@hasna/skills 0.10.55 → 0.10.56

package/README.md

@@ -696,6 +696,10 @@ remain absent only while unchanged native settings and registrations select a
 different extant, witnessed user version. Individual missing files, current
 registered roots, aliases and registration changes still refuse; historical
 source hashes and typed settings witnesses remain intact.
+An explicit Claude discovery review must cover every registered active cache
+manifest, skill root and hook source. Installation refuses an incomplete review
+that covers only an older cache, before retirement of that cache can break prompt
+delivery. Hook behavior still requires the existing no-skill-injection review.
 
 For a Codex 0.160.0, 0.160.1 or 0.161.0 remote refresh omitted by an existing qualified-name disable,
 a fresh native catalog and discovery review can plan the new exact path disable

package/bin/index.js

@@ -36888,7 +36888,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.55",
+    version: "0.10.56",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -59361,6 +59361,97 @@ function read2(path, changes) {
     throw new Error(`Unsupported or oversized native discovery input: ${path}`);
   return readFileSync21(path, "utf8");
 }
+function assertReviewedClaudeCacheClosures(home, config, review) {
+  const enabledIds = Object.entries(config.enabledPlugins ?? {}).filter(([, enabled]) => enabled === true).map(([id]) => id);
+  if (enabledIds.length === 0)
+    return;
+  const registryPath = join37(home, ".claude/plugins/installed_plugins.json");
+  const cacheRoot = join37(home, ".claude/plugins/cache");
+  const registryText = read2(registryPath);
+  if (registryText === null)
+    return;
+  const registry = parseConfig(registryText, registryPath);
+  if (registry.version !== 2 || !registry.plugins || typeof registry.plugins !== "object" || Array.isArray(registry.plugins))
+    throw new Error("Reviewed Claude installed plugin registrations are invalid");
+  const cachePath = (path) => typeof path === "string" && isAbsolute22(path) && resolve21(path) === path && (path === cacheRoot || path.startsWith(cacheRoot + sep8));
+  const activeRoots = new Set;
+  for (const id of enabledIds) {
+    const rows = registry.plugins[id];
+    if (rows === undefined)
+      continue;
+    if (!Array.isArray(rows))
+      throw new Error("Reviewed Claude enabled plugin registrations must be an array");
+    for (const row of rows) {
+      if (!row || typeof row !== "object" || Array.isArray(row) || typeof row.installPath !== "string") {
+        throw new Error("Reviewed Claude enabled plugin registration requires an object with an installPath string");
+      }
+      if (typeof row.installPath === "string" && (row.installPath === cacheRoot || row.installPath.startsWith(cacheRoot + sep8))) {
+        if (!cachePath(row.installPath) || row.installPath.length > AGENT_POLICY_LIMITS.pathCharacters || row.version !== undefined && (typeof row.version !== "string" || basename11(row.installPath) !== row.version)) {
+          throw new Error("Reviewed Claude discovery has a malformed active cache registration");
+        }
+        if (row.scope === "user" && (row.projectPath === undefined || row.projectPath === null)) {} else if (row.scope === "project" && typeof row.projectPath === "string" && isAbsolute22(row.projectPath) && resolve21(row.projectPath) === row.projectPath && row.projectPath.length <= AGENT_POLICY_LIMITS.pathCharacters) {} else
+          throw new Error("Reviewed Claude discovery has an unsupported active cache registration scope");
+        activeRoots.add(row.installPath);
+      }
+    }
+  }
+  if (activeRoots.size === 0)
+    return;
+  const registrySource = review.sources.find((source) => source.path === registryPath && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && (source.hashMode === undefined || source.hashMode === "bytes"));
+  if (!registrySource)
+    throw new Error("Reviewed Claude discovery must bind installed registrations for active cache plugins");
+  const reviewedFile = (path, manifest = false) => review.sources.some((source) => source.path === path && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && (source.hashMode === undefined || source.hashMode === "bytes" || manifest && source.hashMode === "claude-plugin-manifest-v1"));
+  const requireSource = (path, description, manifest = false) => {
+    if (!reviewedFile(path, manifest))
+      throw new Error(`Reviewed active Claude cache plugin ${description} is not bound`);
+  };
+  for (const root2 of activeRoots) {
+    safe4(root2);
+    const rootStat = lstatSync25(root2, { throwIfNoEntry: false });
+    if (!rootStat?.isDirectory() || realpathSync11(root2) !== root2)
+      throw new Error("Reviewed Claude active cache plugin root is missing or unsafe");
+    const manifestPath = join37(root2, ".claude-plugin/plugin.json");
+    const manifestStat = lstatSync25(manifestPath, { throwIfNoEntry: false });
+    let manifest;
+    if (manifestStat) {
+      if (!manifestStat.isFile())
+        throw new Error("Reviewed active Claude cache plugin manifest is unsupported");
+      requireSource(manifestPath, "manifest", true);
+      const raw = read2(manifestPath);
+      if (raw === null)
+        throw new Error("Reviewed Claude active cache plugin manifest is missing");
+      manifest = JSON.parse(raw);
+      if (!manifest || typeof manifest !== "object" || Array.isArray(manifest))
+        throw new Error("Reviewed Claude active cache plugin manifest is invalid");
+    } else if (!review.sources.some((source) => source.path === manifestPath && source.hashMode === "path-bytes" && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined)) {
+      throw new Error("Reviewed Claude active cache plugin manifest absence requires a path-bytes witness");
+    }
+    const roots = new Set([join37(root2, "skills")]);
+    if (lstatSync25(join37(root2, "SKILL.md"), { throwIfNoEntry: false })?.isFile())
+      roots.add(root2);
+    const declared = manifest?.skills === undefined ? ["./skills"] : typeof manifest.skills === "string" ? [manifest.skills] : manifest.skills;
+    if (!Array.isArray(declared) || declared.some((path) => typeof path !== "string"))
+      throw new Error("Reviewed Claude active cache plugin has unsupported skill paths");
+    for (const value of declared) {
+      const path = resolve21(root2, value);
+      if (path !== root2 && !path.startsWith(root2 + sep8))
+        throw new Error("Reviewed Claude active cache plugin skill path escapes its root");
+      roots.add(path.endsWith(`${sep8}SKILL.md`) ? dirname20(path) : path);
+    }
+    for (const skillRoot of roots)
+      if (!review.roots.includes(skillRoot))
+        throw new Error("Reviewed Claude active cache plugin skill root is not covered");
+    const hooksPath = join37(root2, "hooks/hooks.json");
+    const hooksStat = lstatSync25(hooksPath, { throwIfNoEntry: false });
+    if (hooksStat) {
+      if (!hooksStat.isFile())
+        throw new Error("Reviewed Claude plugin hook manifest is unsupported");
+      requireSource(hooksPath, "hook manifest");
+    }
+    if (typeof manifest?.hooks === "string")
+      requireSource(resolve21(root2, manifest.hooks), "manifest-declared hook source");
+  }
+}
 function projectNativeDiscoveryFields(text3, format, fields2, path) {
   const object6 = format === "yaml" ? parseHermesConfig(text3) : parseConfig(text3, path, format === "toml");
   if (!object6 || typeof object6 !== "object" || Array.isArray(object6))
@@ -59937,6 +60028,8 @@ function resolveAgentDiscovery(options) {
           throw new Error("Reviewed Claude plugin manifest requires separately reviewed exact hook file sources");
       return { path: source.path, sha256: manifestSha256, hashMode: "claude-plugin-manifest-v1" };
     });
+    if (agent === "claude")
+      assertReviewedClaudeCacheClosures(home, config, review);
     const combined = [...reviewedSources, ...reviewedSourcesWithManifestProjection];
     const unique = combined.filter((source, index) => combined.findIndex((candidate2) => isDeepStrictEqual11(candidate2, source)) === index);
     return { ...supplied, roots: [...new Set([...roots, ...supplied.roots])].sort(), sources: unique, ...agent === "gemini" ? { builtinNames } : {} };

package/bin/mcp.js

@@ -20019,7 +20019,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.55",
+    version: "0.10.56",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -50788,6 +50788,97 @@ function read(path, changes) {
     throw new Error(`Unsupported or oversized native discovery input: ${path}`);
   return readFileSync15(path, "utf8");
 }
+function assertReviewedClaudeCacheClosures(home, config2, review) {
+  const enabledIds = Object.entries(config2.enabledPlugins ?? {}).filter(([, enabled]) => enabled === true).map(([id]) => id);
+  if (enabledIds.length === 0)
+    return;
+  const registryPath = join26(home, ".claude/plugins/installed_plugins.json");
+  const cacheRoot = join26(home, ".claude/plugins/cache");
+  const registryText = read(registryPath);
+  if (registryText === null)
+    return;
+  const registry2 = parseConfig(registryText, registryPath);
+  if (registry2.version !== 2 || !registry2.plugins || typeof registry2.plugins !== "object" || Array.isArray(registry2.plugins))
+    throw new Error("Reviewed Claude installed plugin registrations are invalid");
+  const cachePath = (path) => typeof path === "string" && isAbsolute15(path) && resolve17(path) === path && (path === cacheRoot || path.startsWith(cacheRoot + sep6));
+  const activeRoots = new Set;
+  for (const id of enabledIds) {
+    const rows = registry2.plugins[id];
+    if (rows === undefined)
+      continue;
+    if (!Array.isArray(rows))
+      throw new Error("Reviewed Claude enabled plugin registrations must be an array");
+    for (const row of rows) {
+      if (!row || typeof row !== "object" || Array.isArray(row) || typeof row.installPath !== "string") {
+        throw new Error("Reviewed Claude enabled plugin registration requires an object with an installPath string");
+      }
+      if (typeof row.installPath === "string" && (row.installPath === cacheRoot || row.installPath.startsWith(cacheRoot + sep6))) {
+        if (!cachePath(row.installPath) || row.installPath.length > AGENT_POLICY_LIMITS.pathCharacters || row.version !== undefined && (typeof row.version !== "string" || basename9(row.installPath) !== row.version)) {
+          throw new Error("Reviewed Claude discovery has a malformed active cache registration");
+        }
+        if (row.scope === "user" && (row.projectPath === undefined || row.projectPath === null)) {} else if (row.scope === "project" && typeof row.projectPath === "string" && isAbsolute15(row.projectPath) && resolve17(row.projectPath) === row.projectPath && row.projectPath.length <= AGENT_POLICY_LIMITS.pathCharacters) {} else
+          throw new Error("Reviewed Claude discovery has an unsupported active cache registration scope");
+        activeRoots.add(row.installPath);
+      }
+    }
+  }
+  if (activeRoots.size === 0)
+    return;
+  const registrySource = review.sources.find((source) => source.path === registryPath && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && (source.hashMode === undefined || source.hashMode === "bytes"));
+  if (!registrySource)
+    throw new Error("Reviewed Claude discovery must bind installed registrations for active cache plugins");
+  const reviewedFile = (path, manifest = false) => review.sources.some((source) => source.path === path && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && (source.hashMode === undefined || source.hashMode === "bytes" || manifest && source.hashMode === "claude-plugin-manifest-v1"));
+  const requireSource = (path, description, manifest = false) => {
+    if (!reviewedFile(path, manifest))
+      throw new Error(`Reviewed active Claude cache plugin ${description} is not bound`);
+  };
+  for (const root of activeRoots) {
+    safe4(root);
+    const rootStat = lstatSync18(root, { throwIfNoEntry: false });
+    if (!rootStat?.isDirectory() || realpathSync5(root) !== root)
+      throw new Error("Reviewed Claude active cache plugin root is missing or unsafe");
+    const manifestPath = join26(root, ".claude-plugin/plugin.json");
+    const manifestStat = lstatSync18(manifestPath, { throwIfNoEntry: false });
+    let manifest;
+    if (manifestStat) {
+      if (!manifestStat.isFile())
+        throw new Error("Reviewed active Claude cache plugin manifest is unsupported");
+      requireSource(manifestPath, "manifest", true);
+      const raw = read(manifestPath);
+      if (raw === null)
+        throw new Error("Reviewed Claude active cache plugin manifest is missing");
+      manifest = JSON.parse(raw);
+      if (!manifest || typeof manifest !== "object" || Array.isArray(manifest))
+        throw new Error("Reviewed Claude active cache plugin manifest is invalid");
+    } else if (!review.sources.some((source) => source.path === manifestPath && source.hashMode === "path-bytes" && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined)) {
+      throw new Error("Reviewed Claude active cache plugin manifest absence requires a path-bytes witness");
+    }
+    const roots = new Set([join26(root, "skills")]);
+    if (lstatSync18(join26(root, "SKILL.md"), { throwIfNoEntry: false })?.isFile())
+      roots.add(root);
+    const declared = manifest?.skills === undefined ? ["./skills"] : typeof manifest.skills === "string" ? [manifest.skills] : manifest.skills;
+    if (!Array.isArray(declared) || declared.some((path) => typeof path !== "string"))
+      throw new Error("Reviewed Claude active cache plugin has unsupported skill paths");
+    for (const value of declared) {
+      const path = resolve17(root, value);
+      if (path !== root && !path.startsWith(root + sep6))
+        throw new Error("Reviewed Claude active cache plugin skill path escapes its root");
+      roots.add(path.endsWith(`${sep6}SKILL.md`) ? dirname16(path) : path);
+    }
+    for (const skillRoot of roots)
+      if (!review.roots.includes(skillRoot))
+        throw new Error("Reviewed Claude active cache plugin skill root is not covered");
+    const hooksPath = join26(root, "hooks/hooks.json");
+    const hooksStat = lstatSync18(hooksPath, { throwIfNoEntry: false });
+    if (hooksStat) {
+      if (!hooksStat.isFile())
+        throw new Error("Reviewed Claude plugin hook manifest is unsupported");
+      requireSource(hooksPath, "hook manifest");
+    }
+    if (typeof manifest?.hooks === "string")
+      requireSource(resolve17(root, manifest.hooks), "manifest-declared hook source");
+  }
+}
 function projectNativeDiscoveryFields(text2, format, fields2, path) {
   const object7 = format === "yaml" ? parseHermesConfig(text2) : parseConfig(text2, path, format === "toml");
   if (!object7 || typeof object7 !== "object" || Array.isArray(object7))
@@ -51254,6 +51345,8 @@ function resolveAgentDiscovery(options) {
           throw new Error("Reviewed Claude plugin manifest requires separately reviewed exact hook file sources");
       return { path: source.path, sha256: manifestSha256, hashMode: "claude-plugin-manifest-v1" };
     });
+    if (agent === "claude")
+      assertReviewedClaudeCacheClosures(home, config2, review);
     const combined = [...reviewedSources, ...reviewedSourcesWithManifestProjection];
     const unique = combined.filter((source, index) => combined.findIndex((candidate) => isDeepStrictEqual4(candidate, source)) === index);
     return { ...supplied, roots: [...new Set([...roots, ...supplied.roots])].sort(), sources: unique, ...agent === "gemini" ? { builtinNames } : {} };

package/bin/migrate.js

@@ -25,7 +25,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.55",
+  version: "0.10.56",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/server.js

@@ -24140,7 +24140,7 @@ restoreLaunchCwd();
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.55",
+  version: "0.10.56",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/worker.js

@@ -24143,7 +24143,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.55",
+  version: "0.10.56",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/index.js

@@ -11833,7 +11833,7 @@ function replaceSkillSession(expected, replacement, plan, options = {}, beforeCo
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.55",
+  version: "0.10.56",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -20693,6 +20693,97 @@ function read2(path, changes) {
     throw new Error(`Unsupported or oversized native discovery input: ${path}`);
   return readFileSync20(path, "utf8");
 }
+function assertReviewedClaudeCacheClosures(home, config, review) {
+  const enabledIds = Object.entries(config.enabledPlugins ?? {}).filter(([, enabled]) => enabled === true).map(([id]) => id);
+  if (enabledIds.length === 0)
+    return;
+  const registryPath = join32(home, ".claude/plugins/installed_plugins.json");
+  const cacheRoot = join32(home, ".claude/plugins/cache");
+  const registryText = read2(registryPath);
+  if (registryText === null)
+    return;
+  const registry = parseConfig(registryText, registryPath);
+  if (registry.version !== 2 || !registry.plugins || typeof registry.plugins !== "object" || Array.isArray(registry.plugins))
+    throw new Error("Reviewed Claude installed plugin registrations are invalid");
+  const cachePath = (path) => typeof path === "string" && isAbsolute21(path) && resolve20(path) === path && (path === cacheRoot || path.startsWith(cacheRoot + sep8));
+  const activeRoots = new Set;
+  for (const id of enabledIds) {
+    const rows = registry.plugins[id];
+    if (rows === undefined)
+      continue;
+    if (!Array.isArray(rows))
+      throw new Error("Reviewed Claude enabled plugin registrations must be an array");
+    for (const row of rows) {
+      if (!row || typeof row !== "object" || Array.isArray(row) || typeof row.installPath !== "string") {
+        throw new Error("Reviewed Claude enabled plugin registration requires an object with an installPath string");
+      }
+      if (typeof row.installPath === "string" && (row.installPath === cacheRoot || row.installPath.startsWith(cacheRoot + sep8))) {
+        if (!cachePath(row.installPath) || row.installPath.length > AGENT_POLICY_LIMITS.pathCharacters || row.version !== undefined && (typeof row.version !== "string" || basename11(row.installPath) !== row.version)) {
+          throw new Error("Reviewed Claude discovery has a malformed active cache registration");
+        }
+        if (row.scope === "user" && (row.projectPath === undefined || row.projectPath === null)) {} else if (row.scope === "project" && typeof row.projectPath === "string" && isAbsolute21(row.projectPath) && resolve20(row.projectPath) === row.projectPath && row.projectPath.length <= AGENT_POLICY_LIMITS.pathCharacters) {} else
+          throw new Error("Reviewed Claude discovery has an unsupported active cache registration scope");
+        activeRoots.add(row.installPath);
+      }
+    }
+  }
+  if (activeRoots.size === 0)
+    return;
+  const registrySource = review.sources.find((source) => source.path === registryPath && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && (source.hashMode === undefined || source.hashMode === "bytes"));
+  if (!registrySource)
+    throw new Error("Reviewed Claude discovery must bind installed registrations for active cache plugins");
+  const reviewedFile = (path, manifest = false) => review.sources.some((source) => source.path === path && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && (source.hashMode === undefined || source.hashMode === "bytes" || manifest && source.hashMode === "claude-plugin-manifest-v1"));
+  const requireSource = (path, description, manifest = false) => {
+    if (!reviewedFile(path, manifest))
+      throw new Error(`Reviewed active Claude cache plugin ${description} is not bound`);
+  };
+  for (const root2 of activeRoots) {
+    safe4(root2);
+    const rootStat = lstatSync25(root2, { throwIfNoEntry: false });
+    if (!rootStat?.isDirectory() || realpathSync11(root2) !== root2)
+      throw new Error("Reviewed Claude active cache plugin root is missing or unsafe");
+    const manifestPath = join32(root2, ".claude-plugin/plugin.json");
+    const manifestStat = lstatSync25(manifestPath, { throwIfNoEntry: false });
+    let manifest;
+    if (manifestStat) {
+      if (!manifestStat.isFile())
+        throw new Error("Reviewed active Claude cache plugin manifest is unsupported");
+      requireSource(manifestPath, "manifest", true);
+      const raw = read2(manifestPath);
+      if (raw === null)
+        throw new Error("Reviewed Claude active cache plugin manifest is missing");
+      manifest = JSON.parse(raw);
+      if (!manifest || typeof manifest !== "object" || Array.isArray(manifest))
+        throw new Error("Reviewed Claude active cache plugin manifest is invalid");
+    } else if (!review.sources.some((source) => source.path === manifestPath && source.hashMode === "path-bytes" && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined)) {
+      throw new Error("Reviewed Claude active cache plugin manifest absence requires a path-bytes witness");
+    }
+    const roots = new Set([join32(root2, "skills")]);
+    if (lstatSync25(join32(root2, "SKILL.md"), { throwIfNoEntry: false })?.isFile())
+      roots.add(root2);
+    const declared = manifest?.skills === undefined ? ["./skills"] : typeof manifest.skills === "string" ? [manifest.skills] : manifest.skills;
+    if (!Array.isArray(declared) || declared.some((path) => typeof path !== "string"))
+      throw new Error("Reviewed Claude active cache plugin has unsupported skill paths");
+    for (const value of declared) {
+      const path = resolve20(root2, value);
+      if (path !== root2 && !path.startsWith(root2 + sep8))
+        throw new Error("Reviewed Claude active cache plugin skill path escapes its root");
+      roots.add(path.endsWith(`${sep8}SKILL.md`) ? dirname20(path) : path);
+    }
+    for (const skillRoot of roots)
+      if (!review.roots.includes(skillRoot))
+        throw new Error("Reviewed Claude active cache plugin skill root is not covered");
+    const hooksPath = join32(root2, "hooks/hooks.json");
+    const hooksStat = lstatSync25(hooksPath, { throwIfNoEntry: false });
+    if (hooksStat) {
+      if (!hooksStat.isFile())
+        throw new Error("Reviewed Claude plugin hook manifest is unsupported");
+      requireSource(hooksPath, "hook manifest");
+    }
+    if (typeof manifest?.hooks === "string")
+      requireSource(resolve20(root2, manifest.hooks), "manifest-declared hook source");
+  }
+}
 function projectNativeDiscoveryFields(text2, format, fields2, path) {
   const object6 = format === "yaml" ? parseHermesConfig(text2) : parseConfig(text2, path, format === "toml");
   if (!object6 || typeof object6 !== "object" || Array.isArray(object6))
@@ -21281,6 +21372,8 @@ function resolveAgentDiscovery(options) {
           throw new Error("Reviewed Claude plugin manifest requires separately reviewed exact hook file sources");
       return { path: source.path, sha256: manifestSha256, hashMode: "claude-plugin-manifest-v1" };
     });
+    if (agent === "claude")
+      assertReviewedClaudeCacheClosures(home, config, review);
     const combined = [...reviewedSources, ...reviewedSourcesWithManifestProjection];
     const unique = combined.filter((source, index) => combined.findIndex((candidate2) => isDeepStrictEqual7(candidate2, source)) === index);
     return { ...supplied, roots: [...new Set([...roots, ...supplied.roots])].sort(), sources: unique, ...agent === "gemini" ? { builtinNames } : {} };

package/dist/sdk/index.js

@@ -32373,7 +32373,7 @@ var init_event_sink = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.55",
+  version: "0.10.56",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -43533,6 +43533,97 @@ function read2(path, changes) {
     throw new Error(`Unsupported or oversized native discovery input: ${path}`);
   return readFileSync15(path, "utf8");
 }
+function assertReviewedClaudeCacheClosures(home, config, review) {
+  const enabledIds = Object.entries(config.enabledPlugins ?? {}).filter(([, enabled]) => enabled === true).map(([id2]) => id2);
+  if (enabledIds.length === 0)
+    return;
+  const registryPath = join26(home, ".claude/plugins/installed_plugins.json");
+  const cacheRoot = join26(home, ".claude/plugins/cache");
+  const registryText = read2(registryPath);
+  if (registryText === null)
+    return;
+  const registry = parseConfig(registryText, registryPath);
+  if (registry.version !== 2 || !registry.plugins || typeof registry.plugins !== "object" || Array.isArray(registry.plugins))
+    throw new Error("Reviewed Claude installed plugin registrations are invalid");
+  const cachePath = (path) => typeof path === "string" && isAbsolute20(path) && resolve19(path) === path && (path === cacheRoot || path.startsWith(cacheRoot + sep6));
+  const activeRoots = new Set;
+  for (const id2 of enabledIds) {
+    const rows = registry.plugins[id2];
+    if (rows === undefined)
+      continue;
+    if (!Array.isArray(rows))
+      throw new Error("Reviewed Claude enabled plugin registrations must be an array");
+    for (const row of rows) {
+      if (!row || typeof row !== "object" || Array.isArray(row) || typeof row.installPath !== "string") {
+        throw new Error("Reviewed Claude enabled plugin registration requires an object with an installPath string");
+      }
+      if (typeof row.installPath === "string" && (row.installPath === cacheRoot || row.installPath.startsWith(cacheRoot + sep6))) {
+        if (!cachePath(row.installPath) || row.installPath.length > AGENT_POLICY_LIMITS.pathCharacters || row.version !== undefined && (typeof row.version !== "string" || basename9(row.installPath) !== row.version)) {
+          throw new Error("Reviewed Claude discovery has a malformed active cache registration");
+        }
+        if (row.scope === "user" && (row.projectPath === undefined || row.projectPath === null)) {} else if (row.scope === "project" && typeof row.projectPath === "string" && isAbsolute20(row.projectPath) && resolve19(row.projectPath) === row.projectPath && row.projectPath.length <= AGENT_POLICY_LIMITS.pathCharacters) {} else
+          throw new Error("Reviewed Claude discovery has an unsupported active cache registration scope");
+        activeRoots.add(row.installPath);
+      }
+    }
+  }
+  if (activeRoots.size === 0)
+    return;
+  const registrySource = review.sources.find((source) => source.path === registryPath && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && (source.hashMode === undefined || source.hashMode === "bytes"));
+  if (!registrySource)
+    throw new Error("Reviewed Claude discovery must bind installed registrations for active cache plugins");
+  const reviewedFile = (path, manifest = false) => review.sources.some((source) => source.path === path && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && (source.hashMode === undefined || source.hashMode === "bytes" || manifest && source.hashMode === "claude-plugin-manifest-v1"));
+  const requireSource = (path, description, manifest = false) => {
+    if (!reviewedFile(path, manifest))
+      throw new Error(`Reviewed active Claude cache plugin ${description} is not bound`);
+  };
+  for (const root2 of activeRoots) {
+    safe4(root2);
+    const rootStat = lstatSync21(root2, { throwIfNoEntry: false });
+    if (!rootStat?.isDirectory() || realpathSync9(root2) !== root2)
+      throw new Error("Reviewed Claude active cache plugin root is missing or unsafe");
+    const manifestPath = join26(root2, ".claude-plugin/plugin.json");
+    const manifestStat = lstatSync21(manifestPath, { throwIfNoEntry: false });
+    let manifest;
+    if (manifestStat) {
+      if (!manifestStat.isFile())
+        throw new Error("Reviewed active Claude cache plugin manifest is unsupported");
+      requireSource(manifestPath, "manifest", true);
+      const raw = read2(manifestPath);
+      if (raw === null)
+        throw new Error("Reviewed Claude active cache plugin manifest is missing");
+      manifest = JSON.parse(raw);
+      if (!manifest || typeof manifest !== "object" || Array.isArray(manifest))
+        throw new Error("Reviewed Claude active cache plugin manifest is invalid");
+    } else if (!review.sources.some((source) => source.path === manifestPath && source.hashMode === "path-bytes" && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined)) {
+      throw new Error("Reviewed Claude active cache plugin manifest absence requires a path-bytes witness");
+    }
+    const roots = new Set([join26(root2, "skills")]);
+    if (lstatSync21(join26(root2, "SKILL.md"), { throwIfNoEntry: false })?.isFile())
+      roots.add(root2);
+    const declared = manifest?.skills === undefined ? ["./skills"] : typeof manifest.skills === "string" ? [manifest.skills] : manifest.skills;
+    if (!Array.isArray(declared) || declared.some((path) => typeof path !== "string"))
+      throw new Error("Reviewed Claude active cache plugin has unsupported skill paths");
+    for (const value of declared) {
+      const path = resolve19(root2, value);
+      if (path !== root2 && !path.startsWith(root2 + sep6))
+        throw new Error("Reviewed Claude active cache plugin skill path escapes its root");
+      roots.add(path.endsWith(`${sep6}SKILL.md`) ? dirname17(path) : path);
+    }
+    for (const skillRoot of roots)
+      if (!review.roots.includes(skillRoot))
+        throw new Error("Reviewed Claude active cache plugin skill root is not covered");
+    const hooksPath = join26(root2, "hooks/hooks.json");
+    const hooksStat = lstatSync21(hooksPath, { throwIfNoEntry: false });
+    if (hooksStat) {
+      if (!hooksStat.isFile())
+        throw new Error("Reviewed Claude plugin hook manifest is unsupported");
+      requireSource(hooksPath, "hook manifest");
+    }
+    if (typeof manifest?.hooks === "string")
+      requireSource(resolve19(root2, manifest.hooks), "manifest-declared hook source");
+  }
+}
 function projectNativeDiscoveryFields(text2, format, fields2, path) {
   const object6 = format === "yaml" ? parseHermesConfig(text2) : parseConfig(text2, path, format === "toml");
   if (!object6 || typeof object6 !== "object" || Array.isArray(object6))
@@ -44121,6 +44212,8 @@ function resolveAgentDiscovery(options) {
           throw new Error("Reviewed Claude plugin manifest requires separately reviewed exact hook file sources");
       return { path: source.path, sha256: manifestSha256, hashMode: "claude-plugin-manifest-v1" };
     });
+    if (agent === "claude")
+      assertReviewedClaudeCacheClosures(home, config, review);
     const combined = [...reviewedSources, ...reviewedSourcesWithManifestProjection];
     const unique = combined.filter((source, index) => combined.findIndex((candidate2) => isDeepStrictEqual6(candidate2, source)) === index);
     return { ...supplied, roots: [...new Set([...roots, ...supplied.roots])].sort(), sources: unique, ...agent === "gemini" ? { builtinNames } : {} };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/skills",
-  "version": "0.10.55",
+  "version": "0.10.56",
   "description": "Skills library for AI coding agents",
   "type": "module",
   "bin": {