@hasna/skills 0.10.58 → 0.10.60

package/bin/mcp.js

@@ -20019,7 +20019,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.58",
+    version: "0.10.60",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {

package/bin/migrate.js

@@ -25,7 +25,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.58",
+  version: "0.10.60",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/server.js

@@ -24140,7 +24140,7 @@ restoreLaunchCwd();
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.58",
+  version: "0.10.60",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/worker.js

@@ -24143,7 +24143,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.58",
+  version: "0.10.60",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/cli/commands/claude-installer-capture.d.ts

@@ -0,0 +1,28 @@
+/** Execute one fixed, read-only Claude installer witness operation through this installed CLI. */
+export declare function captureClaudeInstallerRequest(requestPath: string): {
+    schema: string;
+    producer: {
+        schema: "skills.cli-producer-identity/v1";
+        configuredCommandPath: string;
+        physicalLauncher: {
+            path: string;
+            sha256: string;
+        };
+        runtimeEntry: {
+            path: string;
+            sha256: string;
+        };
+        runtime: {
+            path: string;
+            sha256: string;
+        };
+        package: {
+            name: "@hasna/skills";
+            version: string;
+            manifestSha256: string;
+        };
+    };
+    operation: unknown;
+    result: unknown;
+};
+export declare function safeClaudeInstallerCaptureError(error: unknown): string;

package/dist/index.js

@@ -11834,7 +11834,7 @@ function replaceSkillSession(expected, replacement, plan, options = {}, beforeCo
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.58",
+  version: "0.10.60",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/lib/claude-plugin-manifest-witness.d.ts

@@ -5,5 +5,11 @@ export declare const CLAUDE_PLUGIN_MANIFEST_LIMITS: Readonly<{
     stringCharacters: 16384;
 }>;
 export declare function hashClaudePluginManifest(text: string): string;
+/** Capture a canonical plugin.json file without following a link or exposing its contents. */
+export declare function captureClaudePluginManifestFile(path: string): {
+    path: string;
+    hashMode: "claude-plugin-manifest-v1";
+    sha256: string;
+};
 /** Project only the exact raw manifest bytes that the explicit review attested. */
 export declare function projectReviewedClaudePluginManifest(text: string, reviewedSha256: string): string;

package/dist/lib/claude-prospective-review.d.ts

@@ -1,5 +1,7 @@
 import { type ReviewedDiscoveryInputs } from "./agent-discovery.js";
 export declare const CLAUDE_PROSPECTIVE_REVIEW_SCHEMA: "skills.claude-plugin-prospective-review/v1";
+/** Hash the exact serialized Claude discovery binding used by review requests. */
+export declare function hashClaudeDiscoveryBinding(binding: unknown): string;
 export interface ClaudeProspectiveReviewRequest {
     schema: typeof CLAUDE_PROSPECTIVE_REVIEW_SCHEMA;
     scope: {
@@ -40,6 +42,7 @@ export interface ClaudeProspectiveReviewRequest {
             sha256: string;
         };
         functionHooksEnv?: "1";
+        settingsMarketplaceSource?: "directory";
     };
     preimages: {
         settings: {
@@ -135,6 +138,17 @@ export interface ClaudeProspectiveReviewReceipt {
 /** Fingerprint every file byte and directory name under the frozen candidate.
  * Symlinks and special files refuse; the digest binds the complete closure. */
 export declare function captureClaudeProspectiveCandidateClosure(root: string): string;
+/** Read-only capture used by the installed Claude installer bridge. */
+export declare function captureClaudeInstallerCandidate(root: string, policyPath: string): {
+    closureSha256: string;
+    discoverySha256: string;
+    manifests: Array<{
+        plugin: string;
+        path: string;
+        hashMode: "claude-plugin-manifest-v1";
+        sha256: string;
+    }>;
+};
 /** Validate a frozen candidate review against the current filesystem. This is
  * intentionally a planner only: its receipt is not native-install authority. */
 export declare function reviewClaudeProspectiveCandidate(request: ClaudeProspectiveReviewRequest, requestFileSha256: string): ClaudeProspectiveReviewReceipt;

package/dist/lib/codex-hook-trust-identity.d.ts

@@ -25,3 +25,25 @@ export declare function bindSkillsCli(command: string, reviewed?: ReviewedSkills
     };
     recheck(): void;
 };
+/** A bounded, read-only producer identity for commands that must call their configured stable CLI. */
+export declare function captureSkillsCliProducerIdentity(command: string): {
+    schema: "skills.cli-producer-identity/v1";
+    configuredCommandPath: string;
+    physicalLauncher: {
+        path: string;
+        sha256: string;
+    };
+    runtimeEntry: {
+        path: string;
+        sha256: string;
+    };
+    runtime: {
+        path: string;
+        sha256: string;
+    };
+    package: {
+        name: "@hasna/skills";
+        version: string;
+        manifestSha256: string;
+    };
+};

package/dist/sdk/index.js

@@ -32373,7 +32373,7 @@ var init_event_sink = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.58",
+  version: "0.10.60",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/docs/plugin-admission.md

@@ -194,7 +194,32 @@ closure. Nontrivial `metadata.pluginRoot` values and native catalog or selected
 plugin dependency declarations refuse because this validator does not resolve
 or review unselected external plugins.
 The request may declare `functionHooksEnv: "1"`; without that declaration the
-environment document is preserved unchanged. The validator shallow-merges
+environment document is preserved unchanged. For a measured Claude 2.1.293
+user-scoped install, `candidate.settingsMarketplaceSource: "directory"`
+explicitly declares the native settings registration. Skills derives
+`extraKnownMarketplaces[candidate.marketplace].source` from the exact frozen
+candidate root. The measured operation accepts existing directory sources
+only. Foreign entries may also carry a boolean `autoUpdate`; other metadata
+refuses before writing because the native parser drops unknown fields.
+Selected-entry metadata, including `autoUpdate`, also refuses because this
+Claude release replaces that entire entry. The complete supplied settings
+document must match the derived projection, preserving all foreign entries.
+The same declared operation preflights every authoritative
+`known_marketplaces.json` row: exact `source`, `installLocation`, `lastUpdated`
+and optional boolean `autoUpdate`. Sources are either `{source: "directory",
+path: <normalized absolute path>}` or `{source: "github", repo: "owner/repository"}`.
+Other source keys and row metadata refuse before the native parser can drop them.
+The complete `installed_plugins.json` document must contain only `version` and
+`plugins`. Every existing row, including untouched plugins and other scopes,
+must have `scope`, `installPath`, `version`, `installedAt` and `lastUpdated`,
+with a project path for project/local scope and an optional 40-character
+lowercase hexadecimal `gitCommitSha`. Unsupported metadata or malformed fields
+refuse before installation; supported foreign rows remain exact in the required
+after-document. Existing selected-row restrictions still apply.
+Omission preserves the settings field unchanged; other values, versions and project scope
+refuse. The installer must still verify the actual native executable and
+poststate; a supplied version string does not establish consumer identity.
+The validator shallow-merges
 each declared options patch into the selected plugin's existing `options`;
 the patch must explicitly bind `enabled: true`, and the validator enforces that
 value after merging. This preserves all other selected options and unrelated
@@ -232,6 +257,32 @@ Installed consumers can use the public `captureClaudeProspectiveCandidateClosure
 and `hashClaudePluginManifest` exports to prepare the exact digests without
 copying the package's hashing algorithms.
 
+### Claude installer witness CLI
+
+The installed Skills command exposes a fixed read-only bridge for installer
+evidence:
+
+```text
+skills hook capture-claude-installer --request /absolute/request.json --json
+```
+
+The UTF-8 request is a bounded JSON object with schema
+`skills.claude-installer-capture/v1`, the exact configured `commandPath`, one
+fixed `operation` (`settings`, `marketplace-registry`, `managed-plugin-registry`,
+`path-bytes`, `discovery-directories`, `plugin-manifest`, or `candidate`), and
+only that operation's documented inputs. The result uses
+`skills.claude-installer-capture-result/v1` and contains a Skills producer
+receipt plus the selected existing witness result. Candidate manifests include
+their plugin name, canonical path, `hashMode: "claude-plugin-manifest-v1"`, and
+SHA-256; the closure and discovery digests use the existing Skills algorithms.
+The command verifies the configured command resolves to this installed
+`@hasna/skills` producer and rechecks producer identity around capture.
+
+This command only captures and validates source witnesses. It does not invoke
+Claude, install plugins, mutate settings or policy, authorize a candidate, or
+establish installer atomicity or crash recovery. Input refusals identify the
+fixed field or operation and its accepted form without echoing request contents.
+
 ## Reviewed plugin-hook attestation scope
 
 A reviewed discovery input carries `pluginHooks: "reviewed-no-skill-injection"`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/skills",
-  "version": "0.10.58",
+  "version": "0.10.60",
   "description": "Skills library for AI coding agents",
   "type": "module",
   "bin": {