receipt", false).action(async (options) => {
@@ -4133,6 +4310,26 @@ function registerMaintenance(parent) {
       process.exitCode = 1;
     }
   });
+  maintenance.command("inspect-schema").description("Census the fixed Skills schema and migration ledger with a database-enforced read-only snapshot").requiredOption("--manifest <path>", "Fresh census authorization supplied by the protected task wrapper").requiredOption("--operator-receipt <path>", "Verified actor receipt written by the protected task wrapper").option("--json", "Output a safe JSON receipt", false).action(async (options) => {
+    try {
+      const manifest = readSchemaCensusManifest(options.manifest, options.operatorReceipt);
+      const census = await inspectSchemaCensus(process.env.HASNA_SKILLS_DATABASE_URL ?? "");
+      console.log(JSON.stringify({
+        ...census,
+        operationId: manifest.operationId,
+        keyId: manifest.keyId,
+        orgId: manifest.orgId,
+        stationId: manifest.stationId
+      }));
+    } catch (error) {
+      const code = error instanceof SchemaCensusInputError || error instanceof SchemaCensusError ? error.code : "CENSUS_FAILED";
+      if (options.json || !process.stdout.isTTY)
+        console.log(JSON.stringify({ status: "failed", code }));
+      else
+        console.error(code);
+      process.exitCode = 1;
+    }
+  });
   maintenance.command("enroll-publish").requiredOption("--manifest <path>", "Bounded target manifest supplied by the protected task wrapper").requiredOption("--operator-receipt <path>", "Verified actor receipt written by the protected task wrapper").option("--apply", "Commit the bounded scope update; defaults to dry-run", false).option("--json", "Output a safe JSON receipt", false).action(async (options) => {
     let manifest;
     let store;
@@ -4167,7 +4364,7 @@ function registerMaintenance(parent) {
       process.exitCode = 1;
     } catch (error) {
       const message = error instanceof Error ? error.message : "";
-      const state2 = error instanceof SQL2.PostgresError ? error.errno : undefined;
+      const state2 = error instanceof SQL3.PostgresError ? error.errno : undefined;
       const code = state2 === "42P01" || state2 === "42703" ? "MAINTENANCE_SCHEMA_UNAVAILABLE" : state2 === "42501" ? "MAINTENANCE_ACCESS_DENIED" : state2 === "25006" ? "MAINTENANCE_WRITE_REFUSED" : state2 === "57014" || state2 === "55P03" ? "MAINTENANCE_TIMEOUT" : ["08000", "08001", "08003", "08004", "08006", "08007", "08P01", "28000", "28P01", "57P03"].includes(state2 ?? "") ? "MAINTENANCE_CONNECTION_FAILED" : message.includes("expired") || message.includes("expiry") ? "INVALID_EXPIRY" : message.includes("receipt") || message.includes("operator") ? "INVALID_OPERATOR_RECEIPT" : message.includes("manifest") || message.includes("input") ? "INVALID_MANIFEST" : message.includes("database") || message.includes("store") ? "STORE_UNAVAILABLE" : "MAINTENANCE_FAILED";
       if (options.json || !process.stdout.isTTY)
         console.log(JSON.stringify({ status: "failed", code }));

package/bin/mcp.js

@@ -20019,7 +20019,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.49",
+    version: "0.10.51",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -38370,7 +38370,9 @@ function inferencePreference(key, child, version2) {
 function settingsDigest(text, version2 = 1) {
   const value = parse6(text);
   value.entries = value.entries.filter(([key, child]) => {
-    if (version2 !== 1 && inferencePreference(key, child, version2))
+    if (version2 === 4 && key === "theme" && child.kind === "string" && BUILTIN_THEMES.has(child.value))
+      return false;
+    if (version2 !== 1 && inferencePreference(key, child, version2 === 4 ? 3 : version2))
       return false;
     if (key === "model") {
       need(child.kind === "string", "contains an invalid model selection");
@@ -38418,6 +38420,16 @@ function hashClaudeSettingsReplacementV3(text, budget) {
   budget.remaining -= bytes;
   return settingsDigest(text, 3);
 }
+function captureClaudeSettingsV4(path, budget = { remaining: 256 * 1024 * 1024 }) {
+  return { path, hashMode: "claude-settings-v4", sha256: settingsDigest(readNativeSettingsWitnessFile(path, budget), 4) };
+}
+function hashClaudeSettingsReplacementV4(text, budget) {
+  need(typeof text === "string", "requires settings text");
+  const bytes = Buffer.byteLength(text);
+  need(bytes <= CLAUDE_SETTINGS_WITNESS_LIMITS.bytes && Number.isSafeInteger(budget.remaining) && budget.remaining >= bytes, "exceeds its byte limit");
+  budget.remaining -= bytes;
+  return settingsDigest(text, 4);
+}
 function hashNativeJsonControls(text, excludedMetadata) {
   need(Buffer.byteLength(text) <= CLAUDE_SETTINGS_WITNESS_LIMITS.bytes, "exceeds its byte limit");
   const value = parse6(text);
@@ -38450,7 +38462,7 @@ function hashSumiNativeJsonControls(text) {
   });
   return createHash2("sha256").update("hasna.skills.sumi-settings.v1\x00").update(JSON.stringify(value)).digest("hex");
 }
-var CLAUDE_SETTINGS_WITNESS_LIMITS, sameFile = (a, b) => a.dev === b.dev && a.ino === b.ino && a.mode === b.mode && a.uid === b.uid && a.gid === b.gid && a.nlink === b.nlink && a.size === b.size && a.mtimeNs === b.mtimeNs && a.ctimeNs === b.ctimeNs, BOOLEAN_PREFERENCES, ENUM_PREFERENCES, BUILTIN_MODEL_SELECTIONS, PERSISTED_EFFORT_LEVELS;
+var CLAUDE_SETTINGS_WITNESS_LIMITS, sameFile = (a, b) => a.dev === b.dev && a.ino === b.ino && a.mode === b.mode && a.uid === b.uid && a.gid === b.gid && a.nlink === b.nlink && a.size === b.size && a.mtimeNs === b.mtimeNs && a.ctimeNs === b.ctimeNs, BOOLEAN_PREFERENCES, ENUM_PREFERENCES, BUILTIN_MODEL_SELECTIONS, CLAUDE_BUILTIN_THEMES, BUILTIN_THEMES, PERSISTED_EFFORT_LEVELS;
 var init_claude_settings_witness = __esm(() => {
   CLAUDE_SETTINGS_WITNESS_LIMITS = Object.freeze({ bytes: 1024 * 1024, rows: 1024, depth: 32, nodes: 65536, stringCharacters: 16384, pathCharacters: 4096 });
   BOOLEAN_PREFERENCES = new Set([
@@ -38504,6 +38516,8 @@ var init_claude_settings_witness = __esm(() => {
     "claude-opus-4-6[1m]",
     "claude-sonnet-4-6[1m]"
   ]);
+  CLAUDE_BUILTIN_THEMES = Object.freeze(["auto", "dark", "light", "dark-daltonized", "light-daltonized", "dark-ansi", "light-ansi"]);
+  BUILTIN_THEMES = new Set(CLAUDE_BUILTIN_THEMES);
   PERSISTED_EFFORT_LEVELS = new Set(["low", "medium", "high", "xhigh"]);
 });
 
@@ -38524,6 +38538,29 @@ var init_sumi_settings_witness = __esm(() => {
   SUMI_DISCOVERY_PROJECTION_FIELDS = ["skills", "plugin", "plugins", "permissions"];
 });
 
+// src/lib/codex-native-compatibility.ts
+function supportsCodexNativeCapability(version2, capability) {
+  return typeof version2 === "string" && Object.hasOwn(MEASURED_CODEX_CAPABILITIES, version2) && MEASURED_CODEX_CAPABILITIES[version2].includes(capability);
+}
+var MEASURED_CODEX_CAPABILITIES, SUPPORTED_CODEX_HOOK_VERSIONS;
+var init_codex_native_compatibility = __esm(() => {
+  MEASURED_CODEX_CAPABILITIES = {
+    "codex-cli 0.153.0": ["hooks"],
+    "codex-cli 0.154.0": ["hooks"],
+    "codex-cli 0.155.0": ["hooks"],
+    "codex-cli 0.155.1": ["hooks"],
+    "codex-cli 0.156.1": ["hooks"],
+    "codex-cli 0.157.0": ["hooks"],
+    "codex-cli 0.157.1": ["hooks"],
+    "codex-cli 0.158.0": ["hooks"],
+    "codex-cli 0.159.0": ["hooks"],
+    "codex-cli 0.159.2": ["hooks", "qualified-skill-catalog"],
+    "codex-cli 0.160.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
+    "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
+  };
+  SUPPORTED_CODEX_HOOK_VERSIONS = Object.freeze(Object.keys(MEASURED_CODEX_CAPABILITIES).filter((version2) => supportsCodexNativeCapability(version2, "hooks")));
+});
+
 // src/lib/agent-policy-limits.ts
 import { basename as basename4, isAbsolute as isAbsolute4, join as join10, resolve as resolve3, sep as sep3 } from "path";
 function object4(value) {
@@ -38590,7 +38627,7 @@ function assertAgentPolicyCollections(policy) {
     }
   if (bridge.codexInactivePlugins !== undefined) {
     const controls = array3(bridge.codexInactivePlugins, 4096), ids = new Set;
-    requireBound(controls.length === 0 || object4(bridge.codexPluginSkillReview) && bridge.codexPluginSkillReview.version === "codex-cli 0.160.0" && typeof bridge.codexPluginSkillReview.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(bridge.codexPluginSkillReview.catalogSha256));
+    requireBound(controls.length === 0 || object4(bridge.codexPluginSkillReview) && supportsCodexNativeCapability(bridge.codexPluginSkillReview.version, "installed-plugin-review") && typeof bridge.codexPluginSkillReview.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(bridge.codexPluginSkillReview.catalogSha256));
     for (const control of controls) {
       requireBound(object4(control) && Object.keys(control).every((key) => ["pluginId", "namespace", "pluginParent", "sourceType", "sourceSha256"].includes(key)));
       text(control.pluginId, 1024);
@@ -38642,7 +38679,7 @@ function assertAgentPolicyCollections(policy) {
     }
     if (value.codexInstallationInputs !== undefined) {
       const proof = record3(value.codexInstallationInputs, 4), inputs = array3(proof.plugins, 4096), ids = new Set;
-      requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && proof.version === "codex-cli 0.160.0" && typeof proof.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(proof.catalogSha256) && inputs.length > 0 && object4(bridge.codexPluginSkillReview) && bridge.codexPluginSkillReview.version === proof.version && bridge.codexPluginSkillReview.catalogSha256 === proof.catalogSha256);
+      requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && supportsCodexNativeCapability(proof.version, "installed-plugin-review") && typeof proof.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(proof.catalogSha256) && inputs.length > 0 && object4(bridge.codexPluginSkillReview) && bridge.codexPluginSkillReview.version === proof.version && bridge.codexPluginSkillReview.catalogSha256 === proof.catalogSha256);
       for (const input2 of inputs) {
         requireBound(object4(input2) && Object.keys(input2).every((key) => ["pluginId", "namespace", "pluginParent", "sourceRoot", "sourceSha256"].includes(key)));
         text(input2.pluginId, 1024);
@@ -38666,14 +38703,14 @@ function assertAgentPolicyCollections(policy) {
       text(source.path);
       requireBound(source.sha256 === null || typeof source.sha256 === "string" && /^[a-f0-9]{64}$/.test(source.sha256));
       if (source.hashMode !== undefined)
-        requireBound(["bytes", "path-bytes", "claude-plugin-manifest-v1", "claude-plugin-registry", "claude-marketplace-registry", "claude-settings-v1", "claude-settings-v2", "claude-settings-v3", "claude-marketplace-registry-v2", "codex-settings-v1", "codex-settings-v2", "codex-settings-v3", "codex-settings-v4", "sumi-settings-v1"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
+        requireBound(["bytes", "path-bytes", "claude-plugin-manifest-v1", "claude-plugin-registry", "claude-marketplace-registry", "claude-settings-v1", "claude-settings-v2", "claude-settings-v3", "claude-settings-v4", "claude-marketplace-registry-v2", "codex-settings-v1", "codex-settings-v2", "codex-settings-v3", "codex-settings-v4", "sumi-settings-v1"].includes(source.hashMode) && source.format === undefined && source.fields === undefined && (source.hashMode === "bytes" || source.sha256 !== null));
       if (source.hashMode === "claude-plugin-manifest-v1")
         requireBound(agent === "claude" && value.agent === "claude" && ["automatic", "reviewed"].includes(value.method) && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute4(source.path) && resolve3(source.path) === source.path && source.path.endsWith(join10(sep3, ".claude-plugin", "plugin.json")) && source.managedPlugins === undefined);
       if (source.hashMode === "sumi-settings-v1")
         requireBound(agent === "sumi" && value.agent === "sumi" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute4(source.path) && resolve3(source.path) === source.path && basename4(source.path) === "sumi.json");
       if (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4"))
         requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute4(source.path) && resolve3(source.path) === source.path && basename4(source.path) === "config.toml");
-      if (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || source.hashMode === "claude-settings-v3")
+      if (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4"))
         requireBound(agent === "claude" && value.agent === "claude" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute4(source.path) && resolve3(source.path) === source.path && basename4(source.path) === "settings.json");
       if (source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2")
         requireBound(agent === "claude" && value.agent === "claude" && value.method === "reviewed" && !/[\x00-\x1f\x7f]/.test(source.path) && isAbsolute4(source.path) && resolve3(source.path) === source.path && basename4(source.path) === "known_marketplaces.json");
@@ -38707,6 +38744,7 @@ function assertAgentPolicyCollections(policy) {
 }
 var AGENT_POLICY_LIMITS;
 var init_agent_policy_limits = __esm(() => {
+  init_codex_native_compatibility();
   AGENT_POLICY_LIMITS = Object.freeze({ bytes: 1024 * 1024, agents: 16, discoverySources: 2048, discoveryRawSourceBytes: 64 * 1024 * 1024, discoveryRawTotalBytes: 256 * 1024 * 1024, discoveryPathLinks: 40, discoveryPathSteps: 256, discoveryPathSourceMetadataBytes: 64 * 1024, discoveryPathTotalMetadataBytes: 8 * 1024 * 1024, discoveryRoots: 512, discoveryDirectories: 64, discoveryDirectoryEntries: 20000, discoveryDirectoryBytes: 8 * 1024 * 1024, builtinNames: 2048, rootAliases: 2, fields: 64, pathCharacters: 4096 });
 });
 
@@ -47938,28 +47976,6 @@ function isCodexLocalStdioMcpServer(name, server) {
   }
 }
 
-// src/lib/codex-native-compatibility.ts
-function supportsCodexNativeCapability(version2, capability) {
-  return typeof version2 === "string" && Object.hasOwn(MEASURED_CODEX_CAPABILITIES, version2) && MEASURED_CODEX_CAPABILITIES[version2].includes(capability);
-}
-var MEASURED_CODEX_CAPABILITIES, SUPPORTED_CODEX_HOOK_VERSIONS;
-var init_codex_native_compatibility = __esm(() => {
-  MEASURED_CODEX_CAPABILITIES = {
-    "codex-cli 0.153.0": ["hooks"],
-    "codex-cli 0.154.0": ["hooks"],
-    "codex-cli 0.155.0": ["hooks"],
-    "codex-cli 0.155.1": ["hooks"],
-    "codex-cli 0.156.1": ["hooks"],
-    "codex-cli 0.157.0": ["hooks"],
-    "codex-cli 0.157.1": ["hooks"],
-    "codex-cli 0.158.0": ["hooks"],
-    "codex-cli 0.159.0": ["hooks"],
-    "codex-cli 0.159.2": ["hooks", "qualified-skill-catalog"],
-    "codex-cli 0.160.0": ["hooks", "qualified-skill-catalog"]
-  };
-  SUPPORTED_CODEX_HOOK_VERSIONS = Object.freeze(Object.keys(MEASURED_CODEX_CAPABILITIES).filter((version2) => supportsCodexNativeCapability(version2, "hooks")));
-});
-
 // src/lib/codex-hook-rpc.ts
 var init_codex_hook_rpc = __esm(() => {
   init_codex_corpus_write();
@@ -50580,13 +50596,13 @@ function projected(source, changes, budget2 = discoveryByteBudget()) {
       throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
     return changes?.has(source.path) ? (source.hashMode === "codex-settings-v4" ? hashCodexSettingsReplacementV4 : source.hashMode === "codex-settings-v3" ? hashCodexSettingsReplacementV3 : source.hashMode === "codex-settings-v2" ? hashCodexSettingsReplacementV2 : hashCodexSettingsReplacement)(changes.get(source.path), budget2) : current;
   }
-  if (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || source.hashMode === "claude-settings-v3") {
+  if (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4")) {
     if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || typeof source.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(source.sha256))
       throw new Error("Claude settings witnesses require exact typed metadata");
-    const current = (source.hashMode === "claude-settings-v3" ? captureClaudeSettingsV3 : source.hashMode === "claude-settings-v2" ? captureClaudeSettingsV2 : captureClaudeSettings)(source.path, budget2).sha256;
+    const current = (source.hashMode === "claude-settings-v4" ? captureClaudeSettingsV4 : source.hashMode === "claude-settings-v3" ? captureClaudeSettingsV3 : source.hashMode === "claude-settings-v2" ? captureClaudeSettingsV2 : captureClaudeSettings)(source.path, budget2).sha256;
     if (current !== source.sha256)
       throw new Error(`Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
-    return changes?.has(source.path) ? (source.hashMode === "claude-settings-v3" ? hashClaudeSettingsReplacementV3 : source.hashMode === "claude-settings-v2" ? hashClaudeSettingsReplacementV2 : hashClaudeSettingsReplacement)(changes.get(source.path), budget2) : current;
+    return changes?.has(source.path) ? (source.hashMode === "claude-settings-v4" ? hashClaudeSettingsReplacementV4 : source.hashMode === "claude-settings-v3" ? hashClaudeSettingsReplacementV3 : source.hashMode === "claude-settings-v2" ? hashClaudeSettingsReplacementV2 : hashClaudeSettingsReplacement)(changes.get(source.path), budget2) : current;
   }
   if (source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2") {
     if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || typeof source.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(source.sha256) || changes?.has(source.path))
@@ -50781,7 +50797,7 @@ function codexInstallationRoots(binding) {
   const proof = binding.codexInstallationInputs;
   if (proof === undefined)
     return [];
-  if (binding.agent !== "codex" || binding.method !== "reviewed" || proof.version !== "codex-cli 0.160.0" || !/^[a-f0-9]{64}$/.test(proof.catalogSha256) || !Array.isArray(proof.plugins) || !proof.plugins.length)
+  if (binding.agent !== "codex" || binding.method !== "reviewed" || !supportsCodexNativeCapability(proof.version, "installed-plugin-review") || !/^[a-f0-9]{64}$/.test(proof.catalogSha256) || !Array.isArray(proof.plugins) || !proof.plugins.length)
     throw new Error("Invalid native installation input proof");
   const cache = dirname15(dirname15(proof.plugins[0].pluginParent));
   const config2 = join26(dirname15(dirname15(cache)), "config.toml"), home = dirname15(dirname15(dirname15(cache)));
@@ -50805,7 +50821,7 @@ function assertMarketplaceBinding(binding, source) {
     throw new Error("Sumi settings witnesses require explicit reviewed Sumi configuration");
   if ((source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")) && (binding.agent !== "codex" || binding.method !== "reviewed" || basename8(source.path) !== "config.toml"))
     throw new Error("Codex settings witnesses require explicit reviewed Codex configuration");
-  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || source.hashMode === "claude-settings-v3") && (binding.agent !== "claude" || binding.method !== "reviewed" || basename8(source.path) !== "settings.json"))
+  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4")) && (binding.agent !== "claude" || binding.method !== "reviewed" || basename8(source.path) !== "settings.json"))
     throw new Error("Claude settings witnesses require explicit reviewed Claude configuration");
   if ((source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2") && (binding.agent !== "claude" || binding.method !== "reviewed"))
     throw new Error("Claude marketplace witnesses require explicit reviewed Claude discovery");
@@ -50927,7 +50943,7 @@ function resolveAgentDiscovery(options) {
     verifyAgentDiscovery(retained);
     if (!retained.sources.some((source) => source.path === canonical7(configPath) && source.format === undefined && source.fields === undefined))
       unresolved("retained review is missing the full agent configuration source");
-    if (retained.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical7(configPath)))
+    if (retained.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical7(configPath)))
       unresolved("retained settings witness names another configuration source");
     const covered = supersedesSettingsProjection(agent, retained.sources, canonical7(configPath)) ? sources.filter((source) => !isSupersededSettingsProjection(agent, canonical7(configPath), source)) : sources;
     if (covered.some((source) => !retained.sources.some((saved) => isDeepStrictEqual4(saved, source))) || [...roots].some((root) => !retained.roots.includes(root)) || agent === "gemini" && JSON.stringify(retained.builtinNames) !== JSON.stringify(builtinNames))
@@ -50941,7 +50957,7 @@ function resolveAgentDiscovery(options) {
     if (review.sources.some((source) => source.format !== undefined || source.fields !== undefined))
       throw new Error("Explicit discovery reviews require full source-file hashes");
     verifyAgentDiscovery(supplied);
-    if (review.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical7(configPath)))
+    if (review.sources.some((source) => (source.hashMode === "sumi-settings-v1" || source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4" || (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4")))) && source.path !== canonical7(configPath)))
       throw new Error("Semantic settings witnesses must name the configured agent configuration source");
     if (!review.sources.some((source) => source.path === canonical7(configPath)))
       throw new Error("Discovery review must include the agent configuration source");
@@ -51108,6 +51124,7 @@ var init_agent_discovery = __esm(() => {
   init_codex_plugin_skill_controls();
   init_agent_sumi();
   init_native_discovery_roots();
+  init_codex_native_compatibility();
   init_agent_discovery_directories();
 });
 

package/bin/migrate.js

@@ -25,7 +25,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.49",
+  version: "0.10.51",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/server.js

@@ -24140,7 +24140,7 @@ restoreLaunchCwd();
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.49",
+  version: "0.10.51",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/worker.js

@@ -24143,7 +24143,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.49",
+  version: "0.10.51",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/index.d.ts

@@ -64,7 +64,7 @@ export { planAgentIntegration, planClaudeStopHookUpdate, planClaudePreToolUseHoo
 export type { ClaudeManagedHookProjection, ClaudeManagedHookProjectionOptions } from "./lib/agent-integration.js";
 export { captureDiscoveryDirectories, captureDiscoveryByteSources, captureDiscoveryPathSources, type DiscoveryDirectory, type DiscoverySource } from "./lib/agent-discovery.js";
 export { captureClaudeMarketplaceRegistry, captureClaudeMarketplaceRegistryV2 } from "./lib/claude-marketplace-registry.js";
-export { captureClaudeSettings, captureClaudeSettingsV2, captureClaudeSettingsV3, upgradeClaudeSettingsWitness } from "./lib/claude-settings-witness.js";
+export { captureClaudeSettings, captureClaudeSettingsV2, captureClaudeSettingsV3, captureClaudeSettingsV4, upgradeClaudeSettingsWitness, upgradeClaudeSettingsWitnessV4 } from "./lib/claude-settings-witness.js";
 export { buildPluginProjection, pluginTreeDigest, type PluginProjectionManifest, type PluginPayloadMapping, type PluginFileWitness } from "./lib/plugin-projection.js";
 export { planPluginAdmission, admitPlugin, resolveAdmittedPlugin, pluginResolverCommand, type PluginAdmissionTarget, type PluginAdmissionBinding, type PluginAdmissionPrincipal, type PluginAdmissionPlan, type PluginAdmissionIdentity, type PluginBundleIdentity, type PluginRoutingIdentity, type PluginAdmissionReceipt } from "./lib/plugin-admission.js";
 export { captureManagedPluginRegistry, type ManagedPluginRegistrationWitness } from "./lib/plugin-discovery.js";