@hasna/skills 0.10.59 → 0.10.61

package/dist/lib/agent-adapters.d.ts

@@ -27,8 +27,8 @@ export declare const AGENT_ADAPTERS: {
         readonly promptContext: true;
     };
     readonly sumi: {
-        readonly root: ".hasna-internal/sumi/config/skills";
-        readonly config: ".hasna-internal/sumi/config/sumi.json";
+        readonly root: null;
+        readonly config: null;
         readonly events: readonly ["prompt", "context"];
         readonly promptContext: true;
     };

package/dist/lib/agent-install-selection.d.ts

@@ -0,0 +1,10 @@
+import { type IntegrationAgent } from "./agent-adapters.js";
+/** Presence selects adapters; it does not resolve native paths or approve
+ * their configuration. The existing planner still verifies every selected
+ * provider. Never execute a native CLI to detect it, particularly Sumi. */
+export declare function detectedIntegrationAgents(options?: {
+    home?: string;
+    dataDir?: string;
+    env?: NodeJS.ProcessEnv;
+    cwd?: string;
+}): IntegrationAgent[];

package/dist/lib/agent-sumi.d.ts

@@ -1,6 +1,31 @@
-export declare function sumiConfigDirectory(home: string, env?: NodeJS.ProcessEnv): string;
-export declare function sumiBridgeRoot(home: string): string;
-export declare function sumiConfigPath(home: string): string;
+declare const SUMI_PATH_KEYS: readonly ["data", "cache", "config", "state"];
+export type SumiPathPlan = {
+    schemaVersion: 1;
+    kind: "sumi-paths";
+    home: string;
+    cwd: string;
+    roots: Record<typeof SUMI_PATH_KEYS[number], string>;
+    legacyRoots: Record<typeof SUMI_PATH_KEYS[number], string | null>;
+    configFiles: {
+        canonical: string;
+        legacy: string | null;
+    };
+    skillRoots: {
+        canonical: string;
+        legacy: string | null;
+    };
+};
+export declare class SumiPathResolverError extends Error {
+    readonly code: string;
+    constructor(code: string);
+}
+/** Resolve native paths through Sumi's dedicated, read-only command. Never
+ * probe the general Sumi CLI: older versions may adopt their home on startup. */
+export declare function sumiPathPlan(home: string, cwd?: string, env?: NodeJS.ProcessEnv): SumiPathPlan;
+export declare function sumiConfigDirectory(home: string, env?: NodeJS.ProcessEnv, cwd?: string): string;
+export declare function sumiSkillRoots(home: string, cwd?: string, env?: NodeJS.ProcessEnv): string[];
+export declare function sumiBridgeRoot(home: string, cwd?: string, env?: NodeJS.ProcessEnv): string;
+export declare function sumiConfigPath(home: string, cwd?: string, env?: NodeJS.ProcessEnv): string;
 /** Native V2 plugin, not an OpenCode chat.message factory. Instructions enter
  * transient request context; prompts and the plugin carry no payload fallback. */
 export declare function renderSumiPlugin(command: string, profile: string): string;
@@ -16,3 +41,4 @@ export declare const SUMI_SKILL_PERMISSIONS: readonly [{
     readonly resource: "skills-cli";
     readonly effect: "allow";
 }];
+export {};

package/dist/lib/claude-plugin-manifest-witness.d.ts

@@ -5,5 +5,11 @@ export declare const CLAUDE_PLUGIN_MANIFEST_LIMITS: Readonly<{
     stringCharacters: 16384;
 }>;
 export declare function hashClaudePluginManifest(text: string): string;
+/** Capture a canonical plugin.json file without following a link or exposing its contents. */
+export declare function captureClaudePluginManifestFile(path: string): {
+    path: string;
+    hashMode: "claude-plugin-manifest-v1";
+    sha256: string;
+};
 /** Project only the exact raw manifest bytes that the explicit review attested. */
 export declare function projectReviewedClaudePluginManifest(text: string, reviewedSha256: string): string;

package/dist/lib/claude-prospective-review.d.ts

@@ -1,5 +1,7 @@
 import { type ReviewedDiscoveryInputs } from "./agent-discovery.js";
 export declare const CLAUDE_PROSPECTIVE_REVIEW_SCHEMA: "skills.claude-plugin-prospective-review/v1";
+/** Hash the exact serialized Claude discovery binding used by review requests. */
+export declare function hashClaudeDiscoveryBinding(binding: unknown): string;
 export interface ClaudeProspectiveReviewRequest {
     schema: typeof CLAUDE_PROSPECTIVE_REVIEW_SCHEMA;
     scope: {
@@ -136,6 +138,17 @@ export interface ClaudeProspectiveReviewReceipt {
 /** Fingerprint every file byte and directory name under the frozen candidate.
  * Symlinks and special files refuse; the digest binds the complete closure. */
 export declare function captureClaudeProspectiveCandidateClosure(root: string): string;
+/** Read-only capture used by the installed Claude installer bridge. */
+export declare function captureClaudeInstallerCandidate(root: string, policyPath: string): {
+    closureSha256: string;
+    discoverySha256: string;
+    manifests: Array<{
+        plugin: string;
+        path: string;
+        hashMode: "claude-plugin-manifest-v1";
+        sha256: string;
+    }>;
+};
 /** Validate a frozen candidate review against the current filesystem. This is
  * intentionally a planner only: its receipt is not native-install authority. */
 export declare function reviewClaudeProspectiveCandidate(request: ClaudeProspectiveReviewRequest, requestFileSha256: string): ClaudeProspectiveReviewReceipt;

package/dist/lib/codex-hook-trust-identity.d.ts

@@ -25,3 +25,25 @@ export declare function bindSkillsCli(command: string, reviewed?: ReviewedSkills
     };
     recheck(): void;
 };
+/** A bounded, read-only producer identity for commands that must call their configured stable CLI. */
+export declare function captureSkillsCliProducerIdentity(command: string): {
+    schema: "skills.cli-producer-identity/v1";
+    configuredCommandPath: string;
+    physicalLauncher: {
+        path: string;
+        sha256: string;
+    };
+    runtimeEntry: {
+        path: string;
+        sha256: string;
+    };
+    runtime: {
+        path: string;
+        sha256: string;
+    };
+    package: {
+        name: "@hasna/skills";
+        version: string;
+        manifestSha256: string;
+    };
+};

package/dist/lib/kernel-lock-assets.d.ts

@@ -0,0 +1,2 @@
+/** Bundle the owning code without changing its literal ../native asset lookup or runtime guards. */
+export declare function stageKernelLockAssets(modulePath: string, packageRoot: string, expectedVersion: string): string;