@hasna/skills 0.10.50 → 0.10.51

package/README.md

@@ -592,10 +592,13 @@ skills hook native-catalog --cwd /absolute/project --output /private/catalog.jso
 skills hook install --agent codex --codex-native-catalog /private/catalog.json --json
 ```
 
-Codex 0.159.2 and 0.160.0 have measured qualified-name catalog support. Native
-transport, capture and review use one capability registry. Unmeasured releases
-refuse until the native catalog/name-denial and hook-dispatch acceptance tests
-pass; an RPC handshake alone does not establish those semantics.
+Codex 0.159.2, 0.160.0 and 0.160.1 have measured qualified-name catalog support.
+Native transport, capture and review use one capability registry of exact
+releases. Unmeasured releases, including 0.160.2 and 0.161.0, refuse until the
+native catalog/name-denial and hook-dispatch acceptance tests pass; an RPC
+handshake alone does not establish those semantics. Admitting a release does not
+admit its corpus: the transport still requires the existing native corpus
+admission (see `docs/codex-corpus-writers.md`).
 
 The capture refuses an existing output file, writes mode `0600`, verifies the
 exact bytes, and reports only version, directory, count, file path and SHA-256.
@@ -643,7 +646,7 @@ different extant, witnessed user version. Individual missing files, current
 registered roots, aliases and registration changes still refuse; historical
 source hashes and typed settings witnesses remain intact.
 
-For a Codex 0.160.0 remote refresh omitted by an existing qualified-name disable,
+For a Codex 0.160.0 or 0.160.1 remote refresh omitted by an existing qualified-name disable,
 a fresh native catalog and discovery review can plan the new exact path disable
 in the same transaction. The remote installation receipt, namespace and capability
 controls must match; conflicting enable rules, unknown names and ambiguous

package/bin/index.js

@@ -36888,7 +36888,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.50",
+    version: "0.10.51",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -40269,6 +40269,29 @@ var init_sumi_settings_witness = __esm(() => {
   SUMI_DISCOVERY_PROJECTION_FIELDS = ["skills", "plugin", "plugins", "permissions"];
 });
 
+// src/lib/codex-native-compatibility.ts
+function supportsCodexNativeCapability(version, capability) {
+  return typeof version === "string" && Object.hasOwn(MEASURED_CODEX_CAPABILITIES, version) && MEASURED_CODEX_CAPABILITIES[version].includes(capability);
+}
+var MEASURED_CODEX_CAPABILITIES, SUPPORTED_CODEX_HOOK_VERSIONS;
+var init_codex_native_compatibility = __esm(() => {
+  MEASURED_CODEX_CAPABILITIES = {
+    "codex-cli 0.153.0": ["hooks"],
+    "codex-cli 0.154.0": ["hooks"],
+    "codex-cli 0.155.0": ["hooks"],
+    "codex-cli 0.155.1": ["hooks"],
+    "codex-cli 0.156.1": ["hooks"],
+    "codex-cli 0.157.0": ["hooks"],
+    "codex-cli 0.157.1": ["hooks"],
+    "codex-cli 0.158.0": ["hooks"],
+    "codex-cli 0.159.0": ["hooks"],
+    "codex-cli 0.159.2": ["hooks", "qualified-skill-catalog"],
+    "codex-cli 0.160.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
+    "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
+  };
+  SUPPORTED_CODEX_HOOK_VERSIONS = Object.freeze(Object.keys(MEASURED_CODEX_CAPABILITIES).filter((version) => supportsCodexNativeCapability(version, "hooks")));
+});
+
 // src/lib/agent-policy-limits.ts
 import { basename as basename3, isAbsolute as isAbsolute3, join as join11, resolve as resolve4, sep as sep2 } from "path";
 function object(value) {
@@ -40335,7 +40358,7 @@ function assertAgentPolicyCollections(policy) {
     }
   if (bridge.codexInactivePlugins !== undefined) {
     const controls = array(bridge.codexInactivePlugins, 4096), ids = new Set;
-    requireBound(controls.length === 0 || object(bridge.codexPluginSkillReview) && bridge.codexPluginSkillReview.version === "codex-cli 0.160.0" && typeof bridge.codexPluginSkillReview.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(bridge.codexPluginSkillReview.catalogSha256));
+    requireBound(controls.length === 0 || object(bridge.codexPluginSkillReview) && supportsCodexNativeCapability(bridge.codexPluginSkillReview.version, "installed-plugin-review") && typeof bridge.codexPluginSkillReview.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(bridge.codexPluginSkillReview.catalogSha256));
     for (const control of controls) {
       requireBound(object(control) && Object.keys(control).every((key) => ["pluginId", "namespace", "pluginParent", "sourceType", "sourceSha256"].includes(key)));
       text(control.pluginId, 1024);
@@ -40387,7 +40410,7 @@ function assertAgentPolicyCollections(policy) {
     }
     if (value.codexInstallationInputs !== undefined) {
       const proof = record(value.codexInstallationInputs, 4), inputs = array(proof.plugins, 4096), ids = new Set;
-      requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && proof.version === "codex-cli 0.160.0" && typeof proof.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(proof.catalogSha256) && inputs.length > 0 && object(bridge.codexPluginSkillReview) && bridge.codexPluginSkillReview.version === proof.version && bridge.codexPluginSkillReview.catalogSha256 === proof.catalogSha256);
+      requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && supportsCodexNativeCapability(proof.version, "installed-plugin-review") && typeof proof.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(proof.catalogSha256) && inputs.length > 0 && object(bridge.codexPluginSkillReview) && bridge.codexPluginSkillReview.version === proof.version && bridge.codexPluginSkillReview.catalogSha256 === proof.catalogSha256);
       for (const input of inputs) {
         requireBound(object(input) && Object.keys(input).every((key) => ["pluginId", "namespace", "pluginParent", "sourceRoot", "sourceSha256"].includes(key)));
         text(input.pluginId, 1024);
@@ -40452,6 +40475,7 @@ function assertAgentPolicyCollections(policy) {
 }
 var AGENT_POLICY_LIMITS;
 var init_agent_policy_limits = __esm(() => {
+  init_codex_native_compatibility();
   AGENT_POLICY_LIMITS = Object.freeze({ bytes: 1024 * 1024, agents: 16, discoverySources: 2048, discoveryRawSourceBytes: 64 * 1024 * 1024, discoveryRawTotalBytes: 256 * 1024 * 1024, discoveryPathLinks: 40, discoveryPathSteps: 256, discoveryPathSourceMetadataBytes: 64 * 1024, discoveryPathTotalMetadataBytes: 8 * 1024 * 1024, discoveryRoots: 512, discoveryDirectories: 64, discoveryDirectoryEntries: 20000, discoveryDirectoryBytes: 8 * 1024 * 1024, builtinNames: 2048, rootAliases: 2, fields: 64, pathCharacters: 4096 });
 });
 
@@ -51575,28 +51599,6 @@ function isCodexLocalStdioMcpServer(name, server) {
   }
 }
 
-// src/lib/codex-native-compatibility.ts
-function supportsCodexNativeCapability(version, capability) {
-  return typeof version === "string" && Object.hasOwn(MEASURED_CODEX_CAPABILITIES, version) && MEASURED_CODEX_CAPABILITIES[version].includes(capability);
-}
-var MEASURED_CODEX_CAPABILITIES, SUPPORTED_CODEX_HOOK_VERSIONS;
-var init_codex_native_compatibility = __esm(() => {
-  MEASURED_CODEX_CAPABILITIES = {
-    "codex-cli 0.153.0": ["hooks"],
-    "codex-cli 0.154.0": ["hooks"],
-    "codex-cli 0.155.0": ["hooks"],
-    "codex-cli 0.155.1": ["hooks"],
-    "codex-cli 0.156.1": ["hooks"],
-    "codex-cli 0.157.0": ["hooks"],
-    "codex-cli 0.157.1": ["hooks"],
-    "codex-cli 0.158.0": ["hooks"],
-    "codex-cli 0.159.0": ["hooks"],
-    "codex-cli 0.159.2": ["hooks", "qualified-skill-catalog"],
-    "codex-cli 0.160.0": ["hooks", "qualified-skill-catalog"]
-  };
-  SUPPORTED_CODEX_HOOK_VERSIONS = Object.freeze(Object.keys(MEASURED_CODEX_CAPABILITIES).filter((version) => supportsCodexNativeCapability(version, "hooks")));
-});
-
 // src/lib/codex-hook-rpc.ts
 import { join as join20 } from "path";
 import { execFile, spawn as spawn2 } from "child_process";
@@ -52193,6 +52195,7 @@ function reviewedCodexPluginCapabilitiesUnchanged(cache3, controls, read2, rules
 function reviewCodexPluginControls(catalog, documents, cache3, cwd2, read2, rules, pluginSettings, plannedRules, denials = []) {
   if (!supportsCodexNativeCapability(catalog?.version, "qualified-skill-catalog") || catalog.cwd !== cwd2)
     refuse2();
+  const installedPluginReview = supportsCodexNativeCapability(catalog.version, "installed-plugin-review");
   if (!Array.isArray(denials) || denials.length > 4096 || new Set(denials.map((item) => item?.path)).size !== denials.length || denials.some((item) => !item || Object.keys(item).sort().join(",") !== "name,path,sha256" || typeof item.name !== "string" || typeof item.path !== "string" || !/^[a-f0-9]{64}$/.test(item.sha256)))
     refuse2();
   const usedDenials = new Set;
@@ -52224,7 +52227,7 @@ function reviewCodexPluginControls(catalog, documents, cache3, cwd2, read2, rule
     if (listed.length > 1)
       refuse2();
     const installed = installedPlugins.filter((plugin) => plugin.id === expectedPluginId && plugin.name === pluginName);
-    if (catalog.version === "codex-cli 0.160.0" && installed.length === 1 && installed[0].installed && installed[0].localVersion === basename6(located.root) && installed[0].sourceType === "local" && codexPluginSourceIsConfigControlled(installed[0])) {
+    if (installedPluginReview && installed.length === 1 && installed[0].installed && installed[0].localVersion === basename6(located.root) && installed[0].sourceType === "local" && codexPluginSourceIsConfigControlled(installed[0])) {
       const plugin = installed[0], input = { pluginId: expectedPluginId, namespace: located.namespace, pluginParent: located.pluginParent, sourceRoot: plugin.sourcePath, sourceSha256: plugin.sourceSha256 };
       if (input.sourceRoot !== located.root && !input.sourceRoot.startsWith(cache3 + sep6) && (lstatSync13(input.sourceRoot, { throwIfNoEntry: false }) || documents.some((path) => path.startsWith(input.sourceRoot + sep6)))) {
         if (skills.some((skill) => skill.path === input.sourceRoot || skill.path.startsWith(input.sourceRoot + sep6)) || !sourceInputUnchanged(input, cache3, read2))
@@ -52233,7 +52236,7 @@ function reviewCodexPluginControls(catalog, documents, cache3, cwd2, read2, rule
       }
     }
     const settings = pluginSettings && typeof pluginSettings === "object" && !Array.isArray(pluginSettings) ? pluginSettings : undefined;
-    if (catalog.version === "codex-cli 0.160.0" && !listed.length && !skills.some((skill) => skill.pluginId === expectedPluginId) && installed.length === 1 && installed[0].installed && !installed[0].enabled && codexPluginSourceIsConfigControlled(installed[0]) && settings && Object.hasOwn(settings, expectedPluginId) && settings[expectedPluginId]?.enabled === false) {
+    if (installedPluginReview && !listed.length && !skills.some((skill) => skill.pluginId === expectedPluginId) && installed.length === 1 && installed[0].installed && !installed[0].enabled && codexPluginSourceIsConfigControlled(installed[0]) && settings && Object.hasOwn(settings, expectedPluginId) && settings[expectedPluginId]?.enabled === false) {
       if (!Array.isArray(rules))
         refuse2();
       const exactPathDeny = rules.some((rule) => rule?.path === document3 && rule?.enabled === false);
@@ -52266,12 +52269,12 @@ function reviewCodexPluginControls(catalog, documents, cache3, cwd2, read2, rule
       const exactPathDeny = Array.isArray(rules) && rules.some((rule) => rule?.path === document3 && rule?.enabled === false);
       const nativeSkill = { name: parsed.name, path: document3, pluginId: expectedPluginId, enabled: true };
       const denial = denials.find((item) => item.path === document3);
-      const explicitDeny = denial !== undefined && remotePluginId !== undefined && catalog.version === "codex-cli 0.160.0" && denial.name === parsed.name && denial.sha256 === createHash12("sha256").update(read2(document3)).digest("hex") && Array.isArray(rules) && !rules.some((rule) => (rule?.path === document3 || typeof rule?.name === "string" && rule.name.trim() === parsed.name) && rule.enabled !== false) && Array.isArray(plannedRules) && plannedRules.some((rule) => rule?.path === document3 && rule.enabled === false);
+      const explicitDeny = denial !== undefined && remotePluginId !== undefined && installedPluginReview && denial.name === parsed.name && denial.sha256 === createHash12("sha256").update(read2(document3)).digest("hex") && Array.isArray(rules) && !rules.some((rule) => (rule?.path === document3 || typeof rule?.name === "string" && rule.name.trim() === parsed.name) && rule.enabled !== false) && Array.isArray(plannedRules) && plannedRules.some((rule) => rule?.path === document3 && rule.enabled === false);
       if (denial && !explicitDeny)
         refuse2();
       if (explicitDeny)
         usedDenials.add(document3);
-      const plannedPathDeny = catalog.version === "codex-cli 0.160.0" && remotePluginId !== undefined && Array.isArray(rules) && rules.some((rule) => typeof rule?.name === "string" && rule.name.trim() === parsed.name && rule.enabled === false) && !rules.some((rule) => (rule?.path === document3 || typeof rule?.name === "string" && rule.name.trim() === parsed.name) && rule.enabled !== false) && Array.isArray(plannedRules) && plannedRules.some((rule) => rule?.path === document3 && rule.enabled === false) && isCodexNativeSkillDisabled(nativeSkill, plannedRules);
+      const plannedPathDeny = installedPluginReview && remotePluginId !== undefined && Array.isArray(rules) && rules.some((rule) => typeof rule?.name === "string" && rule.name.trim() === parsed.name && rule.enabled === false) && !rules.some((rule) => (rule?.path === document3 || typeof rule?.name === "string" && rule.name.trim() === parsed.name) && rule.enabled !== false) && Array.isArray(plannedRules) && plannedRules.some((rule) => rule?.path === document3 && rule.enabled === false) && isCodexNativeSkillDisabled(nativeSkill, plannedRules);
       if (!explicitDeny && (!exactPathDeny && !plannedPathDeny || !isCodexNativeSkillDisabled(nativeSkill, rules)))
         refuse2();
     }
@@ -55052,7 +55055,7 @@ function planAgentIntegration(options) {
     const { codexInstallationInputs: previousInputs, ...current } = rebound;
     const inputs = codexPluginSourceInputs.map((input) => input.sourceRoot);
     const directories = options.codexNativeCatalog || !previousInputs ? captureDiscoveryDirectories((binding.directories ?? []).filter((directory) => inputs.some((root) => root.startsWith(directory.path + sep7))).map((directory) => directory.path), inputs) : previousInputs.directories;
-    const installed = codexPluginSourceInputs.length ? { ...current, codexInstallationInputs: { version: "codex-cli 0.160.0", catalogSha256: codexPluginSkillReview.catalogSha256, plugins: codexPluginSourceInputs, ...directories?.length ? { directories } : {} } } : current;
+    const installed = codexPluginSourceInputs.length ? { ...current, codexInstallationInputs: { version: codexPluginSkillReview.version, catalogSha256: codexPluginSkillReview.catalogSha256, plugins: codexPluginSourceInputs, ...directories?.length ? { directories } : {} } } : current;
     return captureRetiredCodexDiscovery(installed, codexPluginSkills, Bun.TOML.parse(changes.find((change) => change.path === canonicalAgentPath(join28(home, ".codex/config.toml"), aliases))?.after ?? codexConfigBefore ?? "").skills?.config ?? []);
   });
   const nextPolicy = { ...policy, version: 1, loading: "cli", profileId, bridge: {
@@ -59325,7 +59328,7 @@ function codexInstallationRoots(binding) {
   const proof = binding.codexInstallationInputs;
   if (proof === undefined)
     return [];
-  if (binding.agent !== "codex" || binding.method !== "reviewed" || proof.version !== "codex-cli 0.160.0" || !/^[a-f0-9]{64}$/.test(proof.catalogSha256) || !Array.isArray(proof.plugins) || !proof.plugins.length)
+  if (binding.agent !== "codex" || binding.method !== "reviewed" || !supportsCodexNativeCapability(proof.version, "installed-plugin-review") || !/^[a-f0-9]{64}$/.test(proof.catalogSha256) || !Array.isArray(proof.plugins) || !proof.plugins.length)
     throw new Error("Invalid native installation input proof");
   const cache3 = dirname19(dirname19(proof.plugins[0].pluginParent));
   const config = join37(dirname19(dirname19(cache3)), "config.toml"), home = dirname19(dirname19(dirname19(cache3)));
@@ -59720,6 +59723,7 @@ var init_agent_discovery = __esm(() => {
   init_codex_plugin_skill_controls();
   init_agent_sumi();
   init_native_discovery_roots();
+  init_codex_native_compatibility();
   init_agent_discovery_directories();
 });
 

package/bin/maintenance.js

@@ -1909,7 +1909,7 @@ var {
 // src/server/maintenance-entry.ts
 import { closeSync, constants, fstatSync, lstatSync, openSync, readSync } from "fs";
 import { createHash as createHash3 } from "crypto";
-var {SQL: SQL2 } = globalThis.Bun;
+var {SQL: SQL3 } = globalThis.Bun;
 
 // src/server/execution-grant-store.ts
 import { randomUUID } from "crypto";
@@ -3991,6 +3991,140 @@ async function inspectEnrollment(databaseUrl, input) {
   }
 }
 
+// src/server/schema-census.ts
+var {SQL: SQL2 } = globalThis.Bun;
+
+class SchemaCensusError extends Error {
+  code;
+  constructor(code) {
+    super(code);
+    this.code = code;
+    this.name = "SchemaCensusError";
+  }
+}
+var refuse2 = (code) => {
+  throw new SchemaCensusError(code);
+};
+var FIXED_SCHEMA = "public";
+var STATEMENT_TIMEOUT_MS = 5000;
+var LOCK_TIMEOUT_MS = 1000;
+var MAX_MIGRATION_VERSIONS = 128;
+var MAX_MIGRATION_VERSION_CHARS = 64;
+var MAX_IDENTIFIER_CHARS = 128;
+var MAX_SERVER_VERSION_CHARS = 256;
+var MAX_CENSUS_BYTES = 16 * 1024;
+var boundedText = (value, max) => {
+  if (typeof value !== "string" || value.length === 0 || /[\u0000-\u001f\u007f]/.test(value))
+    return refuse2("CENSUS_INVALID_RESULT");
+  if (value.length > max)
+    return refuse2("CENSUS_OUTPUT_UNBOUNDED");
+  return value;
+};
+var boundedCount = (value) => {
+  if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0)
+    return refuse2("CENSUS_INVALID_RESULT");
+  return value;
+};
+async function inspectSchemaCensus(databaseUrl) {
+  try {
+    const url = new URL(databaseUrl);
+    if (!["postgres:", "postgresql:"].includes(url.protocol) || !url.hostname)
+      refuse2("CENSUS_POSTGRES_REQUIRED");
+  } catch {
+    refuse2("CENSUS_POSTGRES_REQUIRED");
+  }
+  let sql;
+  try {
+    sql = new SQL2(databaseUrl, { max: 1, connectionTimeout: 5, idleTimeout: 5 });
+    return await sql.begin("ISOLATION LEVEL REPEATABLE READ READ ONLY", async (tx) => {
+      await tx.unsafe("SET LOCAL statement_timeout = '5s'");
+      await tx.unsafe("SET LOCAL lock_timeout = '1s'");
+      const mode = await tx`SELECT current_setting('transaction_read_only') AS read_only,
+        current_setting('transaction_isolation') AS isolation,
+        current_setting('statement_timeout') AS statement_timeout,
+        current_setting('lock_timeout') AS lock_timeout`;
+      if (mode.length !== 1 || mode[0].read_only !== "on" || mode[0].isolation !== "repeatable read" || mode[0].statement_timeout !== "5s" || mode[0].lock_timeout !== "1s") {
+        refuse2("CENSUS_FAILED");
+      }
+      const identity = await tx`SELECT current_database() AS database, current_user AS role,
+        version() AS server_version, current_schema() AS schema`;
+      if (identity.length !== 1)
+        refuse2("CENSUS_INVALID_RESULT");
+      const database = boundedText(identity[0].database, MAX_IDENTIFIER_CHARS);
+      const role = boundedText(identity[0].role, MAX_IDENTIFIER_CHARS);
+      const serverVersion = boundedText(identity[0].server_version, MAX_SERVER_VERSION_CHARS);
+      if (identity[0].schema !== FIXED_SCHEMA)
+        refuse2("CENSUS_TARGET_MISMATCH");
+      const ledger = await tx`SELECT version FROM public.schema_migrations ORDER BY version LIMIT ${MAX_MIGRATION_VERSIONS + 1}`;
+      if (ledger.length > MAX_MIGRATION_VERSIONS)
+        refuse2("CENSUS_OUTPUT_UNBOUNDED");
+      const versions = ledger.map((row) => boundedText(row.version, MAX_MIGRATION_VERSION_CHARS));
+      const registryCount = await tx`SELECT count(*)::int AS rows FROM public.skills_registry`;
+      const versionCount = await tx`SELECT count(*)::int AS rows FROM public.skills_versions`;
+      if (registryCount.length !== 1 || versionCount.length !== 1)
+        refuse2("CENSUS_INVALID_RESULT");
+      const registryRows = boundedCount(registryCount[0].rows);
+      const versionRows = boundedCount(versionCount[0].rows);
+      const groups = await tx`SELECT lifecycle, (tombstoned_at IS NOT NULL) AS tombstoned, count(*)::int AS rows
+        FROM public.skills_registry GROUP BY 1, 2 LIMIT 5`;
+      if (groups.length > 4)
+        refuse2("CENSUS_INVALID_RESULT");
+      const lifecycle = { active: { live: 0, tombstoned: 0 }, archived: { live: 0, tombstoned: 0 } };
+      for (const group of groups) {
+        const name = group.lifecycle;
+        const tombstoned = group.tombstoned;
+        if (name !== "active" && name !== "archived" || typeof tombstoned !== "boolean")
+          return refuse2("CENSUS_INVALID_RESULT");
+        lifecycle[name][tombstoned ? "tombstoned" : "live"] = boundedCount(group.rows);
+      }
+      const epochColumn = await tx`SELECT count(*)::int AS rows FROM information_schema.columns
+        WHERE table_schema = ${FIXED_SCHEMA} AND table_name = 'skills_registry' AND column_name = 'authorization_epoch'`;
+      if (epochColumn.length !== 1)
+        refuse2("CENSUS_INVALID_RESULT");
+      const epochPresent = boundedCount(epochColumn[0].rows);
+      if (epochPresent > 1)
+        refuse2("CENSUS_INVALID_RESULT");
+      let authorizationEpoch;
+      if (epochPresent === 0)
+        authorizationEpoch = { exists: false };
+      else {
+        const epochNulls = await tx`SELECT count(*)::int AS rows FROM public.skills_registry WHERE authorization_epoch IS NULL`;
+        if (epochNulls.length !== 1)
+          refuse2("CENSUS_INVALID_RESULT");
+        authorizationEpoch = { exists: true, nullCount: boundedCount(epochNulls[0].rows) };
+      }
+      const result = {
+        status: "inspected",
+        database,
+        role,
+        serverVersion,
+        schema: FIXED_SCHEMA,
+        transaction: { readOnly: true, isolation: "repeatable read", statementTimeoutMs: STATEMENT_TIMEOUT_MS, lockTimeoutMs: LOCK_TIMEOUT_MS },
+        migrations: { count: versions.length, versions },
+        registry: { rows: registryRows },
+        versions: { rows: versionRows },
+        lifecycle,
+        authorizationEpoch
+      };
+      if (Buffer.byteLength(JSON.stringify(result), "utf8") > MAX_CENSUS_BYTES)
+        refuse2("CENSUS_OUTPUT_UNBOUNDED");
+      return result;
+    });
+  } catch (error) {
+    if (error instanceof SchemaCensusError)
+      throw error;
+    const state2 = error instanceof SQL2.PostgresError ? error.errno : undefined;
+    const code = state2 === "42P01" || state2 === "42703" ? "CENSUS_SCHEMA_UNAVAILABLE" : state2 === "42501" ? "CENSUS_ACCESS_DENIED" : state2 === "25006" ? "CENSUS_WRITE_REFUSED" : state2 === "57014" || state2 === "55P03" ? "CENSUS_TIMEOUT" : ["08000", "08001", "08003", "08004", "08006", "08007", "08P01", "28000", "28P01", "57P03"].includes(state2 ?? "") ? "CENSUS_CONNECTION_FAILED" : "CENSUS_FAILED";
+    throw new SchemaCensusError(code);
+  } finally {
+    try {
+      await sql?.close({ timeout: 1 });
+    } catch {
+      throw new SchemaCensusError("CENSUS_FAILED");
+    }
+  }
+}
+
 // src/server/maintenance-entry.ts
 class InspectionInputError extends Error {
   code;
@@ -3999,6 +4133,14 @@ class InspectionInputError extends Error {
     this.code = code;
   }
 }
+
+class SchemaCensusInputError extends Error {
+  code;
+  constructor(code) {
+    super(code);
+    this.code = code;
+  }
+}
 var MAX_MANIFEST_BYTES = 32 * 1024;
 function sha256(value) {
   return createHash3("sha256").update(value).digest("hex");
@@ -4109,6 +4251,41 @@ function readInspectionManifest(path, receiptPath) {
   }
   return parsed;
 }
+function readSchemaCensusManifest(path, receiptPath) {
+  let input;
+  let parsed;
+  try {
+    input = readBoundedJson(path);
+    const value = input.value;
+    if (!value || typeof value !== "object" || Array.isArray(value))
+      throw new Error;
+    const fields = ["app", "operation", "manifestVersion", "operationId", "stationId", "keyId", "orgId", "expiresAt", "manifestDigest"];
+    if (Object.keys(value).length !== fields.length || fields.some((field) => !Object.hasOwn(value, field)))
+      throw new Error;
+    if (value.app !== "skills" || value.operation !== "inspect-schema" || value.manifestVersion !== 1)
+      throw new Error;
+    for (const field of ["operationId", "stationId", "keyId", "orgId"]) {
+      const item = value[field];
+      if (typeof item !== "string" || item.trim().length === 0 || item.length > 256 || /[\u0000-\u001f\u007f]/.test(item))
+        throw new Error;
+    }
+    if (typeof value.expiresAt !== "string" || value.expiresAt.length > 64 || !Number.isFinite(Date.parse(value.expiresAt)) || Date.parse(value.expiresAt) <= Date.now())
+      throw new Error;
+    if (typeof value.manifestDigest !== "string" || !/^[a-f0-9]{64}$/.test(value.manifestDigest))
+      throw new Error;
+    if (sha256(canonical(value)) !== value.manifestDigest)
+      throw new Error;
+    parsed = value;
+  } catch {
+    throw new SchemaCensusInputError("INVALID_CENSUS_MANIFEST");
+  }
+  try {
+    verifyOperatorReceipt(input, readBoundedJson(receiptPath).value);
+  } catch {
+    throw new SchemaCensusInputError("INVALID_OPERATOR_RECEIPT");
+  }
+  return parsed;
+}
 function registerMaintenance(parent) {
   const maintenance = parent.command("maintenance").description("Run protected, metadata-only Skills maintenance operations");
   maintenance.command("inspect-enrollment").description("Inspect one enrollment with a database-enforced read-only snapshot").requiredOption("--manifest <path>", "Fresh inspection authorization supplied by the protected task wrapper").requiredOption("--operator-receipt <path>", "Verified actor receipt written by the protected task wrapper").option("--json", "Output a safe JSON receipt", false).action(async (options) => {
@@ -4133,6 +4310,26 @@ function registerMaintenance(parent) {
       process.exitCode = 1;
     }
   });
+  maintenance.command("inspect-schema").description("Census the fixed Skills schema and migration ledger with a database-enforced read-only snapshot").requiredOption("--manifest <path>", "Fresh census authorization supplied by the protected task wrapper").requiredOption("--operator-receipt <path>", "Verified actor receipt written by the protected task wrapper").option("--json", "Output a safe JSON receipt", false).action(async (options) => {
+    try {
+      const manifest = readSchemaCensusManifest(options.manifest, options.operatorReceipt);
+      const census = await inspectSchemaCensus(process.env.HASNA_SKILLS_DATABASE_URL ?? "");
+      console.log(JSON.stringify({
+        ...census,
+        operationId: manifest.operationId,
+        keyId: manifest.keyId,
+        orgId: manifest.orgId,
+        stationId: manifest.stationId
+      }));
+    } catch (error) {
+      const code = error instanceof SchemaCensusInputError || error instanceof SchemaCensusError ? error.code : "CENSUS_FAILED";
+      if (options.json || !process.stdout.isTTY)
+        console.log(JSON.stringify({ status: "failed", code }));
+      else
+        console.error(code);
+      process.exitCode = 1;
+    }
+  });
   maintenance.command("enroll-publish").requiredOption("--manifest <path>", "Bounded target manifest supplied by the protected task wrapper").requiredOption("--operator-receipt <path>", "Verified actor receipt written by the protected task wrapper").option("--apply", "Commit the bounded scope update; defaults to dry-run", false).option("--json", "Output a safe JSON receipt", false).action(async (options) => {
     let manifest;
     let store;
@@ -4167,7 +4364,7 @@ function registerMaintenance(parent) {
       process.exitCode = 1;
     } catch (error) {
       const message = error instanceof Error ? error.message : "";
-      const state2 = error instanceof SQL2.PostgresError ? error.errno : undefined;
+      const state2 = error instanceof SQL3.PostgresError ? error.errno : undefined;
       const code = state2 === "42P01" || state2 === "42703" ? "MAINTENANCE_SCHEMA_UNAVAILABLE" : state2 === "42501" ? "MAINTENANCE_ACCESS_DENIED" : state2 === "25006" ? "MAINTENANCE_WRITE_REFUSED" : state2 === "57014" || state2 === "55P03" ? "MAINTENANCE_TIMEOUT" : ["08000", "08001", "08003", "08004", "08006", "08007", "08P01", "28000", "28P01", "57P03"].includes(state2 ?? "") ? "MAINTENANCE_CONNECTION_FAILED" : message.includes("expired") || message.includes("expiry") ? "INVALID_EXPIRY" : message.includes("receipt") || message.includes("operator") ? "INVALID_OPERATOR_RECEIPT" : message.includes("manifest") || message.includes("input") ? "INVALID_MANIFEST" : message.includes("database") || message.includes("store") ? "STORE_UNAVAILABLE" : "MAINTENANCE_FAILED";
       if (options.json || !process.stdout.isTTY)
         console.log(JSON.stringify({ status: "failed", code }));

package/bin/mcp.js

@@ -20019,7 +20019,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.50",
+    version: "0.10.51",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -38538,6 +38538,29 @@ var init_sumi_settings_witness = __esm(() => {
   SUMI_DISCOVERY_PROJECTION_FIELDS = ["skills", "plugin", "plugins", "permissions"];
 });
 
+// src/lib/codex-native-compatibility.ts
+function supportsCodexNativeCapability(version2, capability) {
+  return typeof version2 === "string" && Object.hasOwn(MEASURED_CODEX_CAPABILITIES, version2) && MEASURED_CODEX_CAPABILITIES[version2].includes(capability);
+}
+var MEASURED_CODEX_CAPABILITIES, SUPPORTED_CODEX_HOOK_VERSIONS;
+var init_codex_native_compatibility = __esm(() => {
+  MEASURED_CODEX_CAPABILITIES = {
+    "codex-cli 0.153.0": ["hooks"],
+    "codex-cli 0.154.0": ["hooks"],
+    "codex-cli 0.155.0": ["hooks"],
+    "codex-cli 0.155.1": ["hooks"],
+    "codex-cli 0.156.1": ["hooks"],
+    "codex-cli 0.157.0": ["hooks"],
+    "codex-cli 0.157.1": ["hooks"],
+    "codex-cli 0.158.0": ["hooks"],
+    "codex-cli 0.159.0": ["hooks"],
+    "codex-cli 0.159.2": ["hooks", "qualified-skill-catalog"],
+    "codex-cli 0.160.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
+    "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
+  };
+  SUPPORTED_CODEX_HOOK_VERSIONS = Object.freeze(Object.keys(MEASURED_CODEX_CAPABILITIES).filter((version2) => supportsCodexNativeCapability(version2, "hooks")));
+});
+
 // src/lib/agent-policy-limits.ts
 import { basename as basename4, isAbsolute as isAbsolute4, join as join10, resolve as resolve3, sep as sep3 } from "path";
 function object4(value) {
@@ -38604,7 +38627,7 @@ function assertAgentPolicyCollections(policy) {
     }
   if (bridge.codexInactivePlugins !== undefined) {
     const controls = array3(bridge.codexInactivePlugins, 4096), ids = new Set;
-    requireBound(controls.length === 0 || object4(bridge.codexPluginSkillReview) && bridge.codexPluginSkillReview.version === "codex-cli 0.160.0" && typeof bridge.codexPluginSkillReview.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(bridge.codexPluginSkillReview.catalogSha256));
+    requireBound(controls.length === 0 || object4(bridge.codexPluginSkillReview) && supportsCodexNativeCapability(bridge.codexPluginSkillReview.version, "installed-plugin-review") && typeof bridge.codexPluginSkillReview.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(bridge.codexPluginSkillReview.catalogSha256));
     for (const control of controls) {
       requireBound(object4(control) && Object.keys(control).every((key) => ["pluginId", "namespace", "pluginParent", "sourceType", "sourceSha256"].includes(key)));
       text(control.pluginId, 1024);
@@ -38656,7 +38679,7 @@ function assertAgentPolicyCollections(policy) {
     }
     if (value.codexInstallationInputs !== undefined) {
       const proof = record3(value.codexInstallationInputs, 4), inputs = array3(proof.plugins, 4096), ids = new Set;
-      requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && proof.version === "codex-cli 0.160.0" && typeof proof.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(proof.catalogSha256) && inputs.length > 0 && object4(bridge.codexPluginSkillReview) && bridge.codexPluginSkillReview.version === proof.version && bridge.codexPluginSkillReview.catalogSha256 === proof.catalogSha256);
+      requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && supportsCodexNativeCapability(proof.version, "installed-plugin-review") && typeof proof.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(proof.catalogSha256) && inputs.length > 0 && object4(bridge.codexPluginSkillReview) && bridge.codexPluginSkillReview.version === proof.version && bridge.codexPluginSkillReview.catalogSha256 === proof.catalogSha256);
       for (const input2 of inputs) {
         requireBound(object4(input2) && Object.keys(input2).every((key) => ["pluginId", "namespace", "pluginParent", "sourceRoot", "sourceSha256"].includes(key)));
         text(input2.pluginId, 1024);
@@ -38721,6 +38744,7 @@ function assertAgentPolicyCollections(policy) {
 }
 var AGENT_POLICY_LIMITS;
 var init_agent_policy_limits = __esm(() => {
+  init_codex_native_compatibility();
   AGENT_POLICY_LIMITS = Object.freeze({ bytes: 1024 * 1024, agents: 16, discoverySources: 2048, discoveryRawSourceBytes: 64 * 1024 * 1024, discoveryRawTotalBytes: 256 * 1024 * 1024, discoveryPathLinks: 40, discoveryPathSteps: 256, discoveryPathSourceMetadataBytes: 64 * 1024, discoveryPathTotalMetadataBytes: 8 * 1024 * 1024, discoveryRoots: 512, discoveryDirectories: 64, discoveryDirectoryEntries: 20000, discoveryDirectoryBytes: 8 * 1024 * 1024, builtinNames: 2048, rootAliases: 2, fields: 64, pathCharacters: 4096 });
 });
 
@@ -47952,28 +47976,6 @@ function isCodexLocalStdioMcpServer(name, server) {
   }
 }
 
-// src/lib/codex-native-compatibility.ts
-function supportsCodexNativeCapability(version2, capability) {
-  return typeof version2 === "string" && Object.hasOwn(MEASURED_CODEX_CAPABILITIES, version2) && MEASURED_CODEX_CAPABILITIES[version2].includes(capability);
-}
-var MEASURED_CODEX_CAPABILITIES, SUPPORTED_CODEX_HOOK_VERSIONS;
-var init_codex_native_compatibility = __esm(() => {
-  MEASURED_CODEX_CAPABILITIES = {
-    "codex-cli 0.153.0": ["hooks"],
-    "codex-cli 0.154.0": ["hooks"],
-    "codex-cli 0.155.0": ["hooks"],
-    "codex-cli 0.155.1": ["hooks"],
-    "codex-cli 0.156.1": ["hooks"],
-    "codex-cli 0.157.0": ["hooks"],
-    "codex-cli 0.157.1": ["hooks"],
-    "codex-cli 0.158.0": ["hooks"],
-    "codex-cli 0.159.0": ["hooks"],
-    "codex-cli 0.159.2": ["hooks", "qualified-skill-catalog"],
-    "codex-cli 0.160.0": ["hooks", "qualified-skill-catalog"]
-  };
-  SUPPORTED_CODEX_HOOK_VERSIONS = Object.freeze(Object.keys(MEASURED_CODEX_CAPABILITIES).filter((version2) => supportsCodexNativeCapability(version2, "hooks")));
-});
-
 // src/lib/codex-hook-rpc.ts
 var init_codex_hook_rpc = __esm(() => {
   init_codex_corpus_write();
@@ -50795,7 +50797,7 @@ function codexInstallationRoots(binding) {
   const proof = binding.codexInstallationInputs;
   if (proof === undefined)
     return [];
-  if (binding.agent !== "codex" || binding.method !== "reviewed" || proof.version !== "codex-cli 0.160.0" || !/^[a-f0-9]{64}$/.test(proof.catalogSha256) || !Array.isArray(proof.plugins) || !proof.plugins.length)
+  if (binding.agent !== "codex" || binding.method !== "reviewed" || !supportsCodexNativeCapability(proof.version, "installed-plugin-review") || !/^[a-f0-9]{64}$/.test(proof.catalogSha256) || !Array.isArray(proof.plugins) || !proof.plugins.length)
     throw new Error("Invalid native installation input proof");
   const cache = dirname15(dirname15(proof.plugins[0].pluginParent));
   const config2 = join26(dirname15(dirname15(cache)), "config.toml"), home = dirname15(dirname15(dirname15(cache)));
@@ -51122,6 +51124,7 @@ var init_agent_discovery = __esm(() => {
   init_codex_plugin_skill_controls();
   init_agent_sumi();
   init_native_discovery_roots();
+  init_codex_native_compatibility();
   init_agent_discovery_directories();
 });
 

package/bin/migrate.js

@@ -25,7 +25,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.50",
+  version: "0.10.51",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/server.js

@@ -24140,7 +24140,7 @@ restoreLaunchCwd();
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.50",
+  version: "0.10.51",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/worker.js

@@ -24143,7 +24143,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.50",
+  version: "0.10.51",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/index.js

@@ -9380,6 +9380,28 @@ function upgradeSumiSettingsWitness(previous, reviewedSettingsPath) {
 
 // src/lib/agent-policy-limits.ts
 import { basename as basename3, isAbsolute as isAbsolute3, join as join7, resolve as resolve3, sep as sep2 } from "path";
+
+// src/lib/codex-native-compatibility.ts
+var MEASURED_CODEX_CAPABILITIES = {
+  "codex-cli 0.153.0": ["hooks"],
+  "codex-cli 0.154.0": ["hooks"],
+  "codex-cli 0.155.0": ["hooks"],
+  "codex-cli 0.155.1": ["hooks"],
+  "codex-cli 0.156.1": ["hooks"],
+  "codex-cli 0.157.0": ["hooks"],
+  "codex-cli 0.157.1": ["hooks"],
+  "codex-cli 0.158.0": ["hooks"],
+  "codex-cli 0.159.0": ["hooks"],
+  "codex-cli 0.159.2": ["hooks", "qualified-skill-catalog"],
+  "codex-cli 0.160.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
+  "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
+};
+function supportsCodexNativeCapability(version, capability) {
+  return typeof version === "string" && Object.hasOwn(MEASURED_CODEX_CAPABILITIES, version) && MEASURED_CODEX_CAPABILITIES[version].includes(capability);
+}
+var SUPPORTED_CODEX_HOOK_VERSIONS = Object.freeze(Object.keys(MEASURED_CODEX_CAPABILITIES).filter((version) => supportsCodexNativeCapability(version, "hooks")));
+
+// src/lib/agent-policy-limits.ts
 var AGENT_POLICY_LIMITS = Object.freeze({ bytes: 1024 * 1024, agents: 16, discoverySources: 2048, discoveryRawSourceBytes: 64 * 1024 * 1024, discoveryRawTotalBytes: 256 * 1024 * 1024, discoveryPathLinks: 40, discoveryPathSteps: 256, discoveryPathSourceMetadataBytes: 64 * 1024, discoveryPathTotalMetadataBytes: 8 * 1024 * 1024, discoveryRoots: 512, discoveryDirectories: 64, discoveryDirectoryEntries: 20000, discoveryDirectoryBytes: 8 * 1024 * 1024, builtinNames: 2048, rootAliases: 2, fields: 64, pathCharacters: 4096 });
 function object(value) {
   return Boolean(value && typeof value === "object" && !Array.isArray(value));
@@ -9445,7 +9467,7 @@ function assertAgentPolicyCollections(policy) {
     }
   if (bridge.codexInactivePlugins !== undefined) {
     const controls = array(bridge.codexInactivePlugins, 4096), ids = new Set;
-    requireBound(controls.length === 0 || object(bridge.codexPluginSkillReview) && bridge.codexPluginSkillReview.version === "codex-cli 0.160.0" && typeof bridge.codexPluginSkillReview.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(bridge.codexPluginSkillReview.catalogSha256));
+    requireBound(controls.length === 0 || object(bridge.codexPluginSkillReview) && supportsCodexNativeCapability(bridge.codexPluginSkillReview.version, "installed-plugin-review") && typeof bridge.codexPluginSkillReview.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(bridge.codexPluginSkillReview.catalogSha256));
     for (const control of controls) {
       requireBound(object(control) && Object.keys(control).every((key) => ["pluginId", "namespace", "pluginParent", "sourceType", "sourceSha256"].includes(key)));
       text(control.pluginId, 1024);
@@ -9497,7 +9519,7 @@ function assertAgentPolicyCollections(policy) {
     }
     if (value.codexInstallationInputs !== undefined) {
       const proof = record(value.codexInstallationInputs, 4), inputs = array(proof.plugins, 4096), ids = new Set;
-      requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && proof.version === "codex-cli 0.160.0" && typeof proof.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(proof.catalogSha256) && inputs.length > 0 && object(bridge.codexPluginSkillReview) && bridge.codexPluginSkillReview.version === proof.version && bridge.codexPluginSkillReview.catalogSha256 === proof.catalogSha256);
+      requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && supportsCodexNativeCapability(proof.version, "installed-plugin-review") && typeof proof.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(proof.catalogSha256) && inputs.length > 0 && object(bridge.codexPluginSkillReview) && bridge.codexPluginSkillReview.version === proof.version && bridge.codexPluginSkillReview.catalogSha256 === proof.catalogSha256);
       for (const input of inputs) {
         requireBound(object(input) && Object.keys(input).every((key) => ["pluginId", "namespace", "pluginParent", "sourceRoot", "sourceSha256"].includes(key)));
         text(input.pluginId, 1024);
@@ -11596,7 +11618,7 @@ function replaceSkillSession(expected, replacement, plan, options = {}, beforeCo
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.50",
+  version: "0.10.51",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -13684,25 +13706,6 @@ function isCodexLocalStdioMcpServer(name, server) {
 import { basename as basename6, dirname as dirname11, join as join17, relative as relative5, resolve as resolve10, sep as sep6 } from "path";
 import { lstatSync as lstatSync13, readdirSync as readdirSync6, readlinkSync as readlinkSync3, realpathSync as realpathSync6 } from "fs";
 
-// src/lib/codex-native-compatibility.ts
-var MEASURED_CODEX_CAPABILITIES = {
-  "codex-cli 0.153.0": ["hooks"],
-  "codex-cli 0.154.0": ["hooks"],
-  "codex-cli 0.155.0": ["hooks"],
-  "codex-cli 0.155.1": ["hooks"],
-  "codex-cli 0.156.1": ["hooks"],
-  "codex-cli 0.157.0": ["hooks"],
-  "codex-cli 0.157.1": ["hooks"],
-  "codex-cli 0.158.0": ["hooks"],
-  "codex-cli 0.159.0": ["hooks"],
-  "codex-cli 0.159.2": ["hooks", "qualified-skill-catalog"],
-  "codex-cli 0.160.0": ["hooks", "qualified-skill-catalog"]
-};
-function supportsCodexNativeCapability(version, capability) {
-  return typeof version === "string" && Object.hasOwn(MEASURED_CODEX_CAPABILITIES, version) && MEASURED_CODEX_CAPABILITIES[version].includes(capability);
-}
-var SUPPORTED_CODEX_HOOK_VERSIONS = Object.freeze(Object.keys(MEASURED_CODEX_CAPABILITIES).filter((version) => supportsCodexNativeCapability(version, "hooks")));
-
 // src/lib/codex-native-skill-catalog.ts
 import { realpathSync as realpathSync5 } from "fs";
 import { isAbsolute as isAbsolute11, normalize as normalize2 } from "path";
@@ -14297,6 +14300,7 @@ function reviewedCodexPluginCapabilitiesUnchanged(cache, controls, read2, rules)
 function reviewCodexPluginControls(catalog, documents, cache, cwd, read2, rules, pluginSettings, plannedRules, denials = []) {
   if (!supportsCodexNativeCapability(catalog?.version, "qualified-skill-catalog") || catalog.cwd !== cwd)
     refuse2();
+  const installedPluginReview = supportsCodexNativeCapability(catalog.version, "installed-plugin-review");
   if (!Array.isArray(denials) || denials.length > 4096 || new Set(denials.map((item) => item?.path)).size !== denials.length || denials.some((item) => !item || Object.keys(item).sort().join(",") !== "name,path,sha256" || typeof item.name !== "string" || typeof item.path !== "string" || !/^[a-f0-9]{64}$/.test(item.sha256)))
     refuse2();
   const usedDenials = new Set;
@@ -14328,7 +14332,7 @@ function reviewCodexPluginControls(catalog, documents, cache, cwd, read2, rules,
     if (listed.length > 1)
       refuse2();
     const installed = installedPlugins.filter((plugin) => plugin.id === expectedPluginId && plugin.name === pluginName);
-    if (catalog.version === "codex-cli 0.160.0" && installed.length === 1 && installed[0].installed && installed[0].localVersion === basename6(located.root) && installed[0].sourceType === "local" && codexPluginSourceIsConfigControlled(installed[0])) {
+    if (installedPluginReview && installed.length === 1 && installed[0].installed && installed[0].localVersion === basename6(located.root) && installed[0].sourceType === "local" && codexPluginSourceIsConfigControlled(installed[0])) {
       const plugin = installed[0], input = { pluginId: expectedPluginId, namespace: located.namespace, pluginParent: located.pluginParent, sourceRoot: plugin.sourcePath, sourceSha256: plugin.sourceSha256 };
       if (input.sourceRoot !== located.root && !input.sourceRoot.startsWith(cache + sep6) && (lstatSync13(input.sourceRoot, { throwIfNoEntry: false }) || documents.some((path) => path.startsWith(input.sourceRoot + sep6)))) {
         if (skills.some((skill) => skill.path === input.sourceRoot || skill.path.startsWith(input.sourceRoot + sep6)) || !sourceInputUnchanged(input, cache, read2))
@@ -14337,7 +14341,7 @@ function reviewCodexPluginControls(catalog, documents, cache, cwd, read2, rules,
       }
     }
     const settings = pluginSettings && typeof pluginSettings === "object" && !Array.isArray(pluginSettings) ? pluginSettings : undefined;
-    if (catalog.version === "codex-cli 0.160.0" && !listed.length && !skills.some((skill) => skill.pluginId === expectedPluginId) && installed.length === 1 && installed[0].installed && !installed[0].enabled && codexPluginSourceIsConfigControlled(installed[0]) && settings && Object.hasOwn(settings, expectedPluginId) && settings[expectedPluginId]?.enabled === false) {
+    if (installedPluginReview && !listed.length && !skills.some((skill) => skill.pluginId === expectedPluginId) && installed.length === 1 && installed[0].installed && !installed[0].enabled && codexPluginSourceIsConfigControlled(installed[0]) && settings && Object.hasOwn(settings, expectedPluginId) && settings[expectedPluginId]?.enabled === false) {
       if (!Array.isArray(rules))
         refuse2();
       const exactPathDeny = rules.some((rule) => rule?.path === document2 && rule?.enabled === false);
@@ -14370,12 +14374,12 @@ function reviewCodexPluginControls(catalog, documents, cache, cwd, read2, rules,
       const exactPathDeny = Array.isArray(rules) && rules.some((rule) => rule?.path === document2 && rule?.enabled === false);
       const nativeSkill = { name: parsed.name, path: document2, pluginId: expectedPluginId, enabled: true };
       const denial = denials.find((item) => item.path === document2);
-      const explicitDeny = denial !== undefined && remotePluginId !== undefined && catalog.version === "codex-cli 0.160.0" && denial.name === parsed.name && denial.sha256 === createHash12("sha256").update(read2(document2)).digest("hex") && Array.isArray(rules) && !rules.some((rule) => (rule?.path === document2 || typeof rule?.name === "string" && rule.name.trim() === parsed.name) && rule.enabled !== false) && Array.isArray(plannedRules) && plannedRules.some((rule) => rule?.path === document2 && rule.enabled === false);
+      const explicitDeny = denial !== undefined && remotePluginId !== undefined && installedPluginReview && denial.name === parsed.name && denial.sha256 === createHash12("sha256").update(read2(document2)).digest("hex") && Array.isArray(rules) && !rules.some((rule) => (rule?.path === document2 || typeof rule?.name === "string" && rule.name.trim() === parsed.name) && rule.enabled !== false) && Array.isArray(plannedRules) && plannedRules.some((rule) => rule?.path === document2 && rule.enabled === false);
       if (denial && !explicitDeny)
         refuse2();
       if (explicitDeny)
         usedDenials.add(document2);
-      const plannedPathDeny = catalog.version === "codex-cli 0.160.0" && remotePluginId !== undefined && Array.isArray(rules) && rules.some((rule) => typeof rule?.name === "string" && rule.name.trim() === parsed.name && rule.enabled === false) && !rules.some((rule) => (rule?.path === document2 || typeof rule?.name === "string" && rule.name.trim() === parsed.name) && rule.enabled !== false) && Array.isArray(plannedRules) && plannedRules.some((rule) => rule?.path === document2 && rule.enabled === false) && isCodexNativeSkillDisabled(nativeSkill, plannedRules);
+      const plannedPathDeny = installedPluginReview && remotePluginId !== undefined && Array.isArray(rules) && rules.some((rule) => typeof rule?.name === "string" && rule.name.trim() === parsed.name && rule.enabled === false) && !rules.some((rule) => (rule?.path === document2 || typeof rule?.name === "string" && rule.name.trim() === parsed.name) && rule.enabled !== false) && Array.isArray(plannedRules) && plannedRules.some((rule) => rule?.path === document2 && rule.enabled === false) && isCodexNativeSkillDisabled(nativeSkill, plannedRules);
       if (!explicitDeny && (!exactPathDeny && !plannedPathDeny || !isCodexNativeSkillDisabled(nativeSkill, rules)))
         refuse2();
     }
@@ -16963,7 +16967,7 @@ function planAgentIntegration(options) {
     const { codexInstallationInputs: previousInputs, ...current } = rebound;
     const inputs = codexPluginSourceInputs.map((input) => input.sourceRoot);
     const directories = options.codexNativeCatalog || !previousInputs ? captureDiscoveryDirectories((binding.directories ?? []).filter((directory) => inputs.some((root) => root.startsWith(directory.path + sep7))).map((directory) => directory.path), inputs) : previousInputs.directories;
-    const installed = codexPluginSourceInputs.length ? { ...current, codexInstallationInputs: { version: "codex-cli 0.160.0", catalogSha256: codexPluginSkillReview.catalogSha256, plugins: codexPluginSourceInputs, ...directories?.length ? { directories } : {} } } : current;
+    const installed = codexPluginSourceInputs.length ? { ...current, codexInstallationInputs: { version: codexPluginSkillReview.version, catalogSha256: codexPluginSkillReview.catalogSha256, plugins: codexPluginSourceInputs, ...directories?.length ? { directories } : {} } } : current;
     return captureRetiredCodexDiscovery(installed, codexPluginSkills, Bun.TOML.parse(changes.find((change) => change.path === canonicalAgentPath(join23(home, ".codex/config.toml"), aliases))?.after ?? codexConfigBefore ?? "").skills?.config ?? []);
   });
   const nextPolicy = { ...policy, version: 1, loading: "cli", profileId, bridge: {
@@ -20637,7 +20641,7 @@ function codexInstallationRoots(binding) {
   const proof = binding.codexInstallationInputs;
   if (proof === undefined)
     return [];
-  if (binding.agent !== "codex" || binding.method !== "reviewed" || proof.version !== "codex-cli 0.160.0" || !/^[a-f0-9]{64}$/.test(proof.catalogSha256) || !Array.isArray(proof.plugins) || !proof.plugins.length)
+  if (binding.agent !== "codex" || binding.method !== "reviewed" || !supportsCodexNativeCapability(proof.version, "installed-plugin-review") || !/^[a-f0-9]{64}$/.test(proof.catalogSha256) || !Array.isArray(proof.plugins) || !proof.plugins.length)
     throw new Error("Invalid native installation input proof");
   const cache = dirname19(dirname19(proof.plugins[0].pluginParent));
   const config = join32(dirname19(dirname19(cache)), "config.toml"), home = dirname19(dirname19(dirname19(cache)));

package/dist/lib/agent-discovery.d.ts

@@ -28,7 +28,7 @@ export interface AgentDiscoveryBinding {
         }>;
     };
     codexInstallationInputs?: {
-        version: "codex-cli 0.160.0";
+        version: string;
         catalogSha256: string;
         plugins: CodexPluginSourceInput[];
         directories?: DiscoveryDirectory[];

package/dist/lib/codex-native-compatibility.d.ts

@@ -1,3 +1,6 @@
-export type CodexNativeCapability = "hooks" | "qualified-skill-catalog";
+/** `installed-plugin-review`: the 0.160 `plugin/installed` source identities and
+ * plugin loader semantics behind local installation inputs, inert disabled
+ * nonremote plugins and remote refresh denials. */
+export type CodexNativeCapability = "hooks" | "qualified-skill-catalog" | "installed-plugin-review";
 export declare function supportsCodexNativeCapability(version: unknown, capability: CodexNativeCapability): boolean;
 export declare const SUPPORTED_CODEX_HOOK_VERSIONS: readonly string[];

package/dist/sdk/index.js

@@ -32373,7 +32373,7 @@ var init_event_sink = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.50",
+  version: "0.10.51",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -38426,7 +38426,8 @@ var MEASURED_CODEX_CAPABILITIES = {
   "codex-cli 0.158.0": ["hooks"],
   "codex-cli 0.159.0": ["hooks"],
   "codex-cli 0.159.2": ["hooks", "qualified-skill-catalog"],
-  "codex-cli 0.160.0": ["hooks", "qualified-skill-catalog"]
+  "codex-cli 0.160.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
+  "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
 };
 function supportsCodexNativeCapability(version, capability) {
   return typeof version === "string" && Object.hasOwn(MEASURED_CODEX_CAPABILITIES, version) && MEASURED_CODEX_CAPABILITIES[version].includes(capability);
@@ -39027,6 +39028,7 @@ function reviewedCodexPluginCapabilitiesUnchanged(cache, controls, read, rules)
 function reviewCodexPluginControls(catalog, documents, cache, cwd, read, rules, pluginSettings, plannedRules, denials = []) {
   if (!supportsCodexNativeCapability(catalog?.version, "qualified-skill-catalog") || catalog.cwd !== cwd)
     refuse3();
+  const installedPluginReview = supportsCodexNativeCapability(catalog.version, "installed-plugin-review");
   if (!Array.isArray(denials) || denials.length > 4096 || new Set(denials.map((item) => item?.path)).size !== denials.length || denials.some((item) => !item || Object.keys(item).sort().join(",") !== "name,path,sha256" || typeof item.name !== "string" || typeof item.path !== "string" || !/^[a-f0-9]{64}$/.test(item.sha256)))
     refuse3();
   const usedDenials = new Set;
@@ -39058,7 +39060,7 @@ function reviewCodexPluginControls(catalog, documents, cache, cwd, read, rules,
     if (listed.length > 1)
       refuse3();
     const installed = installedPlugins.filter((plugin) => plugin.id === expectedPluginId && plugin.name === pluginName);
-    if (catalog.version === "codex-cli 0.160.0" && installed.length === 1 && installed[0].installed && installed[0].localVersion === basename4(located.root) && installed[0].sourceType === "local" && codexPluginSourceIsConfigControlled(installed[0])) {
+    if (installedPluginReview && installed.length === 1 && installed[0].installed && installed[0].localVersion === basename4(located.root) && installed[0].sourceType === "local" && codexPluginSourceIsConfigControlled(installed[0])) {
       const plugin = installed[0], input = { pluginId: expectedPluginId, namespace: located.namespace, pluginParent: located.pluginParent, sourceRoot: plugin.sourcePath, sourceSha256: plugin.sourceSha256 };
       if (input.sourceRoot !== located.root && !input.sourceRoot.startsWith(cache + sep3) && (lstatSync7(input.sourceRoot, { throwIfNoEntry: false }) || documents.some((path) => path.startsWith(input.sourceRoot + sep3)))) {
         if (skills.some((skill) => skill.path === input.sourceRoot || skill.path.startsWith(input.sourceRoot + sep3)) || !sourceInputUnchanged(input, cache, read))
@@ -39067,7 +39069,7 @@ function reviewCodexPluginControls(catalog, documents, cache, cwd, read, rules,
       }
     }
     const settings = pluginSettings && typeof pluginSettings === "object" && !Array.isArray(pluginSettings) ? pluginSettings : undefined;
-    if (catalog.version === "codex-cli 0.160.0" && !listed.length && !skills.some((skill) => skill.pluginId === expectedPluginId) && installed.length === 1 && installed[0].installed && !installed[0].enabled && codexPluginSourceIsConfigControlled(installed[0]) && settings && Object.hasOwn(settings, expectedPluginId) && settings[expectedPluginId]?.enabled === false) {
+    if (installedPluginReview && !listed.length && !skills.some((skill) => skill.pluginId === expectedPluginId) && installed.length === 1 && installed[0].installed && !installed[0].enabled && codexPluginSourceIsConfigControlled(installed[0]) && settings && Object.hasOwn(settings, expectedPluginId) && settings[expectedPluginId]?.enabled === false) {
       if (!Array.isArray(rules))
         refuse3();
       const exactPathDeny = rules.some((rule) => rule?.path === document && rule?.enabled === false);
@@ -39100,12 +39102,12 @@ function reviewCodexPluginControls(catalog, documents, cache, cwd, read, rules,
       const exactPathDeny = Array.isArray(rules) && rules.some((rule) => rule?.path === document && rule?.enabled === false);
       const nativeSkill = { name: parsed.name, path: document, pluginId: expectedPluginId, enabled: true };
       const denial = denials.find((item) => item.path === document);
-      const explicitDeny = denial !== undefined && remotePluginId !== undefined && catalog.version === "codex-cli 0.160.0" && denial.name === parsed.name && denial.sha256 === createHash8("sha256").update(read(document)).digest("hex") && Array.isArray(rules) && !rules.some((rule) => (rule?.path === document || typeof rule?.name === "string" && rule.name.trim() === parsed.name) && rule.enabled !== false) && Array.isArray(plannedRules) && plannedRules.some((rule) => rule?.path === document && rule.enabled === false);
+      const explicitDeny = denial !== undefined && remotePluginId !== undefined && installedPluginReview && denial.name === parsed.name && denial.sha256 === createHash8("sha256").update(read(document)).digest("hex") && Array.isArray(rules) && !rules.some((rule) => (rule?.path === document || typeof rule?.name === "string" && rule.name.trim() === parsed.name) && rule.enabled !== false) && Array.isArray(plannedRules) && plannedRules.some((rule) => rule?.path === document && rule.enabled === false);
       if (denial && !explicitDeny)
         refuse3();
       if (explicitDeny)
         usedDenials.add(document);
-      const plannedPathDeny = catalog.version === "codex-cli 0.160.0" && remotePluginId !== undefined && Array.isArray(rules) && rules.some((rule) => typeof rule?.name === "string" && rule.name.trim() === parsed.name && rule.enabled === false) && !rules.some((rule) => (rule?.path === document || typeof rule?.name === "string" && rule.name.trim() === parsed.name) && rule.enabled !== false) && Array.isArray(plannedRules) && plannedRules.some((rule) => rule?.path === document && rule.enabled === false) && isCodexNativeSkillDisabled(nativeSkill, plannedRules);
+      const plannedPathDeny = installedPluginReview && remotePluginId !== undefined && Array.isArray(rules) && rules.some((rule) => typeof rule?.name === "string" && rule.name.trim() === parsed.name && rule.enabled === false) && !rules.some((rule) => (rule?.path === document || typeof rule?.name === "string" && rule.name.trim() === parsed.name) && rule.enabled !== false) && Array.isArray(plannedRules) && plannedRules.some((rule) => rule?.path === document && rule.enabled === false) && isCodexNativeSkillDisabled(nativeSkill, plannedRules);
       if (!explicitDeny && (!exactPathDeny && !plannedPathDeny || !isCodexNativeSkillDisabled(nativeSkill, rules)))
         refuse3();
     }
@@ -40353,7 +40355,7 @@ function assertAgentPolicyCollections(policy) {
     }
   if (bridge.codexInactivePlugins !== undefined) {
     const controls = array(bridge.codexInactivePlugins, 4096), ids = new Set;
-    requireBound(controls.length === 0 || object4(bridge.codexPluginSkillReview) && bridge.codexPluginSkillReview.version === "codex-cli 0.160.0" && typeof bridge.codexPluginSkillReview.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(bridge.codexPluginSkillReview.catalogSha256));
+    requireBound(controls.length === 0 || object4(bridge.codexPluginSkillReview) && supportsCodexNativeCapability(bridge.codexPluginSkillReview.version, "installed-plugin-review") && typeof bridge.codexPluginSkillReview.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(bridge.codexPluginSkillReview.catalogSha256));
     for (const control of controls) {
       requireBound(object4(control) && Object.keys(control).every((key) => ["pluginId", "namespace", "pluginParent", "sourceType", "sourceSha256"].includes(key)));
       text(control.pluginId, 1024);
@@ -40405,7 +40407,7 @@ function assertAgentPolicyCollections(policy) {
     }
     if (value.codexInstallationInputs !== undefined) {
       const proof = record3(value.codexInstallationInputs, 4), inputs = array(proof.plugins, 4096), ids = new Set;
-      requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && proof.version === "codex-cli 0.160.0" && typeof proof.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(proof.catalogSha256) && inputs.length > 0 && object4(bridge.codexPluginSkillReview) && bridge.codexPluginSkillReview.version === proof.version && bridge.codexPluginSkillReview.catalogSha256 === proof.catalogSha256);
+      requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && supportsCodexNativeCapability(proof.version, "installed-plugin-review") && typeof proof.catalogSha256 === "string" && /^[a-f0-9]{64}$/.test(proof.catalogSha256) && inputs.length > 0 && object4(bridge.codexPluginSkillReview) && bridge.codexPluginSkillReview.version === proof.version && bridge.codexPluginSkillReview.catalogSha256 === proof.catalogSha256);
       for (const input of inputs) {
         requireBound(object4(input) && Object.keys(input).every((key) => ["pluginId", "namespace", "pluginParent", "sourceRoot", "sourceSha256"].includes(key)));
         text(input.pluginId, 1024);
@@ -43487,7 +43489,7 @@ function codexInstallationRoots(binding) {
   const proof = binding.codexInstallationInputs;
   if (proof === undefined)
     return [];
-  if (binding.agent !== "codex" || binding.method !== "reviewed" || proof.version !== "codex-cli 0.160.0" || !/^[a-f0-9]{64}$/.test(proof.catalogSha256) || !Array.isArray(proof.plugins) || !proof.plugins.length)
+  if (binding.agent !== "codex" || binding.method !== "reviewed" || !supportsCodexNativeCapability(proof.version, "installed-plugin-review") || !/^[a-f0-9]{64}$/.test(proof.catalogSha256) || !Array.isArray(proof.plugins) || !proof.plugins.length)
     throw new Error("Invalid native installation input proof");
   const cache = dirname16(dirname16(proof.plugins[0].pluginParent));
   const config = join26(dirname16(dirname16(cache)), "config.toml"), home = dirname16(dirname16(dirname16(cache)));
@@ -45083,7 +45085,7 @@ function planAgentIntegration(options) {
     const { codexInstallationInputs: previousInputs, ...current } = rebound;
     const inputs = codexPluginSourceInputs.map((input) => input.sourceRoot);
     const directories = options.codexNativeCatalog || !previousInputs ? captureDiscoveryDirectories((binding.directories ?? []).filter((directory) => inputs.some((root2) => root2.startsWith(directory.path + sep7))).map((directory) => directory.path), inputs) : previousInputs.directories;
-    const installed = codexPluginSourceInputs.length ? { ...current, codexInstallationInputs: { version: "codex-cli 0.160.0", catalogSha256: codexPluginSkillReview.catalogSha256, plugins: codexPluginSourceInputs, ...directories?.length ? { directories } : {} } } : current;
+    const installed = codexPluginSourceInputs.length ? { ...current, codexInstallationInputs: { version: codexPluginSkillReview.version, catalogSha256: codexPluginSkillReview.catalogSha256, plugins: codexPluginSourceInputs, ...directories?.length ? { directories } : {} } } : current;
     return captureRetiredCodexDiscovery(installed, codexPluginSkills, Bun.TOML.parse(changes.find((change) => change.path === canonicalAgentPath(join27(home, ".codex/config.toml"), aliases))?.after ?? codexConfigBefore ?? "").skills?.config ?? []);
   });
   const nextPolicy = { ...policy, version: 1, loading: "cli", profileId, bridge: {

package/dist/server/maintenance-entry.d.ts

@@ -9,7 +9,21 @@ type InspectionManifest = EnrollmentInspectionInput & {
     expiresAt: string;
     manifestDigest: string;
 };
+/** The schema census has its own authorization; no enrollment or inspection manifest can authorize it. */
+type SchemaCensusManifest = {
+    app: "skills";
+    operation: "inspect-schema";
+    manifestVersion: 1;
+    operationId: string;
+    stationId: string;
+    keyId: string;
+    orgId: string;
+    expiresAt: string;
+    manifestDigest: string;
+};
 /** Inspection has its own authorization; a failed enrollment manifest cannot authorize it. */
 export declare function readInspectionManifest(path: string, receiptPath: string): InspectionManifest;
+/** The census has its own authorization; a failed enrollment or inspection manifest cannot authorize it. */
+export declare function readSchemaCensusManifest(path: string, receiptPath: string): SchemaCensusManifest;
 export declare function registerMaintenance(parent: Command): void;
 export {};

package/dist/server/schema-census.d.ts

@@ -0,0 +1,77 @@
+/**
+ * One fixed, closed census of the Skills database maintenance surface.
+ *
+ * Why it exists (I6-00024): a production migration is held until the exact
+ * current registry, version ledger and migration ledger are read from the live
+ * database. The enrollment inspection answers a different question (one
+ * operator key), and no existing reader returns the fixed aggregate + ledger
+ * census. This module is that reader, and it is deliberately shaped so it
+ * cannot become a general SQL console:
+ *
+ *   - No target, query, schema or table input exists. The only argument is the
+ *     database URL, and the operation refuses to run unless the connection
+ *     resolves to the fixed public schema the Skills store uses.
+ *   - Every owned-table read is schema-qualified to `public`. A connection whose
+ *     search path falls through to a later schema cannot substitute another
+ *     schema's tables: a missing public table refuses (CENSUS_SCHEMA_UNAVAILABLE)
+ *     instead of counting rows that do not belong to the fixed target.
+ *   - The transaction is READ ONLY, REPEATABLE READ, with a five-second
+ *     statement timeout and a one-second lock timeout, asserted from inside the
+ *     read path rather than assumed.
+ *   - The output is a closed shape with per-field size bounds, a bounded
+ *     migration ledger and a total serialized-size gate. Nothing is truncated
+ *     silently: a census that would exceed a bound refuses instead.
+ *   - Nothing imports the application store: no initialization, migrations,
+ *     backfills or writes happen on this path.
+ */
+export interface SchemaCensusResult {
+    status: "inspected";
+    database: string;
+    role: string;
+    serverVersion: string;
+    schema: "public";
+    transaction: {
+        readOnly: true;
+        isolation: "repeatable read";
+        statementTimeoutMs: number;
+        lockTimeoutMs: number;
+    };
+    migrations: {
+        count: number;
+        versions: string[];
+    };
+    registry: {
+        rows: number;
+    };
+    versions: {
+        rows: number;
+    };
+    lifecycle: {
+        active: {
+            live: number;
+            tombstoned: number;
+        };
+        archived: {
+            live: number;
+            tombstoned: number;
+        };
+    };
+    authorizationEpoch: {
+        exists: false;
+    } | {
+        exists: true;
+        nullCount: number;
+    };
+}
+type CensusCode = "CENSUS_POSTGRES_REQUIRED" | "CENSUS_SCHEMA_UNAVAILABLE" | "CENSUS_ACCESS_DENIED" | "CENSUS_WRITE_REFUSED" | "CENSUS_TIMEOUT" | "CENSUS_CONNECTION_FAILED" | "CENSUS_TARGET_MISMATCH" | "CENSUS_INVALID_RESULT" | "CENSUS_OUTPUT_UNBOUNDED" | "CENSUS_FAILED";
+export declare class SchemaCensusError extends Error {
+    readonly code: CensusCode;
+    constructor(code: CensusCode);
+}
+/**
+ * Census metadata only. Deliberately does not import or initialize the application store.
+ *
+ * @param databaseUrl explicit PostgreSQL URL; there is no implicit localhost fallback.
+ */
+export declare function inspectSchemaCensus(databaseUrl: string): Promise<SchemaCensusResult>;
+export {};

package/docs/plugin-admission.md

@@ -404,8 +404,8 @@ witness intersecting the write still refuses instead of adopting a new inode.
 
 ## Codex bundled cleanup controls
 
-Qualified native skill review supports a narrow subset of Codex 0.159.2 and
-0.160.0's bundled cleanup hooks. The identities `browser`, `chrome`, `chrome-dev`,
+Qualified native skill review supports a narrow subset of Codex 0.159.2,
+0.160.0 and 0.160.1's bundled cleanup hooks. The identities `browser`, `chrome`, `chrome-dev`,
 `chrome-internal` and `computer-use` in `openai-bundled` may call
 `node_repl.turn_ended`; `unified-computer-use` may call `cua_repl.turn_ended`.
 Only `Interrupt`, `SubagentStop` and `Stop` are accepted, with one group and one
@@ -421,4 +421,6 @@ apply and subsequent discovery checks. This review preserves native cleanup;
 it neither enables plugins nor grants hook trust, browser authority or signing.
 The upstream contracts are
 [0.159.2 bundled hooks](https://github.com/openai/codex/blob/ff6aec96948b70d94983af2641a6b67c94faeff5/codex-rs/plugin/src/bundled_hooks.rs)
-and [0.160.0 bundled hooks](https://github.com/openai/codex/blob/a956835d020762cb2b570053af06f643a11c0ecc/codex-rs/plugin/src/bundled_hooks.rs).
+and [0.160.0 bundled hooks](https://github.com/openai/codex/blob/a956835d020762cb2b570053af06f643a11c0ecc/codex-rs/plugin/src/bundled_hooks.rs);
+0.160.1 carries the identical file
+([0.160.1 bundled hooks](https://github.com/openai/codex/blob/d27764b82f7118f674371e6d6e76271d9d606edb/codex-rs/plugin/src/bundled_hooks.rs)).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/skills",
-  "version": "0.10.50",
+  "version": "0.10.51",
   "description": "Skills library for AI coding agents",
   "type": "module",
   "bin": {