@hasna/skills 0.10.53 → 0.10.55

package/README.md

@@ -643,9 +643,9 @@ skills hook native-catalog --cwd /absolute/project --output /private/catalog.jso
 skills hook install --agent codex --codex-native-catalog /private/catalog.json --json
 ```
 
-Codex 0.159.2, 0.160.0 and 0.160.1 have measured qualified-name catalog support.
+Codex 0.159.2, 0.160.0, 0.160.1 and 0.161.0 have measured qualified-name catalog support.
 Native transport, capture and review use one capability registry of exact
-releases. Unmeasured releases, including 0.160.2 and 0.161.0, refuse until the
+releases. Unmeasured releases, including 0.160.2 and 0.161.1, refuse until the
 native catalog/name-denial and hook-dispatch acceptance tests pass; an RPC
 handshake alone does not establish those semantics. Admitting a release does not
 admit its corpus: the transport still requires the existing native corpus
@@ -697,7 +697,7 @@ different extant, witnessed user version. Individual missing files, current
 registered roots, aliases and registration changes still refuse; historical
 source hashes and typed settings witnesses remain intact.
 
-For a Codex 0.160.0 or 0.160.1 remote refresh omitted by an existing qualified-name disable,
+For a Codex 0.160.0, 0.160.1 or 0.161.0 remote refresh omitted by an existing qualified-name disable,
 a fresh native catalog and discovery review can plan the new exact path disable
 in the same transaction. The remote installation receipt, namespace and capability
 controls must match; conflicting enable rules, unknown names and ambiguous

package/bin/index.js

@@ -36888,7 +36888,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.53",
+    version: "0.10.55",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -40291,7 +40291,8 @@ var init_codex_native_compatibility = __esm(() => {
     "codex-cli 0.159.0": ["hooks"],
     "codex-cli 0.159.2": ["hooks", "qualified-skill-catalog"],
     "codex-cli 0.160.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
-    "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
+    "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
+    "codex-cli 0.161.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
   };
   SUPPORTED_CODEX_HOOK_VERSIONS = Object.freeze(Object.keys(MEASURED_CODEX_CAPABILITIES).filter((version) => supportsCodexNativeCapability(version, "hooks")));
 });
@@ -59505,12 +59506,17 @@ function captureRetiredCodexDiscovery(binding, controls, rules) {
     return { ...current, codexRetiredMaterializations: previous };
   return { ...current, codexRetiredMaterializations: { roots, parents: parents3, directories: captureDiscoveryDirectoryProjection(directories.map((item) => item.path), roots) } };
 }
+function retainableAbsentSource(source) {
+  if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined)
+    return false;
+  return [undefined, "bytes"].includes(source.hashMode) || source.hashMode === "claude-plugin-manifest-v1" && source.sha256 !== null && source.path.endsWith(join37(sep8, ".claude-plugin", "plugin.json"));
+}
 function absentRetiredClaudeRoots(binding) {
   if (binding.agent !== "claude" || binding.method !== "reviewed")
     return [];
   const result2 = new Set;
   for (const source of binding.sources) {
-    if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || ![undefined, "bytes"].includes(source.hashMode) || source.sha256 === null)
+    if (!retainableAbsentSource(source) || source.sha256 === null)
       continue;
     const marker = sep8 + ".claude" + sep8 + "plugins" + sep8 + "cache" + sep8, at2 = source.path.indexOf(marker);
     if (at2 < 0 || source.path.indexOf(marker, at2 + 1) >= 0)
@@ -59622,7 +59628,7 @@ function verifyAgentDiscovery(binding, codexRecovery) {
       safe4(source.path);
       continue;
     }
-    if (absentRoots.some((root2) => source.path.startsWith(root2 + sep8)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)) {
+    if (absentRoots.some((root2) => source.path.startsWith(root2 + sep8)) && retainableAbsentSource(source)) {
       safe4(source.path);
       continue;
     }
@@ -59678,7 +59684,7 @@ function rebindAgentDiscovery(binding, changes) {
   const installationRoots = codexInstallationRoots(binding), absentRoots = [...absentCodexSkillRoots(binding), ...absentRetiredClaudeRoots(binding), ...retiredCodexRoots(binding).filter((root2) => !lstatSync25(root2, { throwIfNoEntry: false }))];
   const rebound = { ...binding, sources: binding.sources.map((source) => {
     assertMarketplaceBinding(binding, source);
-    if (!changes.has(source.path) && (installationRoots.some((root2) => source.path.startsWith(root2 + sep8)) || absentRoots.some((root2) => source.path.startsWith(root2 + sep8)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)))
+    if (!changes.has(source.path) && (installationRoots.some((root2) => source.path.startsWith(root2 + sep8)) || absentRoots.some((root2) => source.path.startsWith(root2 + sep8)) && retainableAbsentSource(source)))
       return source;
     const sha2563 = projected(source, changes, budget2);
     if (!changes.has(source.path) && sha2563 !== source.sha256)
@@ -86064,8 +86070,12 @@ function assertPlanWindow(issuedAt, expiresAt, now3) {
     throw new SkillSelectionError("SESSION_PLAN_EXPIRED", "The reviewed session reconciliation plan is not currently valid; inspect the receipt and prepare a new plan.");
   }
 }
+function selectionMetadata(selection) {
+  return { slug: selection.slug, version: selection.version, bundleDigest: selection.bundleDigest };
+}
 function inspectSkillSession(sessionId, options = {}) {
   const snapshot2 = readSkillSessionSnapshot(sessionId, options), { receipt } = snapshot2;
+  const loaded = new Set(receipt.loaded);
   return {
     sessionId,
     path: snapshot2.path,
@@ -86077,7 +86087,8 @@ function inspectSkillSession(sessionId, options = {}) {
     profileId: receipt.profile.profileId,
     profileRevision: receipt.profile.profileRevision,
     selectionCount: receipt.profile.selections.length,
-    loadedCount: receipt.loaded.length
+    loadedCount: receipt.loaded.length,
+    selections: receipt.profile.selections.map((selection) => ({ ...selectionMetadata(selection), loaded: loaded.has(selectionKey(selection)) }))
   };
 }
 function renewalDeadlineSignal(error61) {
@@ -86299,6 +86310,21 @@ async function reconcileSkillSession(input2, options = {}) {
   }
   const targetKeys = new Set(target.selections.map(selectionKey));
   const loaded = old.loaded.filter((key) => targetKeys.has(key));
+  const previouslyLoaded = new Set(old.loaded);
+  const targetBySlug = new Map(target.selections.map((selection) => [selection.slug, selection]));
+  const previousSlugs = new Set(old.profile.selections.map((selection) => selection.slug));
+  const selectionDelta = old.profile.selections.map((previous) => {
+    const current = targetBySlug.get(previous.slug);
+    const wasLoaded = previouslyLoaded.has(selectionKey(previous));
+    const reason2 = !current ? "selection-removed" : selectionKey(previous) === selectionKey(current) ? "same-bundle" : "bundle-changed";
+    return {
+      selection: selectionMetadata(previous),
+      loaded: wasLoaded,
+      outcome: !wasLoaded ? "unloaded" : reason2 === "same-bundle" ? "retained" : "retired",
+      reason: reason2,
+      ...reason2 === "bundle-changed" ? { replacement: selectionMetadata(current) } : {}
+    };
+  });
   const replacementGeneration = nextSkillSessionGeneration(snapshot2.generation);
   const plan = {
     schemaVersion: 1,
@@ -86311,6 +86337,8 @@ async function reconcileSkillSession(input2, options = {}) {
     replacementGeneration,
     retainedLoadedCount: loaded.length,
     retiredLoadedCount: old.loaded.length - loaded.length,
+    selectionDelta,
+    addedSelections: target.selections.filter((selection) => !previousSlugs.has(selection.slug)).map(selectionMetadata),
     scope: "Only this receipt; existing child sessions, project locks, shared profiles, hooks and running processes are unchanged."
   };
   const planDigest = digest3(plan);
@@ -86350,6 +86378,9 @@ __export(exports_context, {
   contextResolverOptions: () => contextResolverOptions
 });
 import { readSync as readSync12 } from "fs";
+function sessionSelectionLabel(selection) {
+  return `${selection.slug}@${selection.version} ${selection.bundleDigest}`;
+}
 function selectedProfileId(explicit) {
   return explicit ?? process.env.HASNA_SKILLS_SELECTION_PROFILE ?? readManagedSkillPolicy()?.profileId ?? "default";
 }
@@ -86367,8 +86398,12 @@ function registerContextCommands(parent) {
   sessions.command("show <id>").option("--json", "Return metadata as JSON", false).description("Inspect one session receipt without displaying payloads or changing its pin").action(async (id, options) => {
     try {
       const result2 = inspectSkillSession(id);
-      await writeCliOutput(options.json ? JSON.stringify(result2) : `${JSON.stringify(id)}: ${result2.profileId} at ${result2.profileRevision}
-Receipt SHA256: ${result2.receiptSha256}`);
+      await writeCliOutput(options.json ? JSON.stringify(result2) : [
+        `${JSON.stringify(id)}: ${result2.profileId} at ${result2.profileRevision}`,
+        `Receipt SHA256: ${result2.receiptSha256}`,
+        ...result2.selections.map((selection) => `${selection.loaded ? "Loaded" : "Unloaded"}: ${sessionSelectionLabel(selection)}`)
+      ].join(`
+`));
     } catch (error61) {
       reportContextError(error61, options.json);
     }
@@ -86395,7 +86430,13 @@ Review digest: ${result2.reviewDigest}`);
     try {
       const result2 = await reconcileSkillSession({ ...options, sessionId: id });
       await writeCliOutput(options.json ? JSON.stringify(result2) : result2.applied ? `Reconciled ${JSON.stringify(id)} to ${result2.plan.target.profileId} at ${result2.plan.target.profileRevision}.
-Preserved original receipt: ${result2.archivePath}` : `Planned one session reconciliation. Review --json output, then use --apply --plan-digest ${result2.planDigest} --plan-issued-at ${result2.plan.issuedAt} --plan-expires-at ${result2.plan.expiresAt}.`);
+Preserved original receipt: ${result2.archivePath}` : [
+        `Planned one session reconciliation: ${result2.plan.retainedLoadedCount} loaded retained, ${result2.plan.retiredLoadedCount} loaded retired.`,
+        ...result2.plan.selectionDelta.map((row) => `${row.outcome} (${row.reason}): ${sessionSelectionLabel(row.selection)}${row.replacement ? ` -> ${sessionSelectionLabel(row.replacement)}` : ""}`),
+        ...result2.plan.addedSelections.map((selection) => `Added selection (unloaded): ${sessionSelectionLabel(selection)}`),
+        `Review --json output, then use --apply --plan-digest ${result2.planDigest} --plan-issued-at ${result2.plan.issuedAt} --plan-expires-at ${result2.plan.expiresAt}.`
+      ].join(`
+`));
     } catch (error61) {
       reportContextError(error61, options.json);
     }

package/bin/mcp.js

@@ -20019,7 +20019,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.53",
+    version: "0.10.55",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -38560,7 +38560,8 @@ var init_codex_native_compatibility = __esm(() => {
     "codex-cli 0.159.0": ["hooks"],
     "codex-cli 0.159.2": ["hooks", "qualified-skill-catalog"],
     "codex-cli 0.160.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
-    "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
+    "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
+    "codex-cli 0.161.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
   };
   SUPPORTED_CODEX_HOOK_VERSIONS = Object.freeze(Object.keys(MEASURED_CODEX_CAPABILITIES).filter((version2) => supportsCodexNativeCapability(version2, "hooks")));
 });
@@ -50916,12 +50917,17 @@ function retiredCodexRoots(binding) {
   }
   return proof.roots;
 }
+function retainableAbsentSource(source) {
+  if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined)
+    return false;
+  return [undefined, "bytes"].includes(source.hashMode) || source.hashMode === "claude-plugin-manifest-v1" && source.sha256 !== null && source.path.endsWith(join26(sep6, ".claude-plugin", "plugin.json"));
+}
 function absentRetiredClaudeRoots(binding) {
   if (binding.agent !== "claude" || binding.method !== "reviewed")
     return [];
   const result = new Set;
   for (const source of binding.sources) {
-    if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || ![undefined, "bytes"].includes(source.hashMode) || source.sha256 === null)
+    if (!retainableAbsentSource(source) || source.sha256 === null)
       continue;
     const marker = sep6 + ".claude" + sep6 + "plugins" + sep6 + "cache" + sep6, at = source.path.indexOf(marker);
     if (at < 0 || source.path.indexOf(marker, at + 1) >= 0)
@@ -51033,7 +51039,7 @@ function verifyAgentDiscovery(binding, codexRecovery) {
       safe4(source.path);
       continue;
     }
-    if (absentRoots.some((root) => source.path.startsWith(root + sep6)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)) {
+    if (absentRoots.some((root) => source.path.startsWith(root + sep6)) && retainableAbsentSource(source)) {
       safe4(source.path);
       continue;
     }

package/bin/migrate.js

@@ -25,7 +25,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.53",
+  version: "0.10.55",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/server.js

@@ -24140,7 +24140,7 @@ restoreLaunchCwd();
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.53",
+  version: "0.10.55",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/worker.js

@@ -24143,7 +24143,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.53",
+  version: "0.10.55",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/index.js

@@ -9398,7 +9398,8 @@ var MEASURED_CODEX_CAPABILITIES = {
   "codex-cli 0.159.0": ["hooks"],
   "codex-cli 0.159.2": ["hooks", "qualified-skill-catalog"],
   "codex-cli 0.160.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
-  "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
+  "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
+  "codex-cli 0.161.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
 };
 function supportsCodexNativeCapability(version, capability) {
   return typeof version === "string" && Object.hasOwn(MEASURED_CODEX_CAPABILITIES, version) && MEASURED_CODEX_CAPABILITIES[version].includes(capability);
@@ -11832,7 +11833,7 @@ function replaceSkillSession(expected, replacement, plan, options = {}, beforeCo
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.53",
+  version: "0.10.55",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -20837,12 +20838,17 @@ function captureRetiredCodexDiscovery(binding, controls, rules) {
     return { ...current, codexRetiredMaterializations: previous };
   return { ...current, codexRetiredMaterializations: { roots, parents: parents3, directories: captureDiscoveryDirectoryProjection(directories.map((item) => item.path), roots) } };
 }
+function retainableAbsentSource(source) {
+  if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined)
+    return false;
+  return [undefined, "bytes"].includes(source.hashMode) || source.hashMode === "claude-plugin-manifest-v1" && source.sha256 !== null && source.path.endsWith(join32(sep8, ".claude-plugin", "plugin.json"));
+}
 function absentRetiredClaudeRoots(binding) {
   if (binding.agent !== "claude" || binding.method !== "reviewed")
     return [];
   const result = new Set;
   for (const source of binding.sources) {
-    if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || ![undefined, "bytes"].includes(source.hashMode) || source.sha256 === null)
+    if (!retainableAbsentSource(source) || source.sha256 === null)
       continue;
     const marker = sep8 + ".claude" + sep8 + "plugins" + sep8 + "cache" + sep8, at = source.path.indexOf(marker);
     if (at < 0 || source.path.indexOf(marker, at + 1) >= 0)
@@ -20954,7 +20960,7 @@ function verifyAgentDiscovery(binding, codexRecovery) {
       safe4(source.path);
       continue;
     }
-    if (absentRoots.some((root2) => source.path.startsWith(root2 + sep8)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)) {
+    if (absentRoots.some((root2) => source.path.startsWith(root2 + sep8)) && retainableAbsentSource(source)) {
       safe4(source.path);
       continue;
     }
@@ -21010,7 +21016,7 @@ function rebindAgentDiscovery(binding, changes) {
   const installationRoots = codexInstallationRoots(binding), absentRoots = [...absentCodexSkillRoots(binding), ...absentRetiredClaudeRoots(binding), ...retiredCodexRoots(binding).filter((root2) => !lstatSync25(root2, { throwIfNoEntry: false }))];
   const rebound = { ...binding, sources: binding.sources.map((source) => {
     assertMarketplaceBinding(binding, source);
-    if (!changes.has(source.path) && (installationRoots.some((root2) => source.path.startsWith(root2 + sep8)) || absentRoots.some((root2) => source.path.startsWith(root2 + sep8)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)))
+    if (!changes.has(source.path) && (installationRoots.some((root2) => source.path.startsWith(root2 + sep8)) || absentRoots.some((root2) => source.path.startsWith(root2 + sep8)) && retainableAbsentSource(source)))
       return source;
     const sha2563 = projected(source, changes, budget2);
     if (!changes.has(source.path) && sha2563 !== source.sha256)
@@ -48144,8 +48150,12 @@ function assertPlanWindow(issuedAt, expiresAt, now) {
     throw new SkillSelectionError("SESSION_PLAN_EXPIRED", "The reviewed session reconciliation plan is not currently valid; inspect the receipt and prepare a new plan.");
   }
 }
+function selectionMetadata(selection) {
+  return { slug: selection.slug, version: selection.version, bundleDigest: selection.bundleDigest };
+}
 function inspectSkillSession(sessionId, options = {}) {
   const snapshot2 = readSkillSessionSnapshot(sessionId, options), { receipt } = snapshot2;
+  const loaded = new Set(receipt.loaded);
   return {
     sessionId,
     path: snapshot2.path,
@@ -48157,7 +48167,8 @@ function inspectSkillSession(sessionId, options = {}) {
     profileId: receipt.profile.profileId,
     profileRevision: receipt.profile.profileRevision,
     selectionCount: receipt.profile.selections.length,
-    loadedCount: receipt.loaded.length
+    loadedCount: receipt.loaded.length,
+    selections: receipt.profile.selections.map((selection) => ({ ...selectionMetadata(selection), loaded: loaded.has(selectionKey(selection)) }))
   };
 }
 var SESSION_RENEWAL_REFUSAL_TTL_MS = 5 * 60 * 1000;
@@ -48192,6 +48203,21 @@ async function reconcileSkillSession(input2, options = {}) {
   }
   const targetKeys = new Set(target.selections.map(selectionKey));
   const loaded = old.loaded.filter((key) => targetKeys.has(key));
+  const previouslyLoaded = new Set(old.loaded);
+  const targetBySlug = new Map(target.selections.map((selection) => [selection.slug, selection]));
+  const previousSlugs = new Set(old.profile.selections.map((selection) => selection.slug));
+  const selectionDelta = old.profile.selections.map((previous) => {
+    const current = targetBySlug.get(previous.slug);
+    const wasLoaded = previouslyLoaded.has(selectionKey(previous));
+    const reason2 = !current ? "selection-removed" : selectionKey(previous) === selectionKey(current) ? "same-bundle" : "bundle-changed";
+    return {
+      selection: selectionMetadata(previous),
+      loaded: wasLoaded,
+      outcome: !wasLoaded ? "unloaded" : reason2 === "same-bundle" ? "retained" : "retired",
+      reason: reason2,
+      ...reason2 === "bundle-changed" ? { replacement: selectionMetadata(current) } : {}
+    };
+  });
   const replacementGeneration = nextSkillSessionGeneration(snapshot2.generation);
   const plan = {
     schemaVersion: 1,
@@ -48204,6 +48230,8 @@ async function reconcileSkillSession(input2, options = {}) {
     replacementGeneration,
     retainedLoadedCount: loaded.length,
     retiredLoadedCount: old.loaded.length - loaded.length,
+    selectionDelta,
+    addedSelections: target.selections.filter((selection) => !previousSlugs.has(selection.slug)).map(selectionMetadata),
     scope: "Only this receipt; existing child sessions, project locks, shared profiles, hooks and running processes are unchanged."
   };
   const planDigest = digest3(plan);

package/dist/lib/session-reconciliation.d.ts

@@ -16,6 +16,19 @@ export interface SessionReconciliationOptions extends SelectionCacheOptions {
     client?: ProfileClient;
 }
 export declare const SESSION_RECONCILIATION_PLAN_TTL_MS: number;
+/** Exact bundle identity only; never spread receipt, policy or payload fields. */
+export interface SessionSelectionMetadata {
+    slug: string;
+    version: string;
+    bundleDigest: string;
+}
+export interface SessionSelectionDelta {
+    selection: SessionSelectionMetadata;
+    loaded: boolean;
+    outcome: "retained" | "retired" | "unloaded";
+    reason: "same-bundle" | "selection-removed" | "bundle-changed";
+    replacement?: SessionSelectionMetadata;
+}
 /** Metadata only: inspection never displays skill payloads or resolves credentials. */
 export declare function inspectSkillSession(sessionId: string, options?: SelectionCacheOptions): {
     sessionId: string;
@@ -29,6 +42,12 @@ export declare function inspectSkillSession(sessionId: string, options?: Selecti
     profileRevision: string;
     selectionCount: number;
     loadedCount: number;
+    selections: {
+        loaded: boolean;
+        slug: string;
+        version: string;
+        bundleDigest: string;
+    }[];
 };
 /** Fits inside the managed context child's 6.5-second ceiling, including CLI work. */
 export declare const SESSION_RENEWAL_TIMEOUT_MS = 4000;
@@ -75,6 +94,8 @@ export declare function reconcileSkillSession(input: SessionReconciliationInput,
         replacementGeneration: number;
         retainedLoadedCount: number;
         retiredLoadedCount: number;
+        selectionDelta: SessionSelectionDelta[];
+        addedSelections: SessionSelectionMetadata[];
         scope: string;
     };
     planDigest: string;
@@ -112,6 +133,8 @@ export declare function reconcileSkillSession(input: SessionReconciliationInput,
         replacementGeneration: number;
         retainedLoadedCount: number;
         retiredLoadedCount: number;
+        selectionDelta: SessionSelectionDelta[];
+        addedSelections: SessionSelectionMetadata[];
         scope: string;
     };
     planDigest: string;

package/dist/sdk/index.d.ts

@@ -19,7 +19,7 @@ export { CloudExecutionClient, type CloudExecution, type CloudEligibility } from
 export { readExecutionGrantPolicy, saveExecutionGrantPolicy, resolveExecutionGrant } from "../lib/execution-grant-client.js";
 export type { ExecutionGrant, ExecutionGrantPolicy, ExecutionGrantRequest, ResolvedExecutionGrant } from "../lib/execution-grants.js";
 export { HttpProfileClient, createProfileClient, type ProfileClient, type AuthenticatedProfilePrincipal, type AuthenticatedProfileRole } from "../lib/profile-client.js";
-export { inspectSkillSession, reconcileSkillSession, type SessionReconciliationInput, type SessionReconciliationOptions } from "../lib/session-reconciliation.js";
+export { inspectSkillSession, reconcileSkillSession, type SessionSelectionMetadata, type SessionSelectionDelta, type SessionReconciliationInput, type SessionReconciliationOptions } from "../lib/session-reconciliation.js";
 export { resolveSelectedRun, executeSelectedLocal, prepareSelectedSecretBindings, type ResolvedSelectedRun, type SelectedLocalRunOptions } from "../lib/selected-run.js";
 export { readSelectedSecretBindings, type SelectedSecretBindings, type SelectedSecretsClient } from "../lib/execution-secrets.js";
 export type { SkillSelection, SkillProfile, ResolvedSkillSelection, ResolvedSkillProfile, StationSkillStateInput, StationSkillState } from "../types/skill-selection.js";

package/dist/sdk/index.js

@@ -32373,7 +32373,7 @@ var init_event_sink = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.53",
+  version: "0.10.55",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -37490,8 +37490,12 @@ function assertPlanWindow(issuedAt, expiresAt, now) {
     throw new SkillSelectionError("SESSION_PLAN_EXPIRED", "The reviewed session reconciliation plan is not currently valid; inspect the receipt and prepare a new plan.");
   }
 }
+function selectionMetadata(selection2) {
+  return { slug: selection2.slug, version: selection2.version, bundleDigest: selection2.bundleDigest };
+}
 function inspectSkillSession(sessionId, options = {}) {
   const snapshot = readSkillSessionSnapshot(sessionId, options), { receipt } = snapshot;
+  const loaded = new Set(receipt.loaded);
   return {
     sessionId,
     path: snapshot.path,
@@ -37503,7 +37507,8 @@ function inspectSkillSession(sessionId, options = {}) {
     profileId: receipt.profile.profileId,
     profileRevision: receipt.profile.profileRevision,
     selectionCount: receipt.profile.selections.length,
-    loadedCount: receipt.loaded.length
+    loadedCount: receipt.loaded.length,
+    selections: receipt.profile.selections.map((selection2) => ({ ...selectionMetadata(selection2), loaded: loaded.has(selectionKey(selection2)) }))
   };
 }
 var SESSION_RENEWAL_REFUSAL_TTL_MS = 5 * 60 * 1000;
@@ -37538,6 +37543,21 @@ async function reconcileSkillSession(input, options = {}) {
   }
   const targetKeys = new Set(target.selections.map(selectionKey));
   const loaded = old.loaded.filter((key) => targetKeys.has(key));
+  const previouslyLoaded = new Set(old.loaded);
+  const targetBySlug = new Map(target.selections.map((selection2) => [selection2.slug, selection2]));
+  const previousSlugs = new Set(old.profile.selections.map((selection2) => selection2.slug));
+  const selectionDelta = old.profile.selections.map((previous) => {
+    const current = targetBySlug.get(previous.slug);
+    const wasLoaded = previouslyLoaded.has(selectionKey(previous));
+    const reason = !current ? "selection-removed" : selectionKey(previous) === selectionKey(current) ? "same-bundle" : "bundle-changed";
+    return {
+      selection: selectionMetadata(previous),
+      loaded: wasLoaded,
+      outcome: !wasLoaded ? "unloaded" : reason === "same-bundle" ? "retained" : "retired",
+      reason,
+      ...reason === "bundle-changed" ? { replacement: selectionMetadata(current) } : {}
+    };
+  });
   const replacementGeneration = nextSkillSessionGeneration(snapshot.generation);
   const plan = {
     schemaVersion: 1,
@@ -37550,6 +37570,8 @@ async function reconcileSkillSession(input, options = {}) {
     replacementGeneration,
     retainedLoadedCount: loaded.length,
     retiredLoadedCount: old.loaded.length - loaded.length,
+    selectionDelta,
+    addedSelections: target.selections.filter((selection2) => !previousSlugs.has(selection2.slug)).map(selectionMetadata),
     scope: "Only this receipt; existing child sessions, project locks, shared profiles, hooks and running processes are unchanged."
   };
   const planDigest = digest(plan);
@@ -38446,7 +38468,8 @@ var MEASURED_CODEX_CAPABILITIES = {
   "codex-cli 0.159.0": ["hooks"],
   "codex-cli 0.159.2": ["hooks", "qualified-skill-catalog"],
   "codex-cli 0.160.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
-  "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
+  "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
+  "codex-cli 0.161.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
 };
 function supportsCodexNativeCapability(version, capability) {
   return typeof version === "string" && Object.hasOwn(MEASURED_CODEX_CAPABILITIES, version) && MEASURED_CODEX_CAPABILITIES[version].includes(capability);
@@ -43655,12 +43678,17 @@ function captureRetiredCodexDiscovery(binding, controls, rules) {
     return { ...current, codexRetiredMaterializations: previous };
   return { ...current, codexRetiredMaterializations: { roots, parents: parents3, directories: captureDiscoveryDirectoryProjection(directories.map((item) => item.path), roots) } };
 }
+function retainableAbsentSource(source) {
+  if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined)
+    return false;
+  return [undefined, "bytes"].includes(source.hashMode) || source.hashMode === "claude-plugin-manifest-v1" && source.sha256 !== null && source.path.endsWith(join26(sep6, ".claude-plugin", "plugin.json"));
+}
 function absentRetiredClaudeRoots(binding) {
   if (binding.agent !== "claude" || binding.method !== "reviewed")
     return [];
   const result = new Set;
   for (const source of binding.sources) {
-    if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || ![undefined, "bytes"].includes(source.hashMode) || source.sha256 === null)
+    if (!retainableAbsentSource(source) || source.sha256 === null)
       continue;
     const marker = sep6 + ".claude" + sep6 + "plugins" + sep6 + "cache" + sep6, at = source.path.indexOf(marker);
     if (at < 0 || source.path.indexOf(marker, at + 1) >= 0)
@@ -43772,7 +43800,7 @@ function verifyAgentDiscovery(binding, codexRecovery) {
       safe4(source.path);
       continue;
     }
-    if (absentRoots.some((root2) => source.path.startsWith(root2 + sep6)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)) {
+    if (absentRoots.some((root2) => source.path.startsWith(root2 + sep6)) && retainableAbsentSource(source)) {
       safe4(source.path);
       continue;
     }
@@ -43828,7 +43856,7 @@ function rebindAgentDiscovery(binding, changes) {
   const installationRoots = codexInstallationRoots(binding), absentRoots = [...absentCodexSkillRoots(binding), ...absentRetiredClaudeRoots(binding), ...retiredCodexRoots(binding).filter((root2) => !lstatSync21(root2, { throwIfNoEntry: false }))];
   const rebound = { ...binding, sources: binding.sources.map((source) => {
     assertMarketplaceBinding(binding, source);
-    if (!changes.has(source.path) && (installationRoots.some((root2) => source.path.startsWith(root2 + sep6)) || absentRoots.some((root2) => source.path.startsWith(root2 + sep6)) && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && [undefined, "bytes"].includes(source.hashMode)))
+    if (!changes.has(source.path) && (installationRoots.some((root2) => source.path.startsWith(root2 + sep6)) || absentRoots.some((root2) => source.path.startsWith(root2 + sep6)) && retainableAbsentSource(source)))
       return source;
     const sha2562 = projected(source, changes, budget2);
     if (!changes.has(source.path) && sha2562 !== source.sha256)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/skills",
-  "version": "0.10.53",
+  "version": "0.10.55",
   "description": "Skills library for AI coding agents",
   "type": "module",
   "bin": {