@hasna/skills 0.10.59 → 0.10.60

package/bin/mcp.js

@@ -20019,7 +20019,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.59",
+    version: "0.10.60",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {

package/bin/migrate.js

@@ -25,7 +25,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.59",
+  version: "0.10.60",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/server.js

@@ -24140,7 +24140,7 @@ restoreLaunchCwd();
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.59",
+  version: "0.10.60",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/worker.js

@@ -24143,7 +24143,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.59",
+  version: "0.10.60",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/cli/commands/claude-installer-capture.d.ts

@@ -0,0 +1,28 @@
+/** Execute one fixed, read-only Claude installer witness operation through this installed CLI. */
+export declare function captureClaudeInstallerRequest(requestPath: string): {
+    schema: string;
+    producer: {
+        schema: "skills.cli-producer-identity/v1";
+        configuredCommandPath: string;
+        physicalLauncher: {
+            path: string;
+            sha256: string;
+        };
+        runtimeEntry: {
+            path: string;
+            sha256: string;
+        };
+        runtime: {
+            path: string;
+            sha256: string;
+        };
+        package: {
+            name: "@hasna/skills";
+            version: string;
+            manifestSha256: string;
+        };
+    };
+    operation: unknown;
+    result: unknown;
+};
+export declare function safeClaudeInstallerCaptureError(error: unknown): string;

package/dist/index.js

@@ -11834,7 +11834,7 @@ function replaceSkillSession(expected, replacement, plan, options = {}, beforeCo
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.59",
+  version: "0.10.60",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/lib/claude-plugin-manifest-witness.d.ts

@@ -5,5 +5,11 @@ export declare const CLAUDE_PLUGIN_MANIFEST_LIMITS: Readonly<{
     stringCharacters: 16384;
 }>;
 export declare function hashClaudePluginManifest(text: string): string;
+/** Capture a canonical plugin.json file without following a link or exposing its contents. */
+export declare function captureClaudePluginManifestFile(path: string): {
+    path: string;
+    hashMode: "claude-plugin-manifest-v1";
+    sha256: string;
+};
 /** Project only the exact raw manifest bytes that the explicit review attested. */
 export declare function projectReviewedClaudePluginManifest(text: string, reviewedSha256: string): string;

package/dist/lib/claude-prospective-review.d.ts

@@ -1,5 +1,7 @@
 import { type ReviewedDiscoveryInputs } from "./agent-discovery.js";
 export declare const CLAUDE_PROSPECTIVE_REVIEW_SCHEMA: "skills.claude-plugin-prospective-review/v1";
+/** Hash the exact serialized Claude discovery binding used by review requests. */
+export declare function hashClaudeDiscoveryBinding(binding: unknown): string;
 export interface ClaudeProspectiveReviewRequest {
     schema: typeof CLAUDE_PROSPECTIVE_REVIEW_SCHEMA;
     scope: {
@@ -136,6 +138,17 @@ export interface ClaudeProspectiveReviewReceipt {
 /** Fingerprint every file byte and directory name under the frozen candidate.
  * Symlinks and special files refuse; the digest binds the complete closure. */
 export declare function captureClaudeProspectiveCandidateClosure(root: string): string;
+/** Read-only capture used by the installed Claude installer bridge. */
+export declare function captureClaudeInstallerCandidate(root: string, policyPath: string): {
+    closureSha256: string;
+    discoverySha256: string;
+    manifests: Array<{
+        plugin: string;
+        path: string;
+        hashMode: "claude-plugin-manifest-v1";
+        sha256: string;
+    }>;
+};
 /** Validate a frozen candidate review against the current filesystem. This is
  * intentionally a planner only: its receipt is not native-install authority. */
 export declare function reviewClaudeProspectiveCandidate(request: ClaudeProspectiveReviewRequest, requestFileSha256: string): ClaudeProspectiveReviewReceipt;

package/dist/lib/codex-hook-trust-identity.d.ts

@@ -25,3 +25,25 @@ export declare function bindSkillsCli(command: string, reviewed?: ReviewedSkills
     };
     recheck(): void;
 };
+/** A bounded, read-only producer identity for commands that must call their configured stable CLI. */
+export declare function captureSkillsCliProducerIdentity(command: string): {
+    schema: "skills.cli-producer-identity/v1";
+    configuredCommandPath: string;
+    physicalLauncher: {
+        path: string;
+        sha256: string;
+    };
+    runtimeEntry: {
+        path: string;
+        sha256: string;
+    };
+    runtime: {
+        path: string;
+        sha256: string;
+    };
+    package: {
+        name: "@hasna/skills";
+        version: string;
+        manifestSha256: string;
+    };
+};

package/dist/sdk/index.js

@@ -32373,7 +32373,7 @@ var init_event_sink = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.59",
+  version: "0.10.60",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/docs/plugin-admission.md

@@ -257,6 +257,32 @@ Installed consumers can use the public `captureClaudeProspectiveCandidateClosure
 and `hashClaudePluginManifest` exports to prepare the exact digests without
 copying the package's hashing algorithms.
 
+### Claude installer witness CLI
+
+The installed Skills command exposes a fixed read-only bridge for installer
+evidence:
+
+```text
+skills hook capture-claude-installer --request /absolute/request.json --json
+```
+
+The UTF-8 request is a bounded JSON object with schema
+`skills.claude-installer-capture/v1`, the exact configured `commandPath`, one
+fixed `operation` (`settings`, `marketplace-registry`, `managed-plugin-registry`,
+`path-bytes`, `discovery-directories`, `plugin-manifest`, or `candidate`), and
+only that operation's documented inputs. The result uses
+`skills.claude-installer-capture-result/v1` and contains a Skills producer
+receipt plus the selected existing witness result. Candidate manifests include
+their plugin name, canonical path, `hashMode: "claude-plugin-manifest-v1"`, and
+SHA-256; the closure and discovery digests use the existing Skills algorithms.
+The command verifies the configured command resolves to this installed
+`@hasna/skills` producer and rechecks producer identity around capture.
+
+This command only captures and validates source witnesses. It does not invoke
+Claude, install plugins, mutate settings or policy, authorize a candidate, or
+establish installer atomicity or crash recovery. Input refusals identify the
+fixed field or operation and its accepted form without echoing request contents.
+
 ## Reviewed plugin-hook attestation scope
 
 A reviewed discovery input carries `pluginHooks: "reviewed-no-skill-injection"`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/skills",
-  "version": "0.10.59",
+  "version": "0.10.60",
   "description": "Skills library for AI coding agents",
   "type": "module",
   "bin": {