@hasna/skills 0.10.54 → 0.10.56

package/README.md

@@ -696,6 +696,10 @@ remain absent only while unchanged native settings and registrations select a
 different extant, witnessed user version. Individual missing files, current
 registered roots, aliases and registration changes still refuse; historical
 source hashes and typed settings witnesses remain intact.
+An explicit Claude discovery review must cover every registered active cache
+manifest, skill root and hook source. Installation refuses an incomplete review
+that covers only an older cache, before retirement of that cache can break prompt
+delivery. Hook behavior still requires the existing no-skill-injection review.
 
 For a Codex 0.160.0, 0.160.1 or 0.161.0 remote refresh omitted by an existing qualified-name disable,
 a fresh native catalog and discovery review can plan the new exact path disable

package/bin/index.js

@@ -36888,7 +36888,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.54",
+    version: "0.10.56",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -59361,6 +59361,97 @@ function read2(path, changes) {
     throw new Error(`Unsupported or oversized native discovery input: ${path}`);
   return readFileSync21(path, "utf8");
 }
+function assertReviewedClaudeCacheClosures(home, config, review) {
+  const enabledIds = Object.entries(config.enabledPlugins ?? {}).filter(([, enabled]) => enabled === true).map(([id]) => id);
+  if (enabledIds.length === 0)
+    return;
+  const registryPath = join37(home, ".claude/plugins/installed_plugins.json");
+  const cacheRoot = join37(home, ".claude/plugins/cache");
+  const registryText = read2(registryPath);
+  if (registryText === null)
+    return;
+  const registry = parseConfig(registryText, registryPath);
+  if (registry.version !== 2 || !registry.plugins || typeof registry.plugins !== "object" || Array.isArray(registry.plugins))
+    throw new Error("Reviewed Claude installed plugin registrations are invalid");
+  const cachePath = (path) => typeof path === "string" && isAbsolute22(path) && resolve21(path) === path && (path === cacheRoot || path.startsWith(cacheRoot + sep8));
+  const activeRoots = new Set;
+  for (const id of enabledIds) {
+    const rows = registry.plugins[id];
+    if (rows === undefined)
+      continue;
+    if (!Array.isArray(rows))
+      throw new Error("Reviewed Claude enabled plugin registrations must be an array");
+    for (const row of rows) {
+      if (!row || typeof row !== "object" || Array.isArray(row) || typeof row.installPath !== "string") {
+        throw new Error("Reviewed Claude enabled plugin registration requires an object with an installPath string");
+      }
+      if (typeof row.installPath === "string" && (row.installPath === cacheRoot || row.installPath.startsWith(cacheRoot + sep8))) {
+        if (!cachePath(row.installPath) || row.installPath.length > AGENT_POLICY_LIMITS.pathCharacters || row.version !== undefined && (typeof row.version !== "string" || basename11(row.installPath) !== row.version)) {
+          throw new Error("Reviewed Claude discovery has a malformed active cache registration");
+        }
+        if (row.scope === "user" && (row.projectPath === undefined || row.projectPath === null)) {} else if (row.scope === "project" && typeof row.projectPath === "string" && isAbsolute22(row.projectPath) && resolve21(row.projectPath) === row.projectPath && row.projectPath.length <= AGENT_POLICY_LIMITS.pathCharacters) {} else
+          throw new Error("Reviewed Claude discovery has an unsupported active cache registration scope");
+        activeRoots.add(row.installPath);
+      }
+    }
+  }
+  if (activeRoots.size === 0)
+    return;
+  const registrySource = review.sources.find((source) => source.path === registryPath && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && (source.hashMode === undefined || source.hashMode === "bytes"));
+  if (!registrySource)
+    throw new Error("Reviewed Claude discovery must bind installed registrations for active cache plugins");
+  const reviewedFile = (path, manifest = false) => review.sources.some((source) => source.path === path && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && (source.hashMode === undefined || source.hashMode === "bytes" || manifest && source.hashMode === "claude-plugin-manifest-v1"));
+  const requireSource = (path, description, manifest = false) => {
+    if (!reviewedFile(path, manifest))
+      throw new Error(`Reviewed active Claude cache plugin ${description} is not bound`);
+  };
+  for (const root2 of activeRoots) {
+    safe4(root2);
+    const rootStat = lstatSync25(root2, { throwIfNoEntry: false });
+    if (!rootStat?.isDirectory() || realpathSync11(root2) !== root2)
+      throw new Error("Reviewed Claude active cache plugin root is missing or unsafe");
+    const manifestPath = join37(root2, ".claude-plugin/plugin.json");
+    const manifestStat = lstatSync25(manifestPath, { throwIfNoEntry: false });
+    let manifest;
+    if (manifestStat) {
+      if (!manifestStat.isFile())
+        throw new Error("Reviewed active Claude cache plugin manifest is unsupported");
+      requireSource(manifestPath, "manifest", true);
+      const raw = read2(manifestPath);
+      if (raw === null)
+        throw new Error("Reviewed Claude active cache plugin manifest is missing");
+      manifest = JSON.parse(raw);
+      if (!manifest || typeof manifest !== "object" || Array.isArray(manifest))
+        throw new Error("Reviewed Claude active cache plugin manifest is invalid");
+    } else if (!review.sources.some((source) => source.path === manifestPath && source.hashMode === "path-bytes" && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined)) {
+      throw new Error("Reviewed Claude active cache plugin manifest absence requires a path-bytes witness");
+    }
+    const roots = new Set([join37(root2, "skills")]);
+    if (lstatSync25(join37(root2, "SKILL.md"), { throwIfNoEntry: false })?.isFile())
+      roots.add(root2);
+    const declared = manifest?.skills === undefined ? ["./skills"] : typeof manifest.skills === "string" ? [manifest.skills] : manifest.skills;
+    if (!Array.isArray(declared) || declared.some((path) => typeof path !== "string"))
+      throw new Error("Reviewed Claude active cache plugin has unsupported skill paths");
+    for (const value of declared) {
+      const path = resolve21(root2, value);
+      if (path !== root2 && !path.startsWith(root2 + sep8))
+        throw new Error("Reviewed Claude active cache plugin skill path escapes its root");
+      roots.add(path.endsWith(`${sep8}SKILL.md`) ? dirname20(path) : path);
+    }
+    for (const skillRoot of roots)
+      if (!review.roots.includes(skillRoot))
+        throw new Error("Reviewed Claude active cache plugin skill root is not covered");
+    const hooksPath = join37(root2, "hooks/hooks.json");
+    const hooksStat = lstatSync25(hooksPath, { throwIfNoEntry: false });
+    if (hooksStat) {
+      if (!hooksStat.isFile())
+        throw new Error("Reviewed Claude plugin hook manifest is unsupported");
+      requireSource(hooksPath, "hook manifest");
+    }
+    if (typeof manifest?.hooks === "string")
+      requireSource(resolve21(root2, manifest.hooks), "manifest-declared hook source");
+  }
+}
 function projectNativeDiscoveryFields(text3, format, fields2, path) {
   const object6 = format === "yaml" ? parseHermesConfig(text3) : parseConfig(text3, path, format === "toml");
   if (!object6 || typeof object6 !== "object" || Array.isArray(object6))
@@ -59937,6 +60028,8 @@ function resolveAgentDiscovery(options) {
           throw new Error("Reviewed Claude plugin manifest requires separately reviewed exact hook file sources");
       return { path: source.path, sha256: manifestSha256, hashMode: "claude-plugin-manifest-v1" };
     });
+    if (agent === "claude")
+      assertReviewedClaudeCacheClosures(home, config, review);
     const combined = [...reviewedSources, ...reviewedSourcesWithManifestProjection];
     const unique = combined.filter((source, index) => combined.findIndex((candidate2) => isDeepStrictEqual11(candidate2, source)) === index);
     return { ...supplied, roots: [...new Set([...roots, ...supplied.roots])].sort(), sources: unique, ...agent === "gemini" ? { builtinNames } : {} };
@@ -86070,8 +86163,12 @@ function assertPlanWindow(issuedAt, expiresAt, now3) {
     throw new SkillSelectionError("SESSION_PLAN_EXPIRED", "The reviewed session reconciliation plan is not currently valid; inspect the receipt and prepare a new plan.");
   }
 }
+function selectionMetadata(selection) {
+  return { slug: selection.slug, version: selection.version, bundleDigest: selection.bundleDigest };
+}
 function inspectSkillSession(sessionId, options = {}) {
   const snapshot2 = readSkillSessionSnapshot(sessionId, options), { receipt } = snapshot2;
+  const loaded = new Set(receipt.loaded);
   return {
     sessionId,
     path: snapshot2.path,
@@ -86083,7 +86180,8 @@ function inspectSkillSession(sessionId, options = {}) {
     profileId: receipt.profile.profileId,
     profileRevision: receipt.profile.profileRevision,
     selectionCount: receipt.profile.selections.length,
-    loadedCount: receipt.loaded.length
+    loadedCount: receipt.loaded.length,
+    selections: receipt.profile.selections.map((selection) => ({ ...selectionMetadata(selection), loaded: loaded.has(selectionKey(selection)) }))
   };
 }
 function renewalDeadlineSignal(error61) {
@@ -86305,6 +86403,21 @@ async function reconcileSkillSession(input2, options = {}) {
   }
   const targetKeys = new Set(target.selections.map(selectionKey));
   const loaded = old.loaded.filter((key) => targetKeys.has(key));
+  const previouslyLoaded = new Set(old.loaded);
+  const targetBySlug = new Map(target.selections.map((selection) => [selection.slug, selection]));
+  const previousSlugs = new Set(old.profile.selections.map((selection) => selection.slug));
+  const selectionDelta = old.profile.selections.map((previous) => {
+    const current = targetBySlug.get(previous.slug);
+    const wasLoaded = previouslyLoaded.has(selectionKey(previous));
+    const reason2 = !current ? "selection-removed" : selectionKey(previous) === selectionKey(current) ? "same-bundle" : "bundle-changed";
+    return {
+      selection: selectionMetadata(previous),
+      loaded: wasLoaded,
+      outcome: !wasLoaded ? "unloaded" : reason2 === "same-bundle" ? "retained" : "retired",
+      reason: reason2,
+      ...reason2 === "bundle-changed" ? { replacement: selectionMetadata(current) } : {}
+    };
+  });
   const replacementGeneration = nextSkillSessionGeneration(snapshot2.generation);
   const plan = {
     schemaVersion: 1,
@@ -86317,6 +86430,8 @@ async function reconcileSkillSession(input2, options = {}) {
     replacementGeneration,
     retainedLoadedCount: loaded.length,
     retiredLoadedCount: old.loaded.length - loaded.length,
+    selectionDelta,
+    addedSelections: target.selections.filter((selection) => !previousSlugs.has(selection.slug)).map(selectionMetadata),
     scope: "Only this receipt; existing child sessions, project locks, shared profiles, hooks and running processes are unchanged."
   };
   const planDigest = digest3(plan);
@@ -86356,6 +86471,9 @@ __export(exports_context, {
   contextResolverOptions: () => contextResolverOptions
 });
 import { readSync as readSync12 } from "fs";
+function sessionSelectionLabel(selection) {
+  return `${selection.slug}@${selection.version} ${selection.bundleDigest}`;
+}
 function selectedProfileId(explicit) {
   return explicit ?? process.env.HASNA_SKILLS_SELECTION_PROFILE ?? readManagedSkillPolicy()?.profileId ?? "default";
 }
@@ -86373,8 +86491,12 @@ function registerContextCommands(parent) {
   sessions.command("show <id>").option("--json", "Return metadata as JSON", false).description("Inspect one session receipt without displaying payloads or changing its pin").action(async (id, options) => {
     try {
       const result2 = inspectSkillSession(id);
-      await writeCliOutput(options.json ? JSON.stringify(result2) : `${JSON.stringify(id)}: ${result2.profileId} at ${result2.profileRevision}
-Receipt SHA256: ${result2.receiptSha256}`);
+      await writeCliOutput(options.json ? JSON.stringify(result2) : [
+        `${JSON.stringify(id)}: ${result2.profileId} at ${result2.profileRevision}`,
+        `Receipt SHA256: ${result2.receiptSha256}`,
+        ...result2.selections.map((selection) => `${selection.loaded ? "Loaded" : "Unloaded"}: ${sessionSelectionLabel(selection)}`)
+      ].join(`
+`));
     } catch (error61) {
       reportContextError(error61, options.json);
     }
@@ -86401,7 +86523,13 @@ Review digest: ${result2.reviewDigest}`);
     try {
       const result2 = await reconcileSkillSession({ ...options, sessionId: id });
       await writeCliOutput(options.json ? JSON.stringify(result2) : result2.applied ? `Reconciled ${JSON.stringify(id)} to ${result2.plan.target.profileId} at ${result2.plan.target.profileRevision}.
-Preserved original receipt: ${result2.archivePath}` : `Planned one session reconciliation. Review --json output, then use --apply --plan-digest ${result2.planDigest} --plan-issued-at ${result2.plan.issuedAt} --plan-expires-at ${result2.plan.expiresAt}.`);
+Preserved original receipt: ${result2.archivePath}` : [
+        `Planned one session reconciliation: ${result2.plan.retainedLoadedCount} loaded retained, ${result2.plan.retiredLoadedCount} loaded retired.`,
+        ...result2.plan.selectionDelta.map((row) => `${row.outcome} (${row.reason}): ${sessionSelectionLabel(row.selection)}${row.replacement ? ` -> ${sessionSelectionLabel(row.replacement)}` : ""}`),
+        ...result2.plan.addedSelections.map((selection) => `Added selection (unloaded): ${sessionSelectionLabel(selection)}`),
+        `Review --json output, then use --apply --plan-digest ${result2.planDigest} --plan-issued-at ${result2.plan.issuedAt} --plan-expires-at ${result2.plan.expiresAt}.`
+      ].join(`
+`));
     } catch (error61) {
       reportContextError(error61, options.json);
     }

package/bin/mcp.js

@@ -20019,7 +20019,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.54",
+    version: "0.10.56",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -50788,6 +50788,97 @@ function read(path, changes) {
     throw new Error(`Unsupported or oversized native discovery input: ${path}`);
   return readFileSync15(path, "utf8");
 }
+function assertReviewedClaudeCacheClosures(home, config2, review) {
+  const enabledIds = Object.entries(config2.enabledPlugins ?? {}).filter(([, enabled]) => enabled === true).map(([id]) => id);
+  if (enabledIds.length === 0)
+    return;
+  const registryPath = join26(home, ".claude/plugins/installed_plugins.json");
+  const cacheRoot = join26(home, ".claude/plugins/cache");
+  const registryText = read(registryPath);
+  if (registryText === null)
+    return;
+  const registry2 = parseConfig(registryText, registryPath);
+  if (registry2.version !== 2 || !registry2.plugins || typeof registry2.plugins !== "object" || Array.isArray(registry2.plugins))
+    throw new Error("Reviewed Claude installed plugin registrations are invalid");
+  const cachePath = (path) => typeof path === "string" && isAbsolute15(path) && resolve17(path) === path && (path === cacheRoot || path.startsWith(cacheRoot + sep6));
+  const activeRoots = new Set;
+  for (const id of enabledIds) {
+    const rows = registry2.plugins[id];
+    if (rows === undefined)
+      continue;
+    if (!Array.isArray(rows))
+      throw new Error("Reviewed Claude enabled plugin registrations must be an array");
+    for (const row of rows) {
+      if (!row || typeof row !== "object" || Array.isArray(row) || typeof row.installPath !== "string") {
+        throw new Error("Reviewed Claude enabled plugin registration requires an object with an installPath string");
+      }
+      if (typeof row.installPath === "string" && (row.installPath === cacheRoot || row.installPath.startsWith(cacheRoot + sep6))) {
+        if (!cachePath(row.installPath) || row.installPath.length > AGENT_POLICY_LIMITS.pathCharacters || row.version !== undefined && (typeof row.version !== "string" || basename9(row.installPath) !== row.version)) {
+          throw new Error("Reviewed Claude discovery has a malformed active cache registration");
+        }
+        if (row.scope === "user" && (row.projectPath === undefined || row.projectPath === null)) {} else if (row.scope === "project" && typeof row.projectPath === "string" && isAbsolute15(row.projectPath) && resolve17(row.projectPath) === row.projectPath && row.projectPath.length <= AGENT_POLICY_LIMITS.pathCharacters) {} else
+          throw new Error("Reviewed Claude discovery has an unsupported active cache registration scope");
+        activeRoots.add(row.installPath);
+      }
+    }
+  }
+  if (activeRoots.size === 0)
+    return;
+  const registrySource = review.sources.find((source) => source.path === registryPath && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && (source.hashMode === undefined || source.hashMode === "bytes"));
+  if (!registrySource)
+    throw new Error("Reviewed Claude discovery must bind installed registrations for active cache plugins");
+  const reviewedFile = (path, manifest = false) => review.sources.some((source) => source.path === path && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && (source.hashMode === undefined || source.hashMode === "bytes" || manifest && source.hashMode === "claude-plugin-manifest-v1"));
+  const requireSource = (path, description, manifest = false) => {
+    if (!reviewedFile(path, manifest))
+      throw new Error(`Reviewed active Claude cache plugin ${description} is not bound`);
+  };
+  for (const root of activeRoots) {
+    safe4(root);
+    const rootStat = lstatSync18(root, { throwIfNoEntry: false });
+    if (!rootStat?.isDirectory() || realpathSync5(root) !== root)
+      throw new Error("Reviewed Claude active cache plugin root is missing or unsafe");
+    const manifestPath = join26(root, ".claude-plugin/plugin.json");
+    const manifestStat = lstatSync18(manifestPath, { throwIfNoEntry: false });
+    let manifest;
+    if (manifestStat) {
+      if (!manifestStat.isFile())
+        throw new Error("Reviewed active Claude cache plugin manifest is unsupported");
+      requireSource(manifestPath, "manifest", true);
+      const raw = read(manifestPath);
+      if (raw === null)
+        throw new Error("Reviewed Claude active cache plugin manifest is missing");
+      manifest = JSON.parse(raw);
+      if (!manifest || typeof manifest !== "object" || Array.isArray(manifest))
+        throw new Error("Reviewed Claude active cache plugin manifest is invalid");
+    } else if (!review.sources.some((source) => source.path === manifestPath && source.hashMode === "path-bytes" && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined)) {
+      throw new Error("Reviewed Claude active cache plugin manifest absence requires a path-bytes witness");
+    }
+    const roots = new Set([join26(root, "skills")]);
+    if (lstatSync18(join26(root, "SKILL.md"), { throwIfNoEntry: false })?.isFile())
+      roots.add(root);
+    const declared = manifest?.skills === undefined ? ["./skills"] : typeof manifest.skills === "string" ? [manifest.skills] : manifest.skills;
+    if (!Array.isArray(declared) || declared.some((path) => typeof path !== "string"))
+      throw new Error("Reviewed Claude active cache plugin has unsupported skill paths");
+    for (const value of declared) {
+      const path = resolve17(root, value);
+      if (path !== root && !path.startsWith(root + sep6))
+        throw new Error("Reviewed Claude active cache plugin skill path escapes its root");
+      roots.add(path.endsWith(`${sep6}SKILL.md`) ? dirname16(path) : path);
+    }
+    for (const skillRoot of roots)
+      if (!review.roots.includes(skillRoot))
+        throw new Error("Reviewed Claude active cache plugin skill root is not covered");
+    const hooksPath = join26(root, "hooks/hooks.json");
+    const hooksStat = lstatSync18(hooksPath, { throwIfNoEntry: false });
+    if (hooksStat) {
+      if (!hooksStat.isFile())
+        throw new Error("Reviewed Claude plugin hook manifest is unsupported");
+      requireSource(hooksPath, "hook manifest");
+    }
+    if (typeof manifest?.hooks === "string")
+      requireSource(resolve17(root, manifest.hooks), "manifest-declared hook source");
+  }
+}
 function projectNativeDiscoveryFields(text2, format, fields2, path) {
   const object7 = format === "yaml" ? parseHermesConfig(text2) : parseConfig(text2, path, format === "toml");
   if (!object7 || typeof object7 !== "object" || Array.isArray(object7))
@@ -51254,6 +51345,8 @@ function resolveAgentDiscovery(options) {
           throw new Error("Reviewed Claude plugin manifest requires separately reviewed exact hook file sources");
       return { path: source.path, sha256: manifestSha256, hashMode: "claude-plugin-manifest-v1" };
     });
+    if (agent === "claude")
+      assertReviewedClaudeCacheClosures(home, config2, review);
     const combined = [...reviewedSources, ...reviewedSourcesWithManifestProjection];
     const unique = combined.filter((source, index) => combined.findIndex((candidate) => isDeepStrictEqual4(candidate, source)) === index);
     return { ...supplied, roots: [...new Set([...roots, ...supplied.roots])].sort(), sources: unique, ...agent === "gemini" ? { builtinNames } : {} };

package/bin/migrate.js

@@ -25,7 +25,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.54",
+  version: "0.10.56",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/server.js

@@ -24140,7 +24140,7 @@ restoreLaunchCwd();
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.54",
+  version: "0.10.56",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/worker.js

@@ -24143,7 +24143,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.54",
+  version: "0.10.56",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/index.js

@@ -11833,7 +11833,7 @@ function replaceSkillSession(expected, replacement, plan, options = {}, beforeCo
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.54",
+  version: "0.10.56",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -20693,6 +20693,97 @@ function read2(path, changes) {
     throw new Error(`Unsupported or oversized native discovery input: ${path}`);
   return readFileSync20(path, "utf8");
 }
+function assertReviewedClaudeCacheClosures(home, config, review) {
+  const enabledIds = Object.entries(config.enabledPlugins ?? {}).filter(([, enabled]) => enabled === true).map(([id]) => id);
+  if (enabledIds.length === 0)
+    return;
+  const registryPath = join32(home, ".claude/plugins/installed_plugins.json");
+  const cacheRoot = join32(home, ".claude/plugins/cache");
+  const registryText = read2(registryPath);
+  if (registryText === null)
+    return;
+  const registry = parseConfig(registryText, registryPath);
+  if (registry.version !== 2 || !registry.plugins || typeof registry.plugins !== "object" || Array.isArray(registry.plugins))
+    throw new Error("Reviewed Claude installed plugin registrations are invalid");
+  const cachePath = (path) => typeof path === "string" && isAbsolute21(path) && resolve20(path) === path && (path === cacheRoot || path.startsWith(cacheRoot + sep8));
+  const activeRoots = new Set;
+  for (const id of enabledIds) {
+    const rows = registry.plugins[id];
+    if (rows === undefined)
+      continue;
+    if (!Array.isArray(rows))
+      throw new Error("Reviewed Claude enabled plugin registrations must be an array");
+    for (const row of rows) {
+      if (!row || typeof row !== "object" || Array.isArray(row) || typeof row.installPath !== "string") {
+        throw new Error("Reviewed Claude enabled plugin registration requires an object with an installPath string");
+      }
+      if (typeof row.installPath === "string" && (row.installPath === cacheRoot || row.installPath.startsWith(cacheRoot + sep8))) {
+        if (!cachePath(row.installPath) || row.installPath.length > AGENT_POLICY_LIMITS.pathCharacters || row.version !== undefined && (typeof row.version !== "string" || basename11(row.installPath) !== row.version)) {
+          throw new Error("Reviewed Claude discovery has a malformed active cache registration");
+        }
+        if (row.scope === "user" && (row.projectPath === undefined || row.projectPath === null)) {} else if (row.scope === "project" && typeof row.projectPath === "string" && isAbsolute21(row.projectPath) && resolve20(row.projectPath) === row.projectPath && row.projectPath.length <= AGENT_POLICY_LIMITS.pathCharacters) {} else
+          throw new Error("Reviewed Claude discovery has an unsupported active cache registration scope");
+        activeRoots.add(row.installPath);
+      }
+    }
+  }
+  if (activeRoots.size === 0)
+    return;
+  const registrySource = review.sources.find((source) => source.path === registryPath && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && (source.hashMode === undefined || source.hashMode === "bytes"));
+  if (!registrySource)
+    throw new Error("Reviewed Claude discovery must bind installed registrations for active cache plugins");
+  const reviewedFile = (path, manifest = false) => review.sources.some((source) => source.path === path && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && (source.hashMode === undefined || source.hashMode === "bytes" || manifest && source.hashMode === "claude-plugin-manifest-v1"));
+  const requireSource = (path, description, manifest = false) => {
+    if (!reviewedFile(path, manifest))
+      throw new Error(`Reviewed active Claude cache plugin ${description} is not bound`);
+  };
+  for (const root2 of activeRoots) {
+    safe4(root2);
+    const rootStat = lstatSync25(root2, { throwIfNoEntry: false });
+    if (!rootStat?.isDirectory() || realpathSync11(root2) !== root2)
+      throw new Error("Reviewed Claude active cache plugin root is missing or unsafe");
+    const manifestPath = join32(root2, ".claude-plugin/plugin.json");
+    const manifestStat = lstatSync25(manifestPath, { throwIfNoEntry: false });
+    let manifest;
+    if (manifestStat) {
+      if (!manifestStat.isFile())
+        throw new Error("Reviewed active Claude cache plugin manifest is unsupported");
+      requireSource(manifestPath, "manifest", true);
+      const raw = read2(manifestPath);
+      if (raw === null)
+        throw new Error("Reviewed Claude active cache plugin manifest is missing");
+      manifest = JSON.parse(raw);
+      if (!manifest || typeof manifest !== "object" || Array.isArray(manifest))
+        throw new Error("Reviewed Claude active cache plugin manifest is invalid");
+    } else if (!review.sources.some((source) => source.path === manifestPath && source.hashMode === "path-bytes" && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined)) {
+      throw new Error("Reviewed Claude active cache plugin manifest absence requires a path-bytes witness");
+    }
+    const roots = new Set([join32(root2, "skills")]);
+    if (lstatSync25(join32(root2, "SKILL.md"), { throwIfNoEntry: false })?.isFile())
+      roots.add(root2);
+    const declared = manifest?.skills === undefined ? ["./skills"] : typeof manifest.skills === "string" ? [manifest.skills] : manifest.skills;
+    if (!Array.isArray(declared) || declared.some((path) => typeof path !== "string"))
+      throw new Error("Reviewed Claude active cache plugin has unsupported skill paths");
+    for (const value of declared) {
+      const path = resolve20(root2, value);
+      if (path !== root2 && !path.startsWith(root2 + sep8))
+        throw new Error("Reviewed Claude active cache plugin skill path escapes its root");
+      roots.add(path.endsWith(`${sep8}SKILL.md`) ? dirname20(path) : path);
+    }
+    for (const skillRoot of roots)
+      if (!review.roots.includes(skillRoot))
+        throw new Error("Reviewed Claude active cache plugin skill root is not covered");
+    const hooksPath = join32(root2, "hooks/hooks.json");
+    const hooksStat = lstatSync25(hooksPath, { throwIfNoEntry: false });
+    if (hooksStat) {
+      if (!hooksStat.isFile())
+        throw new Error("Reviewed Claude plugin hook manifest is unsupported");
+      requireSource(hooksPath, "hook manifest");
+    }
+    if (typeof manifest?.hooks === "string")
+      requireSource(resolve20(root2, manifest.hooks), "manifest-declared hook source");
+  }
+}
 function projectNativeDiscoveryFields(text2, format, fields2, path) {
   const object6 = format === "yaml" ? parseHermesConfig(text2) : parseConfig(text2, path, format === "toml");
   if (!object6 || typeof object6 !== "object" || Array.isArray(object6))
@@ -21281,6 +21372,8 @@ function resolveAgentDiscovery(options) {
           throw new Error("Reviewed Claude plugin manifest requires separately reviewed exact hook file sources");
       return { path: source.path, sha256: manifestSha256, hashMode: "claude-plugin-manifest-v1" };
     });
+    if (agent === "claude")
+      assertReviewedClaudeCacheClosures(home, config, review);
     const combined = [...reviewedSources, ...reviewedSourcesWithManifestProjection];
     const unique = combined.filter((source, index) => combined.findIndex((candidate2) => isDeepStrictEqual7(candidate2, source)) === index);
     return { ...supplied, roots: [...new Set([...roots, ...supplied.roots])].sort(), sources: unique, ...agent === "gemini" ? { builtinNames } : {} };
@@ -48150,8 +48243,12 @@ function assertPlanWindow(issuedAt, expiresAt, now) {
     throw new SkillSelectionError("SESSION_PLAN_EXPIRED", "The reviewed session reconciliation plan is not currently valid; inspect the receipt and prepare a new plan.");
   }
 }
+function selectionMetadata(selection) {
+  return { slug: selection.slug, version: selection.version, bundleDigest: selection.bundleDigest };
+}
 function inspectSkillSession(sessionId, options = {}) {
   const snapshot2 = readSkillSessionSnapshot(sessionId, options), { receipt } = snapshot2;
+  const loaded = new Set(receipt.loaded);
   return {
     sessionId,
     path: snapshot2.path,
@@ -48163,7 +48260,8 @@ function inspectSkillSession(sessionId, options = {}) {
     profileId: receipt.profile.profileId,
     profileRevision: receipt.profile.profileRevision,
     selectionCount: receipt.profile.selections.length,
-    loadedCount: receipt.loaded.length
+    loadedCount: receipt.loaded.length,
+    selections: receipt.profile.selections.map((selection) => ({ ...selectionMetadata(selection), loaded: loaded.has(selectionKey(selection)) }))
   };
 }
 var SESSION_RENEWAL_REFUSAL_TTL_MS = 5 * 60 * 1000;
@@ -48198,6 +48296,21 @@ async function reconcileSkillSession(input2, options = {}) {
   }
   const targetKeys = new Set(target.selections.map(selectionKey));
   const loaded = old.loaded.filter((key) => targetKeys.has(key));
+  const previouslyLoaded = new Set(old.loaded);
+  const targetBySlug = new Map(target.selections.map((selection) => [selection.slug, selection]));
+  const previousSlugs = new Set(old.profile.selections.map((selection) => selection.slug));
+  const selectionDelta = old.profile.selections.map((previous) => {
+    const current = targetBySlug.get(previous.slug);
+    const wasLoaded = previouslyLoaded.has(selectionKey(previous));
+    const reason2 = !current ? "selection-removed" : selectionKey(previous) === selectionKey(current) ? "same-bundle" : "bundle-changed";
+    return {
+      selection: selectionMetadata(previous),
+      loaded: wasLoaded,
+      outcome: !wasLoaded ? "unloaded" : reason2 === "same-bundle" ? "retained" : "retired",
+      reason: reason2,
+      ...reason2 === "bundle-changed" ? { replacement: selectionMetadata(current) } : {}
+    };
+  });
   const replacementGeneration = nextSkillSessionGeneration(snapshot2.generation);
   const plan = {
     schemaVersion: 1,
@@ -48210,6 +48323,8 @@ async function reconcileSkillSession(input2, options = {}) {
     replacementGeneration,
     retainedLoadedCount: loaded.length,
     retiredLoadedCount: old.loaded.length - loaded.length,
+    selectionDelta,
+    addedSelections: target.selections.filter((selection) => !previousSlugs.has(selection.slug)).map(selectionMetadata),
     scope: "Only this receipt; existing child sessions, project locks, shared profiles, hooks and running processes are unchanged."
   };
   const planDigest = digest3(plan);

package/dist/lib/session-reconciliation.d.ts

@@ -16,6 +16,19 @@ export interface SessionReconciliationOptions extends SelectionCacheOptions {
     client?: ProfileClient;
 }
 export declare const SESSION_RECONCILIATION_PLAN_TTL_MS: number;
+/** Exact bundle identity only; never spread receipt, policy or payload fields. */
+export interface SessionSelectionMetadata {
+    slug: string;
+    version: string;
+    bundleDigest: string;
+}
+export interface SessionSelectionDelta {
+    selection: SessionSelectionMetadata;
+    loaded: boolean;
+    outcome: "retained" | "retired" | "unloaded";
+    reason: "same-bundle" | "selection-removed" | "bundle-changed";
+    replacement?: SessionSelectionMetadata;
+}
 /** Metadata only: inspection never displays skill payloads or resolves credentials. */
 export declare function inspectSkillSession(sessionId: string, options?: SelectionCacheOptions): {
     sessionId: string;
@@ -29,6 +42,12 @@ export declare function inspectSkillSession(sessionId: string, options?: Selecti
     profileRevision: string;
     selectionCount: number;
     loadedCount: number;
+    selections: {
+        loaded: boolean;
+        slug: string;
+        version: string;
+        bundleDigest: string;
+    }[];
 };
 /** Fits inside the managed context child's 6.5-second ceiling, including CLI work. */
 export declare const SESSION_RENEWAL_TIMEOUT_MS = 4000;
@@ -75,6 +94,8 @@ export declare function reconcileSkillSession(input: SessionReconciliationInput,
         replacementGeneration: number;
         retainedLoadedCount: number;
         retiredLoadedCount: number;
+        selectionDelta: SessionSelectionDelta[];
+        addedSelections: SessionSelectionMetadata[];
         scope: string;
     };
     planDigest: string;
@@ -112,6 +133,8 @@ export declare function reconcileSkillSession(input: SessionReconciliationInput,
         replacementGeneration: number;
         retainedLoadedCount: number;
         retiredLoadedCount: number;
+        selectionDelta: SessionSelectionDelta[];
+        addedSelections: SessionSelectionMetadata[];
         scope: string;
     };
     planDigest: string;

package/dist/sdk/index.d.ts

@@ -19,7 +19,7 @@ export { CloudExecutionClient, type CloudExecution, type CloudEligibility } from
 export { readExecutionGrantPolicy, saveExecutionGrantPolicy, resolveExecutionGrant } from "../lib/execution-grant-client.js";
 export type { ExecutionGrant, ExecutionGrantPolicy, ExecutionGrantRequest, ResolvedExecutionGrant } from "../lib/execution-grants.js";
 export { HttpProfileClient, createProfileClient, type ProfileClient, type AuthenticatedProfilePrincipal, type AuthenticatedProfileRole } from "../lib/profile-client.js";
-export { inspectSkillSession, reconcileSkillSession, type SessionReconciliationInput, type SessionReconciliationOptions } from "../lib/session-reconciliation.js";
+export { inspectSkillSession, reconcileSkillSession, type SessionSelectionMetadata, type SessionSelectionDelta, type SessionReconciliationInput, type SessionReconciliationOptions } from "../lib/session-reconciliation.js";
 export { resolveSelectedRun, executeSelectedLocal, prepareSelectedSecretBindings, type ResolvedSelectedRun, type SelectedLocalRunOptions } from "../lib/selected-run.js";
 export { readSelectedSecretBindings, type SelectedSecretBindings, type SelectedSecretsClient } from "../lib/execution-secrets.js";
 export type { SkillSelection, SkillProfile, ResolvedSkillSelection, ResolvedSkillProfile, StationSkillStateInput, StationSkillState } from "../types/skill-selection.js";

package/dist/sdk/index.js

@@ -32373,7 +32373,7 @@ var init_event_sink = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.54",
+  version: "0.10.56",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -37490,8 +37490,12 @@ function assertPlanWindow(issuedAt, expiresAt, now) {
     throw new SkillSelectionError("SESSION_PLAN_EXPIRED", "The reviewed session reconciliation plan is not currently valid; inspect the receipt and prepare a new plan.");
   }
 }
+function selectionMetadata(selection2) {
+  return { slug: selection2.slug, version: selection2.version, bundleDigest: selection2.bundleDigest };
+}
 function inspectSkillSession(sessionId, options = {}) {
   const snapshot = readSkillSessionSnapshot(sessionId, options), { receipt } = snapshot;
+  const loaded = new Set(receipt.loaded);
   return {
     sessionId,
     path: snapshot.path,
@@ -37503,7 +37507,8 @@ function inspectSkillSession(sessionId, options = {}) {
     profileId: receipt.profile.profileId,
     profileRevision: receipt.profile.profileRevision,
     selectionCount: receipt.profile.selections.length,
-    loadedCount: receipt.loaded.length
+    loadedCount: receipt.loaded.length,
+    selections: receipt.profile.selections.map((selection2) => ({ ...selectionMetadata(selection2), loaded: loaded.has(selectionKey(selection2)) }))
   };
 }
 var SESSION_RENEWAL_REFUSAL_TTL_MS = 5 * 60 * 1000;
@@ -37538,6 +37543,21 @@ async function reconcileSkillSession(input, options = {}) {
   }
   const targetKeys = new Set(target.selections.map(selectionKey));
   const loaded = old.loaded.filter((key) => targetKeys.has(key));
+  const previouslyLoaded = new Set(old.loaded);
+  const targetBySlug = new Map(target.selections.map((selection2) => [selection2.slug, selection2]));
+  const previousSlugs = new Set(old.profile.selections.map((selection2) => selection2.slug));
+  const selectionDelta = old.profile.selections.map((previous) => {
+    const current = targetBySlug.get(previous.slug);
+    const wasLoaded = previouslyLoaded.has(selectionKey(previous));
+    const reason = !current ? "selection-removed" : selectionKey(previous) === selectionKey(current) ? "same-bundle" : "bundle-changed";
+    return {
+      selection: selectionMetadata(previous),
+      loaded: wasLoaded,
+      outcome: !wasLoaded ? "unloaded" : reason === "same-bundle" ? "retained" : "retired",
+      reason,
+      ...reason === "bundle-changed" ? { replacement: selectionMetadata(current) } : {}
+    };
+  });
   const replacementGeneration = nextSkillSessionGeneration(snapshot.generation);
   const plan = {
     schemaVersion: 1,
@@ -37550,6 +37570,8 @@ async function reconcileSkillSession(input, options = {}) {
     replacementGeneration,
     retainedLoadedCount: loaded.length,
     retiredLoadedCount: old.loaded.length - loaded.length,
+    selectionDelta,
+    addedSelections: target.selections.filter((selection2) => !previousSlugs.has(selection2.slug)).map(selectionMetadata),
     scope: "Only this receipt; existing child sessions, project locks, shared profiles, hooks and running processes are unchanged."
   };
   const planDigest = digest(plan);
@@ -43511,6 +43533,97 @@ function read2(path, changes) {
     throw new Error(`Unsupported or oversized native discovery input: ${path}`);
   return readFileSync15(path, "utf8");
 }
+function assertReviewedClaudeCacheClosures(home, config, review) {
+  const enabledIds = Object.entries(config.enabledPlugins ?? {}).filter(([, enabled]) => enabled === true).map(([id2]) => id2);
+  if (enabledIds.length === 0)
+    return;
+  const registryPath = join26(home, ".claude/plugins/installed_plugins.json");
+  const cacheRoot = join26(home, ".claude/plugins/cache");
+  const registryText = read2(registryPath);
+  if (registryText === null)
+    return;
+  const registry = parseConfig(registryText, registryPath);
+  if (registry.version !== 2 || !registry.plugins || typeof registry.plugins !== "object" || Array.isArray(registry.plugins))
+    throw new Error("Reviewed Claude installed plugin registrations are invalid");
+  const cachePath = (path) => typeof path === "string" && isAbsolute20(path) && resolve19(path) === path && (path === cacheRoot || path.startsWith(cacheRoot + sep6));
+  const activeRoots = new Set;
+  for (const id2 of enabledIds) {
+    const rows = registry.plugins[id2];
+    if (rows === undefined)
+      continue;
+    if (!Array.isArray(rows))
+      throw new Error("Reviewed Claude enabled plugin registrations must be an array");
+    for (const row of rows) {
+      if (!row || typeof row !== "object" || Array.isArray(row) || typeof row.installPath !== "string") {
+        throw new Error("Reviewed Claude enabled plugin registration requires an object with an installPath string");
+      }
+      if (typeof row.installPath === "string" && (row.installPath === cacheRoot || row.installPath.startsWith(cacheRoot + sep6))) {
+        if (!cachePath(row.installPath) || row.installPath.length > AGENT_POLICY_LIMITS.pathCharacters || row.version !== undefined && (typeof row.version !== "string" || basename9(row.installPath) !== row.version)) {
+          throw new Error("Reviewed Claude discovery has a malformed active cache registration");
+        }
+        if (row.scope === "user" && (row.projectPath === undefined || row.projectPath === null)) {} else if (row.scope === "project" && typeof row.projectPath === "string" && isAbsolute20(row.projectPath) && resolve19(row.projectPath) === row.projectPath && row.projectPath.length <= AGENT_POLICY_LIMITS.pathCharacters) {} else
+          throw new Error("Reviewed Claude discovery has an unsupported active cache registration scope");
+        activeRoots.add(row.installPath);
+      }
+    }
+  }
+  if (activeRoots.size === 0)
+    return;
+  const registrySource = review.sources.find((source) => source.path === registryPath && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && (source.hashMode === undefined || source.hashMode === "bytes"));
+  if (!registrySource)
+    throw new Error("Reviewed Claude discovery must bind installed registrations for active cache plugins");
+  const reviewedFile = (path, manifest = false) => review.sources.some((source) => source.path === path && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && (source.hashMode === undefined || source.hashMode === "bytes" || manifest && source.hashMode === "claude-plugin-manifest-v1"));
+  const requireSource = (path, description, manifest = false) => {
+    if (!reviewedFile(path, manifest))
+      throw new Error(`Reviewed active Claude cache plugin ${description} is not bound`);
+  };
+  for (const root2 of activeRoots) {
+    safe4(root2);
+    const rootStat = lstatSync21(root2, { throwIfNoEntry: false });
+    if (!rootStat?.isDirectory() || realpathSync9(root2) !== root2)
+      throw new Error("Reviewed Claude active cache plugin root is missing or unsafe");
+    const manifestPath = join26(root2, ".claude-plugin/plugin.json");
+    const manifestStat = lstatSync21(manifestPath, { throwIfNoEntry: false });
+    let manifest;
+    if (manifestStat) {
+      if (!manifestStat.isFile())
+        throw new Error("Reviewed active Claude cache plugin manifest is unsupported");
+      requireSource(manifestPath, "manifest", true);
+      const raw = read2(manifestPath);
+      if (raw === null)
+        throw new Error("Reviewed Claude active cache plugin manifest is missing");
+      manifest = JSON.parse(raw);
+      if (!manifest || typeof manifest !== "object" || Array.isArray(manifest))
+        throw new Error("Reviewed Claude active cache plugin manifest is invalid");
+    } else if (!review.sources.some((source) => source.path === manifestPath && source.hashMode === "path-bytes" && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined)) {
+      throw new Error("Reviewed Claude active cache plugin manifest absence requires a path-bytes witness");
+    }
+    const roots = new Set([join26(root2, "skills")]);
+    if (lstatSync21(join26(root2, "SKILL.md"), { throwIfNoEntry: false })?.isFile())
+      roots.add(root2);
+    const declared = manifest?.skills === undefined ? ["./skills"] : typeof manifest.skills === "string" ? [manifest.skills] : manifest.skills;
+    if (!Array.isArray(declared) || declared.some((path) => typeof path !== "string"))
+      throw new Error("Reviewed Claude active cache plugin has unsupported skill paths");
+    for (const value of declared) {
+      const path = resolve19(root2, value);
+      if (path !== root2 && !path.startsWith(root2 + sep6))
+        throw new Error("Reviewed Claude active cache plugin skill path escapes its root");
+      roots.add(path.endsWith(`${sep6}SKILL.md`) ? dirname17(path) : path);
+    }
+    for (const skillRoot of roots)
+      if (!review.roots.includes(skillRoot))
+        throw new Error("Reviewed Claude active cache plugin skill root is not covered");
+    const hooksPath = join26(root2, "hooks/hooks.json");
+    const hooksStat = lstatSync21(hooksPath, { throwIfNoEntry: false });
+    if (hooksStat) {
+      if (!hooksStat.isFile())
+        throw new Error("Reviewed Claude plugin hook manifest is unsupported");
+      requireSource(hooksPath, "hook manifest");
+    }
+    if (typeof manifest?.hooks === "string")
+      requireSource(resolve19(root2, manifest.hooks), "manifest-declared hook source");
+  }
+}
 function projectNativeDiscoveryFields(text2, format, fields2, path) {
   const object6 = format === "yaml" ? parseHermesConfig(text2) : parseConfig(text2, path, format === "toml");
   if (!object6 || typeof object6 !== "object" || Array.isArray(object6))
@@ -44099,6 +44212,8 @@ function resolveAgentDiscovery(options) {
           throw new Error("Reviewed Claude plugin manifest requires separately reviewed exact hook file sources");
       return { path: source.path, sha256: manifestSha256, hashMode: "claude-plugin-manifest-v1" };
     });
+    if (agent === "claude")
+      assertReviewedClaudeCacheClosures(home, config, review);
     const combined = [...reviewedSources, ...reviewedSourcesWithManifestProjection];
     const unique = combined.filter((source, index) => combined.findIndex((candidate2) => isDeepStrictEqual6(candidate2, source)) === index);
     return { ...supplied, roots: [...new Set([...roots, ...supplied.roots])].sort(), sources: unique, ...agent === "gemini" ? { builtinNames } : {} };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/skills",
-  "version": "0.10.54",
+  "version": "0.10.56",
   "description": "Skills library for AI coding agents",
   "type": "module",
   "bin": {