@hasna/skills 0.10.64 → 0.10.65

package/README.md

@@ -334,6 +334,12 @@ Sumi uses its native V2 plugin API, independently of OpenCode. Its managed
 `plugins/skills-cli.js` plugin validates prompt admission and adds selected
 instructions to transient request context. Real native session IDs and parent
 IDs bind exact inherited pins; native agent definitions are not Hasna identities.
+Prompt matching uses the native prompt-admission event. Request context restores
+verified loaded Skills and never treats model history, attachments or compaction
+checkpoints as a new owner prompt. The complete native model context is unchanged;
+the hook's input limits and native/integrity refusals remain strict. Adapter
+refusals retain only fixed reason codes, never child diagnostic prose. Both older
+managed plugin forms remain recognized for a reviewed hook-install upgrade.
 Native payload tool calls and prompt attachments are refused except for the
 `skills-cli` bridge. The supported configuration resolver honors `SUMI_CONFIG_DIR`,
 `XDG_CONFIG_HOME` and `SUMI_HOME` without performing native home adoption.

package/bin/index.js

@@ -36888,7 +36888,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.64",
+    version: "0.10.65",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -54750,6 +54750,130 @@ var init_agent_codex = __esm(() => {
   CODEX_SKILL_CONFIG_SECTIONS = /^\[\[skills\.config\]\][^\n]*(?:\n(?!\s*\[)[^\n]*)*/gm;
 });
 
+// src/lib/hook-diagnostics.ts
+function hookChildError(stdout, stage) {
+  let code;
+  if (stdout.length <= 16 * 1024) {
+    try {
+      code = JSON.parse(stdout)?.error?.code;
+    } catch {}
+  }
+  return new HookDiagnosticError(typeof code === "string" && CONTEXT_ERROR_CODES.has(code) ? code : "SKILLS_CONTEXT_FAILED", stage);
+}
+function hookFailureReason(error, profileId) {
+  const owned = error instanceof HookDiagnosticError;
+  const code = owned && (CONTEXT_ERROR_CODES.has(error.code) || ["SKILLS_HOOK_TIMEOUT", "SKILLS_HOOK_INVALID_RESPONSE"].includes(error.code)) ? error.code : "SKILLS_HOOK_FAILED";
+  const profile = typeof profileId === "string" && /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(profileId) && !profileId.includes("..") ? profileId : undefined;
+  const identity6 = [profile ? `profile=${profile}` : undefined, owned ? `stage=${error.stage}` : undefined].filter(Boolean).join(", ");
+  const prefix = `Skills context is unavailable [${code}]${identity6 ? ` (${identity6})` : ""}.`;
+  if (code === "SKILLS_STORAGE_FULL") {
+    return `${prefix} The filesystem is full or its quota is exhausted. Free space through your approved recoverable cleanup process, then retry the same session. Do not delete session receipts or change credentials to bypass this failure.`;
+  }
+  if (code === "PROFILE_LOCK_MISMATCH") {
+    return `${prefix} This session or project is pinned to a different profile. Inspect the session with skills sessions show <session-id> --json; review skills sessions reconcile for an intentional session change, or explicit project sync for a project change. Sync alone does not change that pin.`;
+  }
+  if (code === "SESSION_RECONCILIATION_REQUIRED") {
+    return `${prefix} A loaded skill changed or was removed. Inspect this session with skills sessions show <session-id> --json, then review skills sessions reconcile for an intentional change. Sync alone does not change this pin. A refusal is re-checked with the authority within five minutes, or sooner after the receipt or the synced profile revision changes.`;
+  }
+  if (code === "SESSION_RENEWAL_TIMEOUT") {
+    return `${prefix} Renewing this session's expired authorization did not finish within the hook's renewal window; no request was refused. Sync and diagnosis do not change this window. The existing pin is unchanged and the next prompt retries the renewal. If it keeps recurring, inspect the session with skills sessions show <session-id> --json and review skills sessions reconcile.`;
+  }
+  if (code.startsWith("SESSION_")) {
+    return `${prefix} Inspect the session with skills sessions show <session-id> --json and review its parent or concurrent writer before retrying. Do not remove or rewrite its receipt to bypass this refusal.`;
+  }
+  if (["PROFILE_IDENTITY_MISMATCH", "BUNDLE_DIGEST_MISMATCH", "BUNDLE_IDENTITY_MISMATCH", "INVALID_RECEIPT", "INVALID_CACHE_FILE", "UNSAFE_CACHE_PATH"].includes(code)) {
+    return `${prefix} Verify the selected authority and receipt integrity before repairing the profile; do not bypass verification or substitute another cache.`;
+  }
+  const selected = profile ?? "<id>";
+  return `${prefix} Run skills sync --selection-profile ${selected} --json, then diagnose with skills context --stdin --json --cached --selection-profile ${selected} using the same hook session and working-directory fields. Do not include credentials in diagnostic input.`;
+}
+function isOptionalHookContextFailure(error) {
+  return error instanceof HookDiagnosticError && OPTIONAL_CONTEXT_FAILURES.has(error.code);
+}
+function hookUnavailableContext(error, profileId) {
+  return `${hookFailureReason(error, profileId)} No Skills instructions were delivered by this hook. Ordinary work may continue. Do not perform actions that depend on unavailable Skills instructions, including previously loaded instructions. Explicit skills load, context and run still require verification. Do not substitute native, unmanaged or stale payloads.`;
+}
+var CONTEXT_ERROR_CODES, HOOK_REFUSAL_REASON_CODES, HookDiagnosticError, OPTIONAL_CONTEXT_FAILURES;
+var init_hook_diagnostics = __esm(() => {
+  CONTEXT_ERROR_CODES = new Set([
+    "SKILLS_API_CREDENTIAL_UNAVAILABLE",
+    "SKILLS_API_UNAVAILABLE",
+    "SKILLS_API_UNAUTHORIZED",
+    "SKILLS_API_FORBIDDEN",
+    "SKILLS_API_RESOURCE_UNAVAILABLE",
+    "SESSION_WRITE_BUSY",
+    "SKILLS_CONTEXT_FAILED",
+    "SKILLS_STORAGE_FULL",
+    "PROFILE_LOCK_MISMATCH",
+    "PROFILE_IDENTITY_MISMATCH",
+    "PROFILE_APPLIED_REPORT_FAILED",
+    "CACHED_AUTHORITY_REQUIRED",
+    "CACHED_PROFILE_EXPIRED",
+    "CACHED_PROFILE_MISSING",
+    "CACHED_BUNDLE_MISSING",
+    "INVALID_CONTEXT_INPUT",
+    "CONTEXT_INPUT_TOO_LARGE",
+    "INVALID_CONTEXT_BUDGET",
+    "INVALID_SELECTION",
+    "INVALID_SELECTION_ALIASES",
+    "INVALID_RECEIPT",
+    "INVALID_CACHE_FILE",
+    "UNSAFE_CACHE_PATH",
+    "RECEIPT_TOO_LARGE",
+    "BUNDLE_DIGEST_MISMATCH",
+    "BUNDLE_IDENTITY_MISMATCH",
+    "BUNDLE_UNAVAILABLE",
+    "BUNDLE_TOO_LARGE",
+    "SKILL_NOT_SELECTED",
+    "INVALID_SESSION",
+    "SESSION_PARENT_NOT_FOUND",
+    "SESSION_PARENT_MISMATCH",
+    "SESSION_NOT_FOUND",
+    "SESSION_GENERATION_CHANGED",
+    "SESSION_GENERATION_EXHAUSTED",
+    "SESSION_PARENT_CHANGED",
+    "SESSION_RECEIPT_CHANGED",
+    "SESSION_RECONCILIATION_REQUIRED",
+    "SESSION_RENEWAL_TIMEOUT",
+    "SESSION_CONTEXT_CONFLICT",
+    "SESSION_RECONCILIATION_INCOMPLETE",
+    "SESSION_WRITE_LOCKED",
+    "SESSION_WRITE_LOCK_CHANGED",
+    "SESSION_LOCK_RECOVERY_INCOMPLETE"
+  ]);
+  HOOK_REFUSAL_REASON_CODES = Object.freeze([
+    ...CONTEXT_ERROR_CODES,
+    "SKILLS_HOOK_FAILED",
+    "SKILLS_HOOK_TIMEOUT",
+    "SKILLS_HOOK_INVALID_RESPONSE"
+  ]);
+  HookDiagnosticError = class HookDiagnosticError extends Error {
+    code;
+    stage;
+    constructor(code, stage) {
+      super("Skills hook operation failed");
+      this.code = code;
+      this.stage = stage;
+    }
+  };
+  OPTIONAL_CONTEXT_FAILURES = new Set([
+    "SKILLS_API_CREDENTIAL_UNAVAILABLE",
+    "SKILLS_API_UNAVAILABLE",
+    "SKILLS_API_UNAUTHORIZED",
+    "SKILLS_API_FORBIDDEN",
+    "SKILLS_API_RESOURCE_UNAVAILABLE",
+    "CACHED_PROFILE_EXPIRED",
+    "CACHED_PROFILE_MISSING",
+    "CACHED_BUNDLE_MISSING",
+    "SESSION_RECONCILIATION_REQUIRED",
+    "SESSION_RENEWAL_TIMEOUT",
+    "SESSION_WRITE_BUSY",
+    "SESSION_PARENT_CHANGED",
+    "SESSION_CONTEXT_CONFLICT",
+    "SKILLS_HOOK_TIMEOUT"
+  ]);
+});
+
 // src/lib/agent-sumi.ts
 import { spawnSync as spawnSync3 } from "child_process";
 import { accessSync as accessSync2, constants as constants12, existsSync as existsSync12, lstatSync as lstatSync19, realpathSync as realpathSync9, statSync as statSync9 } from "fs";
@@ -54883,24 +55007,33 @@ function sumiConfigPath(home, cwd2 = process.cwd(), env3 = process.env) {
   return join28(sumiConfigDirectory(home, env3, cwd2), "sumi.json");
 }
 function renderSumiPlugin(command, profile) {
-  return renderSumiPluginVersion(command, profile, false);
+  return renderSumiPluginVersion(command, profile, 3);
 }
 function isManagedSumiPlugin(text2, command, profile) {
-  return text2 === renderSumiPlugin(command, profile) || text2 === renderSumiPluginVersion(command, profile, true);
+  return text2 === renderSumiPlugin(command, profile) || text2 === renderSumiPluginVersion(command, profile, 2) || text2 === renderSumiPluginVersion(command, profile, 1);
 }
-function renderSumiPluginVersion(command, profile, legacy) {
+function renderSumiPluginVersion(command, profile, version) {
+  const legacy = version === 1;
   const failure = (message) => legacy ? `new Error(${JSON.stringify(message)})` : "refusal()";
   return `// Managed by @hasna/skills. Regenerate with skills hook install --agent sumi.
 import { spawn } from "node:child_process";
 const command = ${JSON.stringify(command)};
 const profile = ${JSON.stringify(profile)};
-${legacy ? "" : `function refusal() {
-  const error = new Error("Skills verification blocked this request. Review the Sumi Skills hook configuration, then retry.");
+${legacy ? "" : `function refusal(${version === 3 ? "reasonCode" : ""}) {
+  const error = new Error("Skills verification blocked this request. Review the Sumi Skills hook configuration, then retry."${version === 3 ? ' + (reasonCode ? " [" + reasonCode + "]" : "")' : ""});
   error.name = "SkillsHookRefusal";
-  error.skillsHookRefusal = { version: 1, code: "SKILLS_HOOK_REFUSED" };
+  error.skillsHookRefusal = { version: 1, code: "SKILLS_HOOK_REFUSED"${version === 3 ? ", ...(reasonCode ? { reasonCode } : {})" : ""} };
   return error;
 }
-`}function context(input) {
+`}${version === 3 ? `const reasonCodes = new Set(${JSON.stringify(HOOK_REFUSAL_REASON_CODES)});
+function refusedResult(result) {
+  const reason = result.reason ?? result.stopReason ?? result.systemMessage;
+  if (typeof reason !== "string" || reason.length > 16384) return refusal();
+  if (reason.startsWith("NATIVE_SKILL_DRIFT:")) return refusal("NATIVE_SKILL_DRIFT");
+  const code = /^Skills context is unavailable \\[([A-Z_]+)\\]/.exec(reason)?.[1];
+  return refusal(reasonCodes.has(code) ? code : undefined);
+}
+` : ""}function context(input) {
   return new Promise((resolve, reject) => {
     const child = spawn(command, ["hook", "user-prompt", "--agent", "sumi", "--selection-profile", profile], { cwd: input.cwd, stdio: ["pipe", "pipe", "pipe"] });
     const chunks = []; let bytes = 0, failure;
@@ -54915,12 +55048,12 @@ ${legacy ? "" : `function refusal() {
       try {
         const result = JSON.parse(Buffer.concat(chunks).toString("utf8"));
         if (!result || typeof result !== "object" || Array.isArray(result)) throw ${failure("Invalid Skills hook response")};
-        if (result.decision === "block" || result.continue === false) throw ${failure("Skills prompt hook refused")};
+        if (result.decision === "block" || result.continue === false) throw ${version === 3 ? "refusedResult(result)" : failure("Skills prompt hook refused")};
         if (Object.keys(result).length && (!result.hookSpecificOutput || result.hookSpecificOutput.hookEventName !== input.hook_event_name)) throw ${failure("Invalid Skills hook response")};
         const text = result.hookSpecificOutput?.additionalContext ?? "";
         if (typeof text !== "string") throw ${failure("Invalid Skills prompt context")};
         resolve(text);
-      } catch (error) { reject(${legacy ? "error" : "refusal()"}); }
+      } catch (error) { reject(${legacy ? "error" : version === 3 ? 'error instanceof Error && error.name === "SkillsHookRefusal" ? error : refusal()' : "refusal()"}); }
     });
     child.stdin.end(JSON.stringify(input));
   });
@@ -54953,9 +55086,13 @@ export default {
       sessions.add(event.sessionID);
     }));
     registrations.push(await ctx.session.hook("context", async event => {
-      const last = event.messages.findLast(message => message.role === "user");
+${version === 3 ? `      // Model messages also contain checkpoints, attachments and synthetic
+      // user-role history, with no owner-prompt provenance. Prompt admission
+      // already matched and persisted Skills; restore that verified state only.
+      const prompt = "";
+` : `      const last = event.messages.findLast(message => message.role === "user");
       const prompt = (last?.content ?? []).filter(part => part.type === "text").map(part => part.text).join("\\n");
-      // Recheck on every primary request, including resumed and synthetic
+`}      // Recheck on every primary request, including resumed and synthetic
       // sessions. The CLI owns optional failures versus explicit refusals.
       const text = await context(await input(event.sessionID, prompt, !sessions.has(event.sessionID)));
       if (text) event.system.push({ type: "text", text });
@@ -54968,6 +55105,7 @@ export default {
 }
 var SUMI_PATH_SELECTORS, SUMI_PATH_KEYS, SUMI_PATH_OUTPUT_LIMIT, SumiPathResolverError, SUMI_SKILL_PERMISSIONS;
 var init_agent_sumi = __esm(() => {
+  init_hook_diagnostics();
   SUMI_PATH_SELECTORS = ["SUMI_HOME", "SUMI_CONFIG_DIR", "XDG_DATA_HOME", "XDG_CACHE_HOME", "XDG_CONFIG_HOME", "XDG_STATE_HOME"];
   SUMI_PATH_KEYS = ["data", "cache", "config", "state"];
   SUMI_PATH_OUTPUT_LIMIT = 128 * 1024;
@@ -118034,124 +118172,6 @@ var init_codex_native_trust = __esm(() => {
   HEX_DIGEST2 = /^[0-9a-f]{64}$/;
 });
 
-// src/lib/hook-diagnostics.ts
-function hookChildError(stdout, stage) {
-  let code2;
-  if (stdout.length <= 16 * 1024) {
-    try {
-      code2 = JSON.parse(stdout)?.error?.code;
-    } catch {}
-  }
-  return new HookDiagnosticError(typeof code2 === "string" && CONTEXT_ERROR_CODES.has(code2) ? code2 : "SKILLS_CONTEXT_FAILED", stage);
-}
-function hookFailureReason(error61, profileId) {
-  const owned = error61 instanceof HookDiagnosticError;
-  const code2 = owned && (CONTEXT_ERROR_CODES.has(error61.code) || ["SKILLS_HOOK_TIMEOUT", "SKILLS_HOOK_INVALID_RESPONSE"].includes(error61.code)) ? error61.code : "SKILLS_HOOK_FAILED";
-  const profile = typeof profileId === "string" && /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(profileId) && !profileId.includes("..") ? profileId : undefined;
-  const identity6 = [profile ? `profile=${profile}` : undefined, owned ? `stage=${error61.stage}` : undefined].filter(Boolean).join(", ");
-  const prefix = `Skills context is unavailable [${code2}]${identity6 ? ` (${identity6})` : ""}.`;
-  if (code2 === "SKILLS_STORAGE_FULL") {
-    return `${prefix} The filesystem is full or its quota is exhausted. Free space through your approved recoverable cleanup process, then retry the same session. Do not delete session receipts or change credentials to bypass this failure.`;
-  }
-  if (code2 === "PROFILE_LOCK_MISMATCH") {
-    return `${prefix} This session or project is pinned to a different profile. Inspect the session with skills sessions show <session-id> --json; review skills sessions reconcile for an intentional session change, or explicit project sync for a project change. Sync alone does not change that pin.`;
-  }
-  if (code2 === "SESSION_RECONCILIATION_REQUIRED") {
-    return `${prefix} A loaded skill changed or was removed. Inspect this session with skills sessions show <session-id> --json, then review skills sessions reconcile for an intentional change. Sync alone does not change this pin. A refusal is re-checked with the authority within five minutes, or sooner after the receipt or the synced profile revision changes.`;
-  }
-  if (code2 === "SESSION_RENEWAL_TIMEOUT") {
-    return `${prefix} Renewing this session's expired authorization did not finish within the hook's renewal window; no request was refused. Sync and diagnosis do not change this window. The existing pin is unchanged and the next prompt retries the renewal. If it keeps recurring, inspect the session with skills sessions show <session-id> --json and review skills sessions reconcile.`;
-  }
-  if (code2.startsWith("SESSION_")) {
-    return `${prefix} Inspect the session with skills sessions show <session-id> --json and review its parent or concurrent writer before retrying. Do not remove or rewrite its receipt to bypass this refusal.`;
-  }
-  if (["PROFILE_IDENTITY_MISMATCH", "BUNDLE_DIGEST_MISMATCH", "BUNDLE_IDENTITY_MISMATCH", "INVALID_RECEIPT", "INVALID_CACHE_FILE", "UNSAFE_CACHE_PATH"].includes(code2)) {
-    return `${prefix} Verify the selected authority and receipt integrity before repairing the profile; do not bypass verification or substitute another cache.`;
-  }
-  const selected = profile ?? "<id>";
-  return `${prefix} Run skills sync --selection-profile ${selected} --json, then diagnose with skills context --stdin --json --cached --selection-profile ${selected} using the same hook session and working-directory fields. Do not include credentials in diagnostic input.`;
-}
-function isOptionalHookContextFailure(error61) {
-  return error61 instanceof HookDiagnosticError && OPTIONAL_CONTEXT_FAILURES.has(error61.code);
-}
-function hookUnavailableContext(error61, profileId) {
-  return `${hookFailureReason(error61, profileId)} No Skills instructions were delivered by this hook. Ordinary work may continue. Do not perform actions that depend on unavailable Skills instructions, including previously loaded instructions. Explicit skills load, context and run still require verification. Do not substitute native, unmanaged or stale payloads.`;
-}
-var CONTEXT_ERROR_CODES, HookDiagnosticError, OPTIONAL_CONTEXT_FAILURES;
-var init_hook_diagnostics = __esm(() => {
-  CONTEXT_ERROR_CODES = new Set([
-    "SKILLS_API_CREDENTIAL_UNAVAILABLE",
-    "SKILLS_API_UNAVAILABLE",
-    "SKILLS_API_UNAUTHORIZED",
-    "SKILLS_API_FORBIDDEN",
-    "SKILLS_API_RESOURCE_UNAVAILABLE",
-    "SESSION_WRITE_BUSY",
-    "SKILLS_CONTEXT_FAILED",
-    "SKILLS_STORAGE_FULL",
-    "PROFILE_LOCK_MISMATCH",
-    "PROFILE_IDENTITY_MISMATCH",
-    "PROFILE_APPLIED_REPORT_FAILED",
-    "CACHED_AUTHORITY_REQUIRED",
-    "CACHED_PROFILE_EXPIRED",
-    "CACHED_PROFILE_MISSING",
-    "CACHED_BUNDLE_MISSING",
-    "INVALID_CONTEXT_INPUT",
-    "CONTEXT_INPUT_TOO_LARGE",
-    "INVALID_CONTEXT_BUDGET",
-    "INVALID_SELECTION",
-    "INVALID_SELECTION_ALIASES",
-    "INVALID_RECEIPT",
-    "INVALID_CACHE_FILE",
-    "UNSAFE_CACHE_PATH",
-    "RECEIPT_TOO_LARGE",
-    "BUNDLE_DIGEST_MISMATCH",
-    "BUNDLE_IDENTITY_MISMATCH",
-    "BUNDLE_UNAVAILABLE",
-    "BUNDLE_TOO_LARGE",
-    "SKILL_NOT_SELECTED",
-    "INVALID_SESSION",
-    "SESSION_PARENT_NOT_FOUND",
-    "SESSION_PARENT_MISMATCH",
-    "SESSION_NOT_FOUND",
-    "SESSION_GENERATION_CHANGED",
-    "SESSION_GENERATION_EXHAUSTED",
-    "SESSION_PARENT_CHANGED",
-    "SESSION_RECEIPT_CHANGED",
-    "SESSION_RECONCILIATION_REQUIRED",
-    "SESSION_RENEWAL_TIMEOUT",
-    "SESSION_CONTEXT_CONFLICT",
-    "SESSION_RECONCILIATION_INCOMPLETE",
-    "SESSION_WRITE_LOCKED",
-    "SESSION_WRITE_LOCK_CHANGED",
-    "SESSION_LOCK_RECOVERY_INCOMPLETE"
-  ]);
-  HookDiagnosticError = class HookDiagnosticError extends Error {
-    code;
-    stage;
-    constructor(code2, stage) {
-      super("Skills hook operation failed");
-      this.code = code2;
-      this.stage = stage;
-    }
-  };
-  OPTIONAL_CONTEXT_FAILURES = new Set([
-    "SKILLS_API_CREDENTIAL_UNAVAILABLE",
-    "SKILLS_API_UNAVAILABLE",
-    "SKILLS_API_UNAUTHORIZED",
-    "SKILLS_API_FORBIDDEN",
-    "SKILLS_API_RESOURCE_UNAVAILABLE",
-    "CACHED_PROFILE_EXPIRED",
-    "CACHED_PROFILE_MISSING",
-    "CACHED_BUNDLE_MISSING",
-    "SESSION_RECONCILIATION_REQUIRED",
-    "SESSION_RENEWAL_TIMEOUT",
-    "SESSION_WRITE_BUSY",
-    "SESSION_PARENT_CHANGED",
-    "SESSION_CONTEXT_CONFLICT",
-    "SKILLS_HOOK_TIMEOUT"
-  ]);
-});
-
 // src/lib/claude-prospective-review.ts
 import { createHash as createHash43 } from "crypto";
 import { lstatSync as lstatSync41, readFileSync as readFileSync45, readdirSync as readdirSync25, realpathSync as realpathSync22 } from "fs";

package/bin/mcp.js

@@ -23,7 +23,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.64",
+    version: "0.10.65",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -34337,6 +34337,79 @@ var init_agent_bridge = __esm(() => {
 // src/lib/agent-codex.ts
 var init_agent_codex = () => {};
 
+// src/lib/hook-diagnostics.ts
+var CONTEXT_ERROR_CODES, HOOK_REFUSAL_REASON_CODES, OPTIONAL_CONTEXT_FAILURES;
+var init_hook_diagnostics = __esm(() => {
+  CONTEXT_ERROR_CODES = new Set([
+    "SKILLS_API_CREDENTIAL_UNAVAILABLE",
+    "SKILLS_API_UNAVAILABLE",
+    "SKILLS_API_UNAUTHORIZED",
+    "SKILLS_API_FORBIDDEN",
+    "SKILLS_API_RESOURCE_UNAVAILABLE",
+    "SESSION_WRITE_BUSY",
+    "SKILLS_CONTEXT_FAILED",
+    "SKILLS_STORAGE_FULL",
+    "PROFILE_LOCK_MISMATCH",
+    "PROFILE_IDENTITY_MISMATCH",
+    "PROFILE_APPLIED_REPORT_FAILED",
+    "CACHED_AUTHORITY_REQUIRED",
+    "CACHED_PROFILE_EXPIRED",
+    "CACHED_PROFILE_MISSING",
+    "CACHED_BUNDLE_MISSING",
+    "INVALID_CONTEXT_INPUT",
+    "CONTEXT_INPUT_TOO_LARGE",
+    "INVALID_CONTEXT_BUDGET",
+    "INVALID_SELECTION",
+    "INVALID_SELECTION_ALIASES",
+    "INVALID_RECEIPT",
+    "INVALID_CACHE_FILE",
+    "UNSAFE_CACHE_PATH",
+    "RECEIPT_TOO_LARGE",
+    "BUNDLE_DIGEST_MISMATCH",
+    "BUNDLE_IDENTITY_MISMATCH",
+    "BUNDLE_UNAVAILABLE",
+    "BUNDLE_TOO_LARGE",
+    "SKILL_NOT_SELECTED",
+    "INVALID_SESSION",
+    "SESSION_PARENT_NOT_FOUND",
+    "SESSION_PARENT_MISMATCH",
+    "SESSION_NOT_FOUND",
+    "SESSION_GENERATION_CHANGED",
+    "SESSION_GENERATION_EXHAUSTED",
+    "SESSION_PARENT_CHANGED",
+    "SESSION_RECEIPT_CHANGED",
+    "SESSION_RECONCILIATION_REQUIRED",
+    "SESSION_RENEWAL_TIMEOUT",
+    "SESSION_CONTEXT_CONFLICT",
+    "SESSION_RECONCILIATION_INCOMPLETE",
+    "SESSION_WRITE_LOCKED",
+    "SESSION_WRITE_LOCK_CHANGED",
+    "SESSION_LOCK_RECOVERY_INCOMPLETE"
+  ]);
+  HOOK_REFUSAL_REASON_CODES = Object.freeze([
+    ...CONTEXT_ERROR_CODES,
+    "SKILLS_HOOK_FAILED",
+    "SKILLS_HOOK_TIMEOUT",
+    "SKILLS_HOOK_INVALID_RESPONSE"
+  ]);
+  OPTIONAL_CONTEXT_FAILURES = new Set([
+    "SKILLS_API_CREDENTIAL_UNAVAILABLE",
+    "SKILLS_API_UNAVAILABLE",
+    "SKILLS_API_UNAUTHORIZED",
+    "SKILLS_API_FORBIDDEN",
+    "SKILLS_API_RESOURCE_UNAVAILABLE",
+    "CACHED_PROFILE_EXPIRED",
+    "CACHED_PROFILE_MISSING",
+    "CACHED_BUNDLE_MISSING",
+    "SESSION_RECONCILIATION_REQUIRED",
+    "SESSION_RENEWAL_TIMEOUT",
+    "SESSION_WRITE_BUSY",
+    "SESSION_PARENT_CHANGED",
+    "SESSION_CONTEXT_CONFLICT",
+    "SKILLS_HOOK_TIMEOUT"
+  ]);
+});
+
 // src/lib/agent-sumi.ts
 import { spawnSync as spawnSync4 } from "child_process";
 import { accessSync, constants as constants9, existsSync as existsSync8, lstatSync as lstatSync15, realpathSync as realpathSync7, statSync as statSync7 } from "fs";
@@ -34464,6 +34537,7 @@ function sumiConfigPath(home, cwd = process.cwd(), env = process.env) {
 }
 var SUMI_PATH_SELECTORS, SUMI_PATH_KEYS, SUMI_PATH_OUTPUT_LIMIT, SumiPathResolverError;
 var init_agent_sumi = __esm(() => {
+  init_hook_diagnostics();
   SUMI_PATH_SELECTORS = ["SUMI_HOME", "SUMI_CONFIG_DIR", "XDG_DATA_HOME", "XDG_CACHE_HOME", "XDG_CONFIG_HOME", "XDG_STATE_HOME"];
   SUMI_PATH_KEYS = ["data", "cache", "config", "state"];
   SUMI_PATH_OUTPUT_LIMIT = 128 * 1024;

package/bin/migrate.js

@@ -25,7 +25,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.64",
+  version: "0.10.65",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/server.js

@@ -24140,7 +24140,7 @@ restoreLaunchCwd();
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.64",
+  version: "0.10.65",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/worker.js

@@ -24143,7 +24143,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.64",
+  version: "0.10.65",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/index.js

@@ -11888,7 +11888,7 @@ function replaceSkillSession(expected, replacement, plan, options = {}, beforeCo
   });
 }
 // package.json
-var version = "0.10.64";
+var version = "0.10.65";
 var package_default = {
   name: "@hasna/skills",
   version,
@@ -17141,6 +17141,78 @@ function disableCodexBundledSkills(text2) {
 import { spawnSync as spawnSync4 } from "child_process";
 import { accessSync as accessSync2, constants as constants11, existsSync as existsSync8, lstatSync as lstatSync19, realpathSync as realpathSync10, statSync as statSync9 } from "fs";
 import { delimiter as delimiter2, isAbsolute as isAbsolute15, join as join25, resolve as resolve15 } from "path";
+
+// src/lib/hook-diagnostics.ts
+var CONTEXT_ERROR_CODES = new Set([
+  "SKILLS_API_CREDENTIAL_UNAVAILABLE",
+  "SKILLS_API_UNAVAILABLE",
+  "SKILLS_API_UNAUTHORIZED",
+  "SKILLS_API_FORBIDDEN",
+  "SKILLS_API_RESOURCE_UNAVAILABLE",
+  "SESSION_WRITE_BUSY",
+  "SKILLS_CONTEXT_FAILED",
+  "SKILLS_STORAGE_FULL",
+  "PROFILE_LOCK_MISMATCH",
+  "PROFILE_IDENTITY_MISMATCH",
+  "PROFILE_APPLIED_REPORT_FAILED",
+  "CACHED_AUTHORITY_REQUIRED",
+  "CACHED_PROFILE_EXPIRED",
+  "CACHED_PROFILE_MISSING",
+  "CACHED_BUNDLE_MISSING",
+  "INVALID_CONTEXT_INPUT",
+  "CONTEXT_INPUT_TOO_LARGE",
+  "INVALID_CONTEXT_BUDGET",
+  "INVALID_SELECTION",
+  "INVALID_SELECTION_ALIASES",
+  "INVALID_RECEIPT",
+  "INVALID_CACHE_FILE",
+  "UNSAFE_CACHE_PATH",
+  "RECEIPT_TOO_LARGE",
+  "BUNDLE_DIGEST_MISMATCH",
+  "BUNDLE_IDENTITY_MISMATCH",
+  "BUNDLE_UNAVAILABLE",
+  "BUNDLE_TOO_LARGE",
+  "SKILL_NOT_SELECTED",
+  "INVALID_SESSION",
+  "SESSION_PARENT_NOT_FOUND",
+  "SESSION_PARENT_MISMATCH",
+  "SESSION_NOT_FOUND",
+  "SESSION_GENERATION_CHANGED",
+  "SESSION_GENERATION_EXHAUSTED",
+  "SESSION_PARENT_CHANGED",
+  "SESSION_RECEIPT_CHANGED",
+  "SESSION_RECONCILIATION_REQUIRED",
+  "SESSION_RENEWAL_TIMEOUT",
+  "SESSION_CONTEXT_CONFLICT",
+  "SESSION_RECONCILIATION_INCOMPLETE",
+  "SESSION_WRITE_LOCKED",
+  "SESSION_WRITE_LOCK_CHANGED",
+  "SESSION_LOCK_RECOVERY_INCOMPLETE"
+]);
+var HOOK_REFUSAL_REASON_CODES = Object.freeze([
+  ...CONTEXT_ERROR_CODES,
+  "SKILLS_HOOK_FAILED",
+  "SKILLS_HOOK_TIMEOUT",
+  "SKILLS_HOOK_INVALID_RESPONSE"
+]);
+var OPTIONAL_CONTEXT_FAILURES = new Set([
+  "SKILLS_API_CREDENTIAL_UNAVAILABLE",
+  "SKILLS_API_UNAVAILABLE",
+  "SKILLS_API_UNAUTHORIZED",
+  "SKILLS_API_FORBIDDEN",
+  "SKILLS_API_RESOURCE_UNAVAILABLE",
+  "CACHED_PROFILE_EXPIRED",
+  "CACHED_PROFILE_MISSING",
+  "CACHED_BUNDLE_MISSING",
+  "SESSION_RECONCILIATION_REQUIRED",
+  "SESSION_RENEWAL_TIMEOUT",
+  "SESSION_WRITE_BUSY",
+  "SESSION_PARENT_CHANGED",
+  "SESSION_CONTEXT_CONFLICT",
+  "SKILLS_HOOK_TIMEOUT"
+]);
+
+// src/lib/agent-sumi.ts
 var SUMI_PATH_SELECTORS = ["SUMI_HOME", "SUMI_CONFIG_DIR", "XDG_DATA_HOME", "XDG_CACHE_HOME", "XDG_CONFIG_HOME", "XDG_STATE_HOME"];
 var SUMI_PATH_KEYS = ["data", "cache", "config", "state"];
 var SUMI_PATH_OUTPUT_LIMIT = 128 * 1024;
@@ -17282,24 +17354,33 @@ function sumiConfigPath(home, cwd = process.cwd(), env = process.env) {
   return join25(sumiConfigDirectory(home, env, cwd), "sumi.json");
 }
 function renderSumiPlugin(command, profile) {
-  return renderSumiPluginVersion(command, profile, false);
+  return renderSumiPluginVersion(command, profile, 3);
 }
 function isManagedSumiPlugin(text2, command, profile) {
-  return text2 === renderSumiPlugin(command, profile) || text2 === renderSumiPluginVersion(command, profile, true);
+  return text2 === renderSumiPlugin(command, profile) || text2 === renderSumiPluginVersion(command, profile, 2) || text2 === renderSumiPluginVersion(command, profile, 1);
 }
-function renderSumiPluginVersion(command, profile, legacy) {
+function renderSumiPluginVersion(command, profile, version2) {
+  const legacy = version2 === 1;
   const failure = (message) => legacy ? `new Error(${JSON.stringify(message)})` : "refusal()";
   return `// Managed by @hasna/skills. Regenerate with skills hook install --agent sumi.
 import { spawn } from "node:child_process";
 const command = ${JSON.stringify(command)};
 const profile = ${JSON.stringify(profile)};
-${legacy ? "" : `function refusal() {
-  const error = new Error("Skills verification blocked this request. Review the Sumi Skills hook configuration, then retry.");
+${legacy ? "" : `function refusal(${version2 === 3 ? "reasonCode" : ""}) {
+  const error = new Error("Skills verification blocked this request. Review the Sumi Skills hook configuration, then retry."${version2 === 3 ? ' + (reasonCode ? " [" + reasonCode + "]" : "")' : ""});
   error.name = "SkillsHookRefusal";
-  error.skillsHookRefusal = { version: 1, code: "SKILLS_HOOK_REFUSED" };
+  error.skillsHookRefusal = { version: 1, code: "SKILLS_HOOK_REFUSED"${version2 === 3 ? ", ...(reasonCode ? { reasonCode } : {})" : ""} };
   return error;
 }
-`}function context(input) {
+`}${version2 === 3 ? `const reasonCodes = new Set(${JSON.stringify(HOOK_REFUSAL_REASON_CODES)});
+function refusedResult(result) {
+  const reason = result.reason ?? result.stopReason ?? result.systemMessage;
+  if (typeof reason !== "string" || reason.length > 16384) return refusal();
+  if (reason.startsWith("NATIVE_SKILL_DRIFT:")) return refusal("NATIVE_SKILL_DRIFT");
+  const code = /^Skills context is unavailable \\[([A-Z_]+)\\]/.exec(reason)?.[1];
+  return refusal(reasonCodes.has(code) ? code : undefined);
+}
+` : ""}function context(input) {
   return new Promise((resolve, reject) => {
     const child = spawn(command, ["hook", "user-prompt", "--agent", "sumi", "--selection-profile", profile], { cwd: input.cwd, stdio: ["pipe", "pipe", "pipe"] });
     const chunks = []; let bytes = 0, failure;
@@ -17314,12 +17395,12 @@ ${legacy ? "" : `function refusal() {
       try {
         const result = JSON.parse(Buffer.concat(chunks).toString("utf8"));
         if (!result || typeof result !== "object" || Array.isArray(result)) throw ${failure("Invalid Skills hook response")};
-        if (result.decision === "block" || result.continue === false) throw ${failure("Skills prompt hook refused")};
+        if (result.decision === "block" || result.continue === false) throw ${version2 === 3 ? "refusedResult(result)" : failure("Skills prompt hook refused")};
         if (Object.keys(result).length && (!result.hookSpecificOutput || result.hookSpecificOutput.hookEventName !== input.hook_event_name)) throw ${failure("Invalid Skills hook response")};
         const text = result.hookSpecificOutput?.additionalContext ?? "";
         if (typeof text !== "string") throw ${failure("Invalid Skills prompt context")};
         resolve(text);
-      } catch (error) { reject(${legacy ? "error" : "refusal()"}); }
+      } catch (error) { reject(${legacy ? "error" : version2 === 3 ? 'error instanceof Error && error.name === "SkillsHookRefusal" ? error : refusal()' : "refusal()"}); }
     });
     child.stdin.end(JSON.stringify(input));
   });
@@ -17352,9 +17433,13 @@ export default {
       sessions.add(event.sessionID);
     }));
     registrations.push(await ctx.session.hook("context", async event => {
-      const last = event.messages.findLast(message => message.role === "user");
+${version2 === 3 ? `      // Model messages also contain checkpoints, attachments and synthetic
+      // user-role history, with no owner-prompt provenance. Prompt admission
+      // already matched and persisted Skills; restore that verified state only.
+      const prompt = "";
+` : `      const last = event.messages.findLast(message => message.role === "user");
       const prompt = (last?.content ?? []).filter(part => part.type === "text").map(part => part.text).join("\\n");
-      // Recheck on every primary request, including resumed and synthetic
+`}      // Recheck on every primary request, including resumed and synthetic
       // sessions. The CLI owns optional failures versus explicit refusals.
       const text = await context(await input(event.sessionID, prompt, !sessions.has(event.sessionID)));
       if (text) event.system.push({ type: "text", text });

package/dist/lib/hook-diagnostics.d.ts

@@ -1,3 +1,5 @@
+/** Fixed codes only; generated native adapters must never copy refusal prose. */
+export declare const HOOK_REFUSAL_REASON_CODES: readonly string[];
 export declare class HookDiagnosticError extends Error {
     readonly code: string;
     readonly stage: "context" | "sync";

package/dist/runtime-prerequisites.js

@@ -49,7 +49,7 @@ var __require = import.meta.require;
 // src/runtime-prerequisites.ts
 import { isAbsolute as isAbsolute5 } from "path";
 // package.json
-var version = "0.10.64";
+var version = "0.10.65";
 var package_default = {
   name: "@hasna/skills",
   version,
@@ -2864,6 +2864,78 @@ function detectedIntegrationAgents(options = {}) {
 import { spawnSync as spawnSync2 } from "child_process";
 import { accessSync, constants as constants4, existsSync as existsSync4, lstatSync as lstatSync5, realpathSync, statSync as statSync2 } from "fs";
 import { delimiter, isAbsolute as isAbsolute4, join as join8, resolve as resolve7 } from "path";
+
+// src/lib/hook-diagnostics.ts
+var CONTEXT_ERROR_CODES = new Set([
+  "SKILLS_API_CREDENTIAL_UNAVAILABLE",
+  "SKILLS_API_UNAVAILABLE",
+  "SKILLS_API_UNAUTHORIZED",
+  "SKILLS_API_FORBIDDEN",
+  "SKILLS_API_RESOURCE_UNAVAILABLE",
+  "SESSION_WRITE_BUSY",
+  "SKILLS_CONTEXT_FAILED",
+  "SKILLS_STORAGE_FULL",
+  "PROFILE_LOCK_MISMATCH",
+  "PROFILE_IDENTITY_MISMATCH",
+  "PROFILE_APPLIED_REPORT_FAILED",
+  "CACHED_AUTHORITY_REQUIRED",
+  "CACHED_PROFILE_EXPIRED",
+  "CACHED_PROFILE_MISSING",
+  "CACHED_BUNDLE_MISSING",
+  "INVALID_CONTEXT_INPUT",
+  "CONTEXT_INPUT_TOO_LARGE",
+  "INVALID_CONTEXT_BUDGET",
+  "INVALID_SELECTION",
+  "INVALID_SELECTION_ALIASES",
+  "INVALID_RECEIPT",
+  "INVALID_CACHE_FILE",
+  "UNSAFE_CACHE_PATH",
+  "RECEIPT_TOO_LARGE",
+  "BUNDLE_DIGEST_MISMATCH",
+  "BUNDLE_IDENTITY_MISMATCH",
+  "BUNDLE_UNAVAILABLE",
+  "BUNDLE_TOO_LARGE",
+  "SKILL_NOT_SELECTED",
+  "INVALID_SESSION",
+  "SESSION_PARENT_NOT_FOUND",
+  "SESSION_PARENT_MISMATCH",
+  "SESSION_NOT_FOUND",
+  "SESSION_GENERATION_CHANGED",
+  "SESSION_GENERATION_EXHAUSTED",
+  "SESSION_PARENT_CHANGED",
+  "SESSION_RECEIPT_CHANGED",
+  "SESSION_RECONCILIATION_REQUIRED",
+  "SESSION_RENEWAL_TIMEOUT",
+  "SESSION_CONTEXT_CONFLICT",
+  "SESSION_RECONCILIATION_INCOMPLETE",
+  "SESSION_WRITE_LOCKED",
+  "SESSION_WRITE_LOCK_CHANGED",
+  "SESSION_LOCK_RECOVERY_INCOMPLETE"
+]);
+var HOOK_REFUSAL_REASON_CODES = Object.freeze([
+  ...CONTEXT_ERROR_CODES,
+  "SKILLS_HOOK_FAILED",
+  "SKILLS_HOOK_TIMEOUT",
+  "SKILLS_HOOK_INVALID_RESPONSE"
+]);
+var OPTIONAL_CONTEXT_FAILURES = new Set([
+  "SKILLS_API_CREDENTIAL_UNAVAILABLE",
+  "SKILLS_API_UNAVAILABLE",
+  "SKILLS_API_UNAUTHORIZED",
+  "SKILLS_API_FORBIDDEN",
+  "SKILLS_API_RESOURCE_UNAVAILABLE",
+  "CACHED_PROFILE_EXPIRED",
+  "CACHED_PROFILE_MISSING",
+  "CACHED_BUNDLE_MISSING",
+  "SESSION_RECONCILIATION_REQUIRED",
+  "SESSION_RENEWAL_TIMEOUT",
+  "SESSION_WRITE_BUSY",
+  "SESSION_PARENT_CHANGED",
+  "SESSION_CONTEXT_CONFLICT",
+  "SKILLS_HOOK_TIMEOUT"
+]);
+
+// src/lib/agent-sumi.ts
 var SUMI_PATH_SELECTORS = ["SUMI_HOME", "SUMI_CONFIG_DIR", "XDG_DATA_HOME", "XDG_CACHE_HOME", "XDG_CONFIG_HOME", "XDG_STATE_HOME"];
 var SUMI_PATH_KEYS = ["data", "cache", "config", "state"];
 var SUMI_PATH_OUTPUT_LIMIT = 128 * 1024;
@@ -3005,24 +3077,33 @@ function sumiConfigPath(home, cwd = process.cwd(), env = process.env) {
   return join8(sumiConfigDirectory(home, env, cwd), "sumi.json");
 }
 function renderSumiPlugin(command, profile) {
-  return renderSumiPluginVersion(command, profile, false);
+  return renderSumiPluginVersion(command, profile, 3);
 }
 function isManagedSumiPlugin(text2, command, profile) {
-  return text2 === renderSumiPlugin(command, profile) || text2 === renderSumiPluginVersion(command, profile, true);
+  return text2 === renderSumiPlugin(command, profile) || text2 === renderSumiPluginVersion(command, profile, 2) || text2 === renderSumiPluginVersion(command, profile, 1);
 }
-function renderSumiPluginVersion(command, profile, legacy) {
+function renderSumiPluginVersion(command, profile, version2) {
+  const legacy = version2 === 1;
   const failure = (message) => legacy ? `new Error(${JSON.stringify(message)})` : "refusal()";
   return `// Managed by @hasna/skills. Regenerate with skills hook install --agent sumi.
 import { spawn } from "node:child_process";
 const command = ${JSON.stringify(command)};
 const profile = ${JSON.stringify(profile)};
-${legacy ? "" : `function refusal() {
-  const error = new Error("Skills verification blocked this request. Review the Sumi Skills hook configuration, then retry.");
+${legacy ? "" : `function refusal(${version2 === 3 ? "reasonCode" : ""}) {
+  const error = new Error("Skills verification blocked this request. Review the Sumi Skills hook configuration, then retry."${version2 === 3 ? ' + (reasonCode ? " [" + reasonCode + "]" : "")' : ""});
   error.name = "SkillsHookRefusal";
-  error.skillsHookRefusal = { version: 1, code: "SKILLS_HOOK_REFUSED" };
+  error.skillsHookRefusal = { version: 1, code: "SKILLS_HOOK_REFUSED"${version2 === 3 ? ", ...(reasonCode ? { reasonCode } : {})" : ""} };
   return error;
 }
-`}function context(input) {
+`}${version2 === 3 ? `const reasonCodes = new Set(${JSON.stringify(HOOK_REFUSAL_REASON_CODES)});
+function refusedResult(result) {
+  const reason = result.reason ?? result.stopReason ?? result.systemMessage;
+  if (typeof reason !== "string" || reason.length > 16384) return refusal();
+  if (reason.startsWith("NATIVE_SKILL_DRIFT:")) return refusal("NATIVE_SKILL_DRIFT");
+  const code = /^Skills context is unavailable \\[([A-Z_]+)\\]/.exec(reason)?.[1];
+  return refusal(reasonCodes.has(code) ? code : undefined);
+}
+` : ""}function context(input) {
   return new Promise((resolve, reject) => {
     const child = spawn(command, ["hook", "user-prompt", "--agent", "sumi", "--selection-profile", profile], { cwd: input.cwd, stdio: ["pipe", "pipe", "pipe"] });
     const chunks = []; let bytes = 0, failure;
@@ -3037,12 +3118,12 @@ ${legacy ? "" : `function refusal() {
       try {
         const result = JSON.parse(Buffer.concat(chunks).toString("utf8"));
         if (!result || typeof result !== "object" || Array.isArray(result)) throw ${failure("Invalid Skills hook response")};
-        if (result.decision === "block" || result.continue === false) throw ${failure("Skills prompt hook refused")};
+        if (result.decision === "block" || result.continue === false) throw ${version2 === 3 ? "refusedResult(result)" : failure("Skills prompt hook refused")};
         if (Object.keys(result).length && (!result.hookSpecificOutput || result.hookSpecificOutput.hookEventName !== input.hook_event_name)) throw ${failure("Invalid Skills hook response")};
         const text = result.hookSpecificOutput?.additionalContext ?? "";
         if (typeof text !== "string") throw ${failure("Invalid Skills prompt context")};
         resolve(text);
-      } catch (error) { reject(${legacy ? "error" : "refusal()"}); }
+      } catch (error) { reject(${legacy ? "error" : version2 === 3 ? 'error instanceof Error && error.name === "SkillsHookRefusal" ? error : refusal()' : "refusal()"}); }
     });
     child.stdin.end(JSON.stringify(input));
   });
@@ -3075,9 +3156,13 @@ export default {
       sessions.add(event.sessionID);
     }));
     registrations.push(await ctx.session.hook("context", async event => {
-      const last = event.messages.findLast(message => message.role === "user");
+${version2 === 3 ? `      // Model messages also contain checkpoints, attachments and synthetic
+      // user-role history, with no owner-prompt provenance. Prompt admission
+      // already matched and persisted Skills; restore that verified state only.
+      const prompt = "";
+` : `      const last = event.messages.findLast(message => message.role === "user");
       const prompt = (last?.content ?? []).filter(part => part.type === "text").map(part => part.text).join("\\n");
-      // Recheck on every primary request, including resumed and synthetic
+`}      // Recheck on every primary request, including resumed and synthetic
       // sessions. The CLI owns optional failures versus explicit refusals.
       const text = await context(await input(event.sessionID, prompt, !sessions.has(event.sessionID)));
       if (text) event.system.push({ type: "text", text });

package/dist/sdk/index.js

@@ -32371,7 +32371,7 @@ var init_event_sink = __esm(() => {
   init_dist();
 });
 // package.json
-var version = "0.10.64";
+var version = "0.10.65";
 var package_default = {
   name: "@hasna/skills",
   version,
@@ -44349,6 +44349,78 @@ function verifiesCodexHookDiscoverySource(binding, source, currentDigest, witnes
 import { spawnSync as spawnSync5 } from "child_process";
 import { accessSync as accessSync2, constants as constants16, existsSync as existsSync6, lstatSync as lstatSync22, realpathSync as realpathSync10, statSync as statSync7 } from "fs";
 import { delimiter as delimiter2, isAbsolute as isAbsolute21, join as join27, resolve as resolve20 } from "path";
+
+// src/lib/hook-diagnostics.ts
+var CONTEXT_ERROR_CODES = new Set([
+  "SKILLS_API_CREDENTIAL_UNAVAILABLE",
+  "SKILLS_API_UNAVAILABLE",
+  "SKILLS_API_UNAUTHORIZED",
+  "SKILLS_API_FORBIDDEN",
+  "SKILLS_API_RESOURCE_UNAVAILABLE",
+  "SESSION_WRITE_BUSY",
+  "SKILLS_CONTEXT_FAILED",
+  "SKILLS_STORAGE_FULL",
+  "PROFILE_LOCK_MISMATCH",
+  "PROFILE_IDENTITY_MISMATCH",
+  "PROFILE_APPLIED_REPORT_FAILED",
+  "CACHED_AUTHORITY_REQUIRED",
+  "CACHED_PROFILE_EXPIRED",
+  "CACHED_PROFILE_MISSING",
+  "CACHED_BUNDLE_MISSING",
+  "INVALID_CONTEXT_INPUT",
+  "CONTEXT_INPUT_TOO_LARGE",
+  "INVALID_CONTEXT_BUDGET",
+  "INVALID_SELECTION",
+  "INVALID_SELECTION_ALIASES",
+  "INVALID_RECEIPT",
+  "INVALID_CACHE_FILE",
+  "UNSAFE_CACHE_PATH",
+  "RECEIPT_TOO_LARGE",
+  "BUNDLE_DIGEST_MISMATCH",
+  "BUNDLE_IDENTITY_MISMATCH",
+  "BUNDLE_UNAVAILABLE",
+  "BUNDLE_TOO_LARGE",
+  "SKILL_NOT_SELECTED",
+  "INVALID_SESSION",
+  "SESSION_PARENT_NOT_FOUND",
+  "SESSION_PARENT_MISMATCH",
+  "SESSION_NOT_FOUND",
+  "SESSION_GENERATION_CHANGED",
+  "SESSION_GENERATION_EXHAUSTED",
+  "SESSION_PARENT_CHANGED",
+  "SESSION_RECEIPT_CHANGED",
+  "SESSION_RECONCILIATION_REQUIRED",
+  "SESSION_RENEWAL_TIMEOUT",
+  "SESSION_CONTEXT_CONFLICT",
+  "SESSION_RECONCILIATION_INCOMPLETE",
+  "SESSION_WRITE_LOCKED",
+  "SESSION_WRITE_LOCK_CHANGED",
+  "SESSION_LOCK_RECOVERY_INCOMPLETE"
+]);
+var HOOK_REFUSAL_REASON_CODES = Object.freeze([
+  ...CONTEXT_ERROR_CODES,
+  "SKILLS_HOOK_FAILED",
+  "SKILLS_HOOK_TIMEOUT",
+  "SKILLS_HOOK_INVALID_RESPONSE"
+]);
+var OPTIONAL_CONTEXT_FAILURES = new Set([
+  "SKILLS_API_CREDENTIAL_UNAVAILABLE",
+  "SKILLS_API_UNAVAILABLE",
+  "SKILLS_API_UNAUTHORIZED",
+  "SKILLS_API_FORBIDDEN",
+  "SKILLS_API_RESOURCE_UNAVAILABLE",
+  "CACHED_PROFILE_EXPIRED",
+  "CACHED_PROFILE_MISSING",
+  "CACHED_BUNDLE_MISSING",
+  "SESSION_RECONCILIATION_REQUIRED",
+  "SESSION_RENEWAL_TIMEOUT",
+  "SESSION_WRITE_BUSY",
+  "SESSION_PARENT_CHANGED",
+  "SESSION_CONTEXT_CONFLICT",
+  "SKILLS_HOOK_TIMEOUT"
+]);
+
+// src/lib/agent-sumi.ts
 var SUMI_PATH_SELECTORS = ["SUMI_HOME", "SUMI_CONFIG_DIR", "XDG_DATA_HOME", "XDG_CACHE_HOME", "XDG_CONFIG_HOME", "XDG_STATE_HOME"];
 var SUMI_PATH_KEYS = ["data", "cache", "config", "state"];
 var SUMI_PATH_OUTPUT_LIMIT = 128 * 1024;
@@ -44490,24 +44562,33 @@ function sumiConfigPath(home, cwd = process.cwd(), env = process.env) {
   return join27(sumiConfigDirectory(home, env, cwd), "sumi.json");
 }
 function renderSumiPlugin(command, profile) {
-  return renderSumiPluginVersion(command, profile, false);
+  return renderSumiPluginVersion(command, profile, 3);
 }
 function isManagedSumiPlugin(text2, command, profile) {
-  return text2 === renderSumiPlugin(command, profile) || text2 === renderSumiPluginVersion(command, profile, true);
+  return text2 === renderSumiPlugin(command, profile) || text2 === renderSumiPluginVersion(command, profile, 2) || text2 === renderSumiPluginVersion(command, profile, 1);
 }
-function renderSumiPluginVersion(command, profile, legacy) {
+function renderSumiPluginVersion(command, profile, version2) {
+  const legacy = version2 === 1;
   const failure = (message) => legacy ? `new Error(${JSON.stringify(message)})` : "refusal()";
   return `// Managed by @hasna/skills. Regenerate with skills hook install --agent sumi.
 import { spawn } from "node:child_process";
 const command = ${JSON.stringify(command)};
 const profile = ${JSON.stringify(profile)};
-${legacy ? "" : `function refusal() {
-  const error = new Error("Skills verification blocked this request. Review the Sumi Skills hook configuration, then retry.");
+${legacy ? "" : `function refusal(${version2 === 3 ? "reasonCode" : ""}) {
+  const error = new Error("Skills verification blocked this request. Review the Sumi Skills hook configuration, then retry."${version2 === 3 ? ' + (reasonCode ? " [" + reasonCode + "]" : "")' : ""});
   error.name = "SkillsHookRefusal";
-  error.skillsHookRefusal = { version: 1, code: "SKILLS_HOOK_REFUSED" };
+  error.skillsHookRefusal = { version: 1, code: "SKILLS_HOOK_REFUSED"${version2 === 3 ? ", ...(reasonCode ? { reasonCode } : {})" : ""} };
   return error;
 }
-`}function context(input) {
+`}${version2 === 3 ? `const reasonCodes = new Set(${JSON.stringify(HOOK_REFUSAL_REASON_CODES)});
+function refusedResult(result) {
+  const reason = result.reason ?? result.stopReason ?? result.systemMessage;
+  if (typeof reason !== "string" || reason.length > 16384) return refusal();
+  if (reason.startsWith("NATIVE_SKILL_DRIFT:")) return refusal("NATIVE_SKILL_DRIFT");
+  const code = /^Skills context is unavailable \\[([A-Z_]+)\\]/.exec(reason)?.[1];
+  return refusal(reasonCodes.has(code) ? code : undefined);
+}
+` : ""}function context(input) {
   return new Promise((resolve, reject) => {
     const child = spawn(command, ["hook", "user-prompt", "--agent", "sumi", "--selection-profile", profile], { cwd: input.cwd, stdio: ["pipe", "pipe", "pipe"] });
     const chunks = []; let bytes = 0, failure;
@@ -44522,12 +44603,12 @@ ${legacy ? "" : `function refusal() {
       try {
         const result = JSON.parse(Buffer.concat(chunks).toString("utf8"));
         if (!result || typeof result !== "object" || Array.isArray(result)) throw ${failure("Invalid Skills hook response")};
-        if (result.decision === "block" || result.continue === false) throw ${failure("Skills prompt hook refused")};
+        if (result.decision === "block" || result.continue === false) throw ${version2 === 3 ? "refusedResult(result)" : failure("Skills prompt hook refused")};
         if (Object.keys(result).length && (!result.hookSpecificOutput || result.hookSpecificOutput.hookEventName !== input.hook_event_name)) throw ${failure("Invalid Skills hook response")};
         const text = result.hookSpecificOutput?.additionalContext ?? "";
         if (typeof text !== "string") throw ${failure("Invalid Skills prompt context")};
         resolve(text);
-      } catch (error) { reject(${legacy ? "error" : "refusal()"}); }
+      } catch (error) { reject(${legacy ? "error" : version2 === 3 ? 'error instanceof Error && error.name === "SkillsHookRefusal" ? error : refusal()' : "refusal()"}); }
     });
     child.stdin.end(JSON.stringify(input));
   });
@@ -44560,9 +44641,13 @@ export default {
       sessions.add(event.sessionID);
     }));
     registrations.push(await ctx.session.hook("context", async event => {
-      const last = event.messages.findLast(message => message.role === "user");
+${version2 === 3 ? `      // Model messages also contain checkpoints, attachments and synthetic
+      // user-role history, with no owner-prompt provenance. Prompt admission
+      // already matched and persisted Skills; restore that verified state only.
+      const prompt = "";
+` : `      const last = event.messages.findLast(message => message.role === "user");
       const prompt = (last?.content ?? []).filter(part => part.type === "text").map(part => part.text).join("\\n");
-      // Recheck on every primary request, including resumed and synthetic
+`}      // Recheck on every primary request, including resumed and synthetic
       // sessions. The CLI owns optional failures versus explicit refusals.
       const text = await context(await input(event.sessionID, prompt, !sessions.has(event.sessionID)));
       if (text) event.system.push({ type: "text", text });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/skills",
-  "version": "0.10.64",
+  "version": "0.10.65",
   "description": "Skills library for AI coding agents",
   "type": "module",
   "bin": {