@hasna/skills 0.10.53 → 0.10.54

package/README.md

@@ -643,9 +643,9 @@ skills hook native-catalog --cwd /absolute/project --output /private/catalog.jso
 skills hook install --agent codex --codex-native-catalog /private/catalog.json --json
 ```
 
-Codex 0.159.2, 0.160.0 and 0.160.1 have measured qualified-name catalog support.
+Codex 0.159.2, 0.160.0, 0.160.1 and 0.161.0 have measured qualified-name catalog support.
 Native transport, capture and review use one capability registry of exact
-releases. Unmeasured releases, including 0.160.2 and 0.161.0, refuse until the
+releases. Unmeasured releases, including 0.160.2 and 0.161.1, refuse until the
 native catalog/name-denial and hook-dispatch acceptance tests pass; an RPC
 handshake alone does not establish those semantics. Admitting a release does not
 admit its corpus: the transport still requires the existing native corpus
@@ -697,7 +697,7 @@ different extant, witnessed user version. Individual missing files, current
 registered roots, aliases and registration changes still refuse; historical
 source hashes and typed settings witnesses remain intact.
 
-For a Codex 0.160.0 or 0.160.1 remote refresh omitted by an existing qualified-name disable,
+For a Codex 0.160.0, 0.160.1 or 0.161.0 remote refresh omitted by an existing qualified-name disable,
 a fresh native catalog and discovery review can plan the new exact path disable
 in the same transaction. The remote installation receipt, namespace and capability
 controls must match; conflicting enable rules, unknown names and ambiguous

package/bin/index.js

@@ -36888,7 +36888,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.53",
+    version: "0.10.54",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -40291,7 +40291,8 @@ var init_codex_native_compatibility = __esm(() => {
     "codex-cli 0.159.0": ["hooks"],
     "codex-cli 0.159.2": ["hooks", "qualified-skill-catalog"],
     "codex-cli 0.160.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
-    "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
+    "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
+    "codex-cli 0.161.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
   };
   SUPPORTED_CODEX_HOOK_VERSIONS = Object.freeze(Object.keys(MEASURED_CODEX_CAPABILITIES).filter((version) => supportsCodexNativeCapability(version, "hooks")));
 });
@@ -59505,12 +59506,17 @@ function captureRetiredCodexDiscovery(binding, controls, rules) {
     return { ...current, codexRetiredMaterializations: previous };
   return { ...current, codexRetiredMaterializations: { roots, parents: parents3, directories: captureDiscoveryDirectoryProjection(directories.map((item) => item.path), roots) } };
 }
+function retainableAbsentSource(source) {
+  if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined)
+    return false;
+  return [undefined, "bytes"].includes(source.hashMode) || source.hashMode === "claude-plugin-manifest-v1" && source.sha256 !== null && source.path.endsWith(join37(sep8, ".claude-plugin", "plugin.json"));
+}
 function absentRetiredClaudeRoots(binding) {
   if (binding.agent !== "claude" || binding.method !== "reviewed")
     return [];
   const result2 = new Set;
   for (const source of binding.sources) {
-    if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || ![undefined, "bytes"].includes(source.hashMode) || source.sha256 === null)
+    if (!retainableAbsentSource(source) || source.sha256 === null)
       continue;
     const marker = sep8 + ".claude" + sep8 + "plugins" + sep8 + "cache" + sep8, at2 = source.path.indexOf(marker);
     if (at2 < 0 || source.path.indexOf(marker, at2 + 1) >= 0)
@@ -59622,7 +59628,7 @@ function verifyAgentDiscovery(binding, codexRecovery) {
       safe4(source.path);
       continue;
     }
-    if (absentRoots.some((root2) => source.path.startsWith(root2 + sep8)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)) {
+    if (absentRoots.some((root2) => source.path.startsWith(root2 + sep8)) && retainableAbsentSource(source)) {
       safe4(source.path);
       continue;
     }
@@ -59678,7 +59684,7 @@ function rebindAgentDiscovery(binding, changes) {
   const installationRoots = codexInstallationRoots(binding), absentRoots = [...absentCodexSkillRoots(binding), ...absentRetiredClaudeRoots(binding), ...retiredCodexRoots(binding).filter((root2) => !lstatSync25(root2, { throwIfNoEntry: false }))];
   const rebound = { ...binding, sources: binding.sources.map((source) => {
     assertMarketplaceBinding(binding, source);
-    if (!changes.has(source.path) && (installationRoots.some((root2) => source.path.startsWith(root2 + sep8)) || absentRoots.some((root2) => source.path.startsWith(root2 + sep8)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)))
+    if (!changes.has(source.path) && (installationRoots.some((root2) => source.path.startsWith(root2 + sep8)) || absentRoots.some((root2) => source.path.startsWith(root2 + sep8)) && retainableAbsentSource(source)))
       return source;
     const sha2563 = projected(source, changes, budget2);
     if (!changes.has(source.path) && sha2563 !== source.sha256)

package/bin/mcp.js

@@ -20019,7 +20019,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.53",
+    version: "0.10.54",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -38560,7 +38560,8 @@ var init_codex_native_compatibility = __esm(() => {
     "codex-cli 0.159.0": ["hooks"],
     "codex-cli 0.159.2": ["hooks", "qualified-skill-catalog"],
     "codex-cli 0.160.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
-    "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
+    "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
+    "codex-cli 0.161.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
   };
   SUPPORTED_CODEX_HOOK_VERSIONS = Object.freeze(Object.keys(MEASURED_CODEX_CAPABILITIES).filter((version2) => supportsCodexNativeCapability(version2, "hooks")));
 });
@@ -50916,12 +50917,17 @@ function retiredCodexRoots(binding) {
   }
   return proof.roots;
 }
+function retainableAbsentSource(source) {
+  if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined)
+    return false;
+  return [undefined, "bytes"].includes(source.hashMode) || source.hashMode === "claude-plugin-manifest-v1" && source.sha256 !== null && source.path.endsWith(join26(sep6, ".claude-plugin", "plugin.json"));
+}
 function absentRetiredClaudeRoots(binding) {
   if (binding.agent !== "claude" || binding.method !== "reviewed")
     return [];
   const result = new Set;
   for (const source of binding.sources) {
-    if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || ![undefined, "bytes"].includes(source.hashMode) || source.sha256 === null)
+    if (!retainableAbsentSource(source) || source.sha256 === null)
       continue;
     const marker = sep6 + ".claude" + sep6 + "plugins" + sep6 + "cache" + sep6, at = source.path.indexOf(marker);
     if (at < 0 || source.path.indexOf(marker, at + 1) >= 0)
@@ -51033,7 +51039,7 @@ function verifyAgentDiscovery(binding, codexRecovery) {
       safe4(source.path);
       continue;
     }
-    if (absentRoots.some((root) => source.path.startsWith(root + sep6)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)) {
+    if (absentRoots.some((root) => source.path.startsWith(root + sep6)) && retainableAbsentSource(source)) {
       safe4(source.path);
       continue;
     }

package/bin/migrate.js

@@ -25,7 +25,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.53",
+  version: "0.10.54",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/server.js

@@ -24140,7 +24140,7 @@ restoreLaunchCwd();
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.53",
+  version: "0.10.54",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/worker.js

@@ -24143,7 +24143,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.53",
+  version: "0.10.54",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/index.js

@@ -9398,7 +9398,8 @@ var MEASURED_CODEX_CAPABILITIES = {
   "codex-cli 0.159.0": ["hooks"],
   "codex-cli 0.159.2": ["hooks", "qualified-skill-catalog"],
   "codex-cli 0.160.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
-  "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
+  "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
+  "codex-cli 0.161.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
 };
 function supportsCodexNativeCapability(version, capability) {
   return typeof version === "string" && Object.hasOwn(MEASURED_CODEX_CAPABILITIES, version) && MEASURED_CODEX_CAPABILITIES[version].includes(capability);
@@ -11832,7 +11833,7 @@ function replaceSkillSession(expected, replacement, plan, options = {}, beforeCo
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.53",
+  version: "0.10.54",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -20837,12 +20838,17 @@ function captureRetiredCodexDiscovery(binding, controls, rules) {
     return { ...current, codexRetiredMaterializations: previous };
   return { ...current, codexRetiredMaterializations: { roots, parents: parents3, directories: captureDiscoveryDirectoryProjection(directories.map((item) => item.path), roots) } };
 }
+function retainableAbsentSource(source) {
+  if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined)
+    return false;
+  return [undefined, "bytes"].includes(source.hashMode) || source.hashMode === "claude-plugin-manifest-v1" && source.sha256 !== null && source.path.endsWith(join32(sep8, ".claude-plugin", "plugin.json"));
+}
 function absentRetiredClaudeRoots(binding) {
   if (binding.agent !== "claude" || binding.method !== "reviewed")
     return [];
   const result = new Set;
   for (const source of binding.sources) {
-    if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || ![undefined, "bytes"].includes(source.hashMode) || source.sha256 === null)
+    if (!retainableAbsentSource(source) || source.sha256 === null)
       continue;
     const marker = sep8 + ".claude" + sep8 + "plugins" + sep8 + "cache" + sep8, at = source.path.indexOf(marker);
     if (at < 0 || source.path.indexOf(marker, at + 1) >= 0)
@@ -20954,7 +20960,7 @@ function verifyAgentDiscovery(binding, codexRecovery) {
       safe4(source.path);
       continue;
     }
-    if (absentRoots.some((root2) => source.path.startsWith(root2 + sep8)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)) {
+    if (absentRoots.some((root2) => source.path.startsWith(root2 + sep8)) && retainableAbsentSource(source)) {
       safe4(source.path);
       continue;
     }
@@ -21010,7 +21016,7 @@ function rebindAgentDiscovery(binding, changes) {
   const installationRoots = codexInstallationRoots(binding), absentRoots = [...absentCodexSkillRoots(binding), ...absentRetiredClaudeRoots(binding), ...retiredCodexRoots(binding).filter((root2) => !lstatSync25(root2, { throwIfNoEntry: false }))];
   const rebound = { ...binding, sources: binding.sources.map((source) => {
     assertMarketplaceBinding(binding, source);
-    if (!changes.has(source.path) && (installationRoots.some((root2) => source.path.startsWith(root2 + sep8)) || absentRoots.some((root2) => source.path.startsWith(root2 + sep8)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)))
+    if (!changes.has(source.path) && (installationRoots.some((root2) => source.path.startsWith(root2 + sep8)) || absentRoots.some((root2) => source.path.startsWith(root2 + sep8)) && retainableAbsentSource(source)))
       return source;
     const sha2563 = projected(source, changes, budget2);
     if (!changes.has(source.path) && sha2563 !== source.sha256)

package/dist/sdk/index.js

@@ -32373,7 +32373,7 @@ var init_event_sink = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.53",
+  version: "0.10.54",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -38446,7 +38446,8 @@ var MEASURED_CODEX_CAPABILITIES = {
   "codex-cli 0.159.0": ["hooks"],
   "codex-cli 0.159.2": ["hooks", "qualified-skill-catalog"],
   "codex-cli 0.160.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
-  "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
+  "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
+  "codex-cli 0.161.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
 };
 function supportsCodexNativeCapability(version, capability) {
   return typeof version === "string" && Object.hasOwn(MEASURED_CODEX_CAPABILITIES, version) && MEASURED_CODEX_CAPABILITIES[version].includes(capability);
@@ -43655,12 +43656,17 @@ function captureRetiredCodexDiscovery(binding, controls, rules) {
     return { ...current, codexRetiredMaterializations: previous };
   return { ...current, codexRetiredMaterializations: { roots, parents: parents3, directories: captureDiscoveryDirectoryProjection(directories.map((item) => item.path), roots) } };
 }
+function retainableAbsentSource(source) {
+  if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined)
+    return false;
+  return [undefined, "bytes"].includes(source.hashMode) || source.hashMode === "claude-plugin-manifest-v1" && source.sha256 !== null && source.path.endsWith(join26(sep6, ".claude-plugin", "plugin.json"));
+}
 function absentRetiredClaudeRoots(binding) {
   if (binding.agent !== "claude" || binding.method !== "reviewed")
     return [];
   const result = new Set;
   for (const source of binding.sources) {
-    if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || ![undefined, "bytes"].includes(source.hashMode) || source.sha256 === null)
+    if (!retainableAbsentSource(source) || source.sha256 === null)
       continue;
     const marker = sep6 + ".claude" + sep6 + "plugins" + sep6 + "cache" + sep6, at = source.path.indexOf(marker);
     if (at < 0 || source.path.indexOf(marker, at + 1) >= 0)
@@ -43772,7 +43778,7 @@ function verifyAgentDiscovery(binding, codexRecovery) {
       safe4(source.path);
       continue;
     }
-    if (absentRoots.some((root2) => source.path.startsWith(root2 + sep6)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)) {
+    if (absentRoots.some((root2) => source.path.startsWith(root2 + sep6)) && retainableAbsentSource(source)) {
       safe4(source.path);
       continue;
     }
@@ -43828,7 +43834,7 @@ function rebindAgentDiscovery(binding, changes) {
   const installationRoots = codexInstallationRoots(binding), absentRoots = [...absentCodexSkillRoots(binding), ...absentRetiredClaudeRoots(binding), ...retiredCodexRoots(binding).filter((root2) => !lstatSync21(root2, { throwIfNoEntry: false }))];
   const rebound = { ...binding, sources: binding.sources.map((source) => {
     assertMarketplaceBinding(binding, source);
-    if (!changes.has(source.path) && (installationRoots.some((root2) => source.path.startsWith(root2 + sep6)) || absentRoots.some((root2) => source.path.startsWith(root2 + sep6)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)))
+    if (!changes.has(source.path) && (installationRoots.some((root2) => source.path.startsWith(root2 + sep6)) || absentRoots.some((root2) => source.path.startsWith(root2 + sep6)) && retainableAbsentSource(source)))
       return source;
     const sha2562 = projected(source, changes, budget2);
     if (!changes.has(source.path) && sha2562 !== source.sha256)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/skills",
-  "version": "0.10.53",
+  "version": "0.10.54",
   "description": "Skills library for AI coding agents",
   "type": "module",
   "bin": {