@hasna/skills 0.10.64 → 0.10.66

package/bin/mcp.js

@@ -23,7 +23,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.64",
+    version: "0.10.66",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -23089,8 +23089,8 @@ function assertAgentPolicyCollections(policy) {
         }
     }
     if (value.codexSemanticCache !== undefined) {
-      const proof = record2(value.codexSemanticCache, 8), witness = record2(proof.witness, 6);
-      requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && Object.keys(proof).length === 8 && proof.schema === "hasna.codex-semantic-cache-discovery.v1" && typeof proof.previousPolicySha256 === "string" && /^[a-f0-9]{64}$/.test(proof.previousPolicySha256) && Object.keys(witness).length === 6 && witness.schema === "hasna.codex-semantic-cache-witness.v1" && typeof witness.sha256 === "string" && /^[a-f0-9]{64}$/.test(witness.sha256));
+      const proof = record2(value.codexSemanticCache, 9), witness = record2(proof.witness, 7);
+      requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && [8, 9].includes(Object.keys(proof).length) && Object.keys(proof).every((key) => ["schema", "configPath", "hookRootAlias", "witness", "appOnlyParents", "previousPolicySha256", "supersededSources", "supersededDirectories", "reviewedHookParents"].includes(key)) && proof.schema === "hasna.codex-semantic-cache-discovery.v1" && typeof proof.previousPolicySha256 === "string" && /^[a-f0-9]{64}$/.test(proof.previousPolicySha256) && [6, 7].includes(Object.keys(witness).length) && Object.keys(witness).every((key) => ["schema", "cacheRoot", "controls", "appOnlyParents", "skills", "sha256", "hookParents"].includes(key)) && witness.schema === "hasna.codex-semantic-cache-witness.v1" && typeof witness.sha256 === "string" && /^[a-f0-9]{64}$/.test(witness.sha256));
       text(proof.configPath);
       requireBound(isAbsolute5(proof.configPath) && resolve4(proof.configPath) === proof.configPath && basename5(proof.configPath) === "config.toml");
       text(witness.cacheRoot);
@@ -23109,6 +23109,20 @@ function assertAgentPolicyCollections(policy) {
           text(parent[key]);
         requireBound(isAbsolute5(parent.pluginParent) && resolve4(parent.pluginParent) === parent.pluginParent);
       }
+      if (proof.reviewedHookParents !== undefined)
+        for (const parent of array2(proof.reviewedHookParents, 4096)) {
+          requireBound(object2(parent) && parent.role === "reviewed-hook" && (parent.installation === "remote-receipt" && Object.keys(parent).length === 6 || parent.installation === "local-marketplace" && Object.keys(parent).length === 7));
+          requireBound(parent.installation === "remote-receipt" ? Object.keys(parent).sort().join(",") === "installation,namespace,pluginId,pluginParent,remotePluginId,role" : Object.keys(parent).sort().join(",") === "installation,marketplaceSha256,marketplaceSourcePath,namespace,pluginId,pluginParent,role");
+          for (const key of ["pluginId", "namespace", "pluginParent", "installation"])
+            text(parent[key]);
+          if (parent.installation === "remote-receipt")
+            text(parent.remotePluginId);
+          else {
+            text(parent.marketplaceSourcePath);
+            requireBound(typeof parent.marketplaceSha256 === "string" && /^[a-f0-9]{64}$/.test(parent.marketplaceSha256) && isAbsolute5(parent.marketplaceSourcePath) && resolve4(parent.marketplaceSourcePath) === parent.marketplaceSourcePath && basename5(parent.marketplaceSourcePath) === "marketplace.json");
+          }
+          requireBound(isAbsolute5(parent.pluginParent) && resolve4(parent.pluginParent) === parent.pluginParent);
+        }
       for (const row of [...array2(witness.controls, 4096), ...array2(witness.appOnlyParents, 4096)]) {
         requireBound(object2(row));
         for (const key of ["pluginId", "namespace", "pluginParent"])
@@ -23117,6 +23131,26 @@ function assertAgentPolicyCollections(policy) {
           if (row[key] !== undefined)
             requireBound(typeof row[key] === "string" && /^[a-f0-9]{64}$/.test(row[key]));
       }
+      if (witness.hookParents !== undefined)
+        for (const row of array2(witness.hookParents, 4096)) {
+          requireBound(object2(row) && row.role === "reviewed-hook" && (row.installation === "remote-receipt" && Object.keys(row).length === 9 || row.installation === "local-marketplace" && Object.keys(row).length === 9));
+          requireBound(row.installation === "remote-receipt" ? Object.keys(row).sort().join(",") === "hooksSha256,installation,manifestSha256,namespace,pluginId,pluginParent,receiptSha256,remotePluginId,role" : Object.keys(row).sort().join(",") === "hooksSha256,installation,manifestSha256,marketplaceSha256,marketplaceSourcePath,namespace,pluginId,pluginParent,role");
+          for (const key of ["pluginId", "namespace", "pluginParent", "installation"])
+            text(row[key]);
+          if (row.installation === "remote-receipt")
+            text(row.remotePluginId);
+          else {
+            text(row.marketplaceSourcePath);
+            requireBound(typeof row.marketplaceSha256 === "string" && /^[a-f0-9]{64}$/.test(row.marketplaceSha256) && isAbsolute5(row.marketplaceSourcePath) && resolve4(row.marketplaceSourcePath) === row.marketplaceSourcePath && basename5(row.marketplaceSourcePath) === "marketplace.json");
+          }
+          requireBound(isAbsolute5(row.pluginParent) && resolve4(row.pluginParent) === row.pluginParent);
+          for (const key of ["manifestSha256", "hooksSha256"])
+            requireBound(typeof row[key] === "string" && /^[a-f0-9]{64}$/.test(row[key]));
+          if (row.installation === "remote-receipt")
+            requireBound(typeof row.receiptSha256 === "string" && /^[a-f0-9]{64}$/.test(row.receiptSha256));
+          else
+            requireBound(row.receiptSha256 === undefined);
+        }
       for (const skill of array2(witness.skills, 4096)) {
         requireBound(object2(skill));
         for (const key of ["name", "pluginId", "namespace", "pluginParent"])
@@ -33667,7 +33701,25 @@ var init_codex_settings_witness = __esm(() => {
 // src/lib/codex-semantic-cache-witness.ts
 import { createHash as createHash14 } from "crypto";
 import { constants as constants7, closeSync as closeSync10, fstatSync as fstatSync10, lstatSync as lstatSync13, openSync as openSync10, readSync as readSync5, readdirSync as readdirSync7, realpathSync as realpathSync6 } from "fs";
-import { dirname as dirname13, isAbsolute as isAbsolute11, join as join19, relative as relative6, resolve as resolve12, sep as sep7 } from "path";
+import { basename as basename7, dirname as dirname13, isAbsolute as isAbsolute11, join as join19, relative as relative6, resolve as resolve12, sep as sep7 } from "path";
+function codexLocalMarketplaceMapsPlugin(text2, marketplace, plugin) {
+  try {
+    hashNativeJsonControls(text2);
+    const value = JSON.parse(text2);
+    if (!plainObject(value) || !exactKeys(value, ["interface", "name", "plugins"]) || value.name !== marketplace || !(typeof value.interface === "string" || Number.isSafeInteger(value.interface)) || !Array.isArray(value.plugins) || value.plugins.length < 1 || value.plugins.length > 4096)
+      return false;
+    const rows = value.plugins.filter((row2) => plainObject(row2) && row2.name === plugin);
+    if (rows.length !== 1)
+      return false;
+    const row = rows[0];
+    if (!exactKeys(row, ["name", "source"]) || !plainObject(row.source) || !exactKeys(row.source, ["source", "path"]) || row.source.source !== "local" || typeof row.source.path !== "string" || !row.source.path.startsWith("./") || row.source.path.includes("\\"))
+      return false;
+    const parts = row.source.path.split("/");
+    return parts[0] === "." && parts.length > 1 && parts.slice(1).every((part) => /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(part)) && parts.at(-1) === plugin;
+  } catch {
+    return false;
+  }
+}
 function defaultRead(path) {
   const before = lstatSync13(path, { throwIfNoEntry: false, bigint: true });
   if (before === undefined)
@@ -33729,7 +33781,7 @@ function validPluginParent(cacheRoot, pluginParent, namespace, pluginId) {
   return parts.length === 2 && parts.every(identifier3) && parts[1] === namespace && pluginId === `${namespace}@${parts[0]}`;
 }
 function assertWitnessShape(value) {
-  if (!plainObject(value) || !exactKeys(value, ["schema", "cacheRoot", "controls", "appOnlyParents", "skills", "sha256"]) || value.schema !== CODEX_SEMANTIC_CACHE_WITNESS_SCHEMA || typeof value.cacheRoot !== "string" || !isAbsolute11(value.cacheRoot) || resolve12(value.cacheRoot) !== value.cacheRoot || !digest(value.sha256) || !Array.isArray(value.controls) || value.controls.length === 0 || value.controls.length > 4096 || !Array.isArray(value.appOnlyParents) || value.appOnlyParents.length > 4096 || !Array.isArray(value.skills) || value.skills.length === 0 || value.skills.length > 4096)
+  if (!plainObject(value) || !exactKeys(value, ["schema", "cacheRoot", "controls", "appOnlyParents", "skills", "sha256"], ["hookParents"]) || value.schema !== CODEX_SEMANTIC_CACHE_WITNESS_SCHEMA || typeof value.cacheRoot !== "string" || !isAbsolute11(value.cacheRoot) || resolve12(value.cacheRoot) !== value.cacheRoot || !digest(value.sha256) || !Array.isArray(value.controls) || value.controls.length === 0 || value.controls.length > 4096 || !Array.isArray(value.appOnlyParents) || value.appOnlyParents.length > 4096 || !Array.isArray(value.skills) || value.skills.length === 0 || value.skills.length > 4096)
     refuse3();
   const witness = value;
   const controlParents = new Set;
@@ -33750,6 +33802,20 @@ function assertWitnessShape(value) {
       refuse3();
     appOnlyParentPaths.add(row.pluginParent);
   }
+  const hookParentPaths = new Set;
+  const hookParents = witness.hookParents === undefined ? [] : witness.hookParents;
+  if (!Array.isArray(hookParents) || hookParents.length > 4096)
+    refuse3();
+  for (const candidate of hookParents) {
+    if (!plainObject(candidate))
+      refuse3();
+    const row = candidate;
+    const remote = row.installation === "remote-receipt";
+    const local = row.installation === "local-marketplace";
+    if (!exactKeys(row, ["role", "pluginId", "namespace", "pluginParent", "installation", "manifestSha256", "hooksSha256"], remote ? ["remotePluginId", "receiptSha256"] : local ? ["marketplaceSourcePath", "marketplaceSha256"] : []) || row.role !== "reviewed-hook" || !identifier3(row.namespace) || typeof row.pluginId !== "string" || !/^[A-Za-z0-9_-]{1,64}@[A-Za-z0-9_-]{1,64}$/.test(row.pluginId) || typeof row.pluginParent !== "string" || !validPluginParent(String(witness.cacheRoot), row.pluginParent, row.namespace, row.pluginId) || remote && (typeof row.remotePluginId !== "string" || !/^[A-Za-z0-9_~-]{1,1024}$/.test(row.remotePluginId) || !digest(row.receiptSha256)) || local && (typeof row.marketplaceSourcePath !== "string" || !isAbsolute11(row.marketplaceSourcePath) || resolve12(row.marketplaceSourcePath) !== row.marketplaceSourcePath || basename7(row.marketplaceSourcePath) !== "marketplace.json" || !digest(row.marketplaceSha256)) || !remote && !local || !digest(row.manifestSha256) || !digest(row.hooksSha256) || hookParentPaths.has(row.pluginParent) || controlParents.has(row.pluginParent) || appOnlyParentPaths.has(row.pluginParent))
+      refuse3();
+    hookParentPaths.add(row.pluginParent);
+  }
   const skillNames = new Set;
   const qualifiedNames = new Set;
   for (const candidate of witness.skills) {
@@ -33769,6 +33835,7 @@ function assertWitnessShape(value) {
     cacheRoot: witness.cacheRoot,
     controls: witness.controls,
     appOnlyParents: witness.appOnlyParents,
+    ...witness.hookParents === undefined ? {} : { hookParents: witness.hookParents },
     skills: witness.skills
   };
   if (hash3(projection) !== witness.sha256)
@@ -33959,10 +34026,128 @@ function appOnlyParentProjection(cacheRoot, parents2, read) {
   }
   return rows.sort((a, b) => a.pluginId.localeCompare(b.pluginId) || a.pluginParent.localeCompare(b.pluginParent));
 }
-function assertParents(cacheRoot, controls, appOnlyParents, files, members2) {
+function assertJsonValue(value, depth = 0, budget2 = { members: 0 }) {
+  if (depth > 32 || ++budget2.members > 4096)
+    refuse3();
+  if (value === null || typeof value === "string" || typeof value === "boolean")
+    return;
+  if (typeof value === "number" && Number.isFinite(value))
+    return;
+  if (Array.isArray(value)) {
+    for (const item of value)
+      assertJsonValue(item, depth + 1, budget2);
+    return;
+  }
+  if (!plainObject(value))
+    refuse3();
+  for (const [key, item] of Object.entries(value)) {
+    if (!key || /[\x00-\x1f\x7f]/.test(key))
+      refuse3();
+    assertJsonValue(item, depth + 1, budget2);
+  }
+}
+function reviewedHookControls(root, read) {
+  const manifestPath = join19(root, ".codex-plugin/plugin.json"), hooksPath = join19(root, "hooks/hooks.json");
+  let manifest, manifestSha256, hooks, hooksSha256;
+  try {
+    const manifestText = read(manifestPath);
+    manifestSha256 = hashNativeJsonControls(manifestText, "version");
+    manifest = JSON.parse(manifestText);
+    const hooksText = read(hooksPath);
+    hashNativeJsonControls(hooksText);
+    hooksSha256 = createHash14("sha256").update(hooksText).digest("hex");
+    hooks = JSON.parse(hooksText);
+  } catch {
+    return refuse3();
+  }
+  if (!plainObject(manifest) || !exactKeys(manifest, ["name", "version", "hooks"], ["description"]) || !identifier3(manifest.name) || typeof manifest.version !== "string" || manifest.version !== basename7(root) || manifest.hooks !== "./hooks/hooks.json" || manifest.description !== undefined && (typeof manifest.description !== "string" || !manifest.description.trim() || manifest.description.length > 1024))
+    refuse3();
+  const manifestRecord = manifest;
+  if (!plainObject(hooks) || !exactKeys(hooks, ["hooks"]) || !plainObject(hooks.hooks))
+    refuse3();
+  const hookTable = hooks.hooks;
+  const events = Object.entries(hookTable);
+  if (!events.length || events.length > 32)
+    refuse3();
+  for (const [event, groups] of events) {
+    if (!codexHookEvents.has(event) || !Array.isArray(groups) || !groups.length || groups.length > 32)
+      refuse3();
+    for (const group of groups) {
+      if (!plainObject(group) || !exactKeys(group, ["hooks"]) || !Array.isArray(group.hooks) || !group.hooks.length || group.hooks.length > 32)
+        refuse3();
+      const handlers = group.hooks;
+      for (const handler of handlers) {
+        if (!plainObject(handler) || !exactKeys(handler, ["type", "server", "tool", "input"], ["timeout"]) || handler.type !== "mcp_tool" || !identifier3(handler.server) || !identifier3(handler.tool) || !plainObject(handler.input) || handler.timeout !== undefined && (!Number.isSafeInteger(handler.timeout) || Number(handler.timeout) < 1 || Number(handler.timeout) > 300))
+          refuse3();
+        assertJsonValue(handler.input);
+      }
+    }
+  }
+  return { namespace: manifestRecord.name, manifestSha256, hooksSha256 };
+}
+function reviewedHookParentProjection(cacheRoot, parents2, read) {
+  if (!Array.isArray(parents2) || parents2.length > 4096)
+    refuse3();
+  const seen = new Set, rows = [];
+  for (const parent of parents2) {
+    const remote = parent?.installation === "remote-receipt", local = parent?.installation === "local-marketplace";
+    if (!parent || !exactKeys(parent, ["installation", "namespace", "pluginId", "pluginParent", "role"], remote ? ["remotePluginId"] : local ? ["marketplaceSourcePath", "marketplaceSha256"] : []) || parent.role !== "reviewed-hook" || !identifier3(parent.namespace) || !/^[A-Za-z0-9_-]{1,64}@[A-Za-z0-9_-]{1,64}$/.test(parent.pluginId) || typeof parent.pluginParent !== "string" || remote && (typeof parent.remotePluginId !== "string" || !/^[A-Za-z0-9_~-]{1,1024}$/.test(parent.remotePluginId)) || local && (typeof parent.marketplaceSourcePath !== "string" || !isAbsolute11(parent.marketplaceSourcePath) || resolve12(parent.marketplaceSourcePath) !== parent.marketplaceSourcePath || basename7(parent.marketplaceSourcePath) !== "marketplace.json" || !digest(parent.marketplaceSha256)) || !remote && !local)
+      refuse3();
+    const parts = relative6(cacheRoot, parent.pluginParent).split(sep7);
+    if (!isAbsolute11(parent.pluginParent) || resolve12(parent.pluginParent) !== parent.pluginParent || parts.length !== 2 || parts.some((part) => !identifier3(part)) || parts[1] !== parent.namespace || parent.pluginId !== `${parent.namespace}@${parts[0]}` || seen.has(parent.pluginParent))
+      refuse3();
+    seen.add(parent.pluginParent);
+    const parentStat = lstatSync13(parent.pluginParent, { throwIfNoEntry: false });
+    if (!parentStat?.isDirectory() || parentStat.isSymbolicLink() || realpathSync6(parent.pluginParent) !== parent.pluginParent)
+      refuse3();
+    const receiptPath = join19(parent.pluginParent, ".codex-remote-plugin-install.json"), receiptStat = lstatSync13(receiptPath, { throwIfNoEntry: false });
+    let receiptText;
+    if (remote) {
+      if (!receiptStat?.isFile() || receiptStat.isSymbolicLink() || receiptStat.size > MAX_RECEIPT_BYTES)
+        refuse3();
+      try {
+        receiptText = read(receiptPath);
+        hashNativeJsonControls(receiptText);
+        const receipt = JSON.parse(receiptText);
+        if (!plainObject(receipt) || !exactKeys(receipt, ["schema_version", "remote_plugin_id"]) || receipt.schema_version !== 1 || receipt.remote_plugin_id !== parent.remotePluginId)
+          refuse3();
+      } catch {
+        refuse3();
+      }
+    } else {
+      const marketplaceSourcePath = parent.marketplaceSourcePath ?? refuse3();
+      if (receiptStat !== undefined || !parent.marketplaceSha256)
+        refuse3();
+      let marketplaceText;
+      try {
+        marketplaceText = read(marketplaceSourcePath);
+      } catch {
+        return refuse3();
+      }
+      if (createHash14("sha256").update(marketplaceText).digest("hex") !== parent.marketplaceSha256 || !codexLocalMarketplaceMapsPlugin(marketplaceText, parts[0], parent.namespace))
+        refuse3();
+    }
+    const materializations = readdirSync7(parent.pluginParent).filter((name) => name !== ".codex-remote-plugin-install.json").map((version2) => {
+      if (!/^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$/.test(version2))
+        refuse3();
+      const root = join19(parent.pluginParent, version2), stat = lstatSync13(root, { throwIfNoEntry: false });
+      if (!stat?.isDirectory() || stat.isSymbolicLink() || realpathSync6(root) !== root)
+        refuse3();
+      const controls = reviewedHookControls(root, read);
+      if (controls.namespace !== parent.namespace)
+        refuse3();
+      return { manifestSha256: controls.manifestSha256, hooksSha256: controls.hooksSha256 };
+    });
+    if (!materializations.length || materializations.some((item) => canonical7(item) !== canonical7(materializations[0])))
+      refuse3();
+    rows.push({ ...parent, ...receiptText === undefined ? {} : { receiptSha256: createHash14("sha256").update(receiptText).digest("hex") }, ...materializations[0] });
+  }
+  return rows.sort((a, b) => a.pluginId.localeCompare(b.pluginId) || a.pluginParent.localeCompare(b.pluginParent));
+}
+function assertParents(cacheRoot, controls, appOnlyParents, hookParents, files, members2) {
   const expected = new Set;
   const expectedMarkets = new Set;
-  for (const control of [...controls, ...appOnlyParents]) {
+  for (const control of [...controls, ...appOnlyParents, ...hookParents]) {
     const rel = relative6(cacheRoot, control.pluginParent), parts = rel.split(sep7);
     if (resolve12(control.pluginParent) !== control.pluginParent || parts.length !== 2 || parts.some((part) => !identifier3(part)) || control.pluginId !== `${control.namespace}@${parts[0]}` || parts[1] !== control.namespace)
       refuse3();
@@ -34003,7 +34188,9 @@ function assertParents(cacheRoot, controls, appOnlyParents, files, members2) {
       refuse3();
     if ([".app.json", ".mcp.json"].includes(base) && (parts.length !== 4 || dirname13(member) !== root))
       refuse3();
-    if (parts.includes("hooks"))
+    if ([".app.json", ".mcp.json"].includes(base) && hookParents.some((reviewed) => reviewed.pluginParent === parent))
+      refuse3();
+    if (parts.includes("hooks") && (![4, 5].includes(parts.length) || parts[3] !== "hooks" || (parts.length === 4 ? base !== "hooks" : base !== "hooks.json") || !hookParents.some((reviewed) => reviewed.pluginParent === join19(cacheRoot, parts[0], parts[1]))))
       refuse3();
   }
 }
@@ -34113,13 +34300,14 @@ function captureCodexSemanticCacheWitness(options) {
     const initialTree = treeSnapshot(options.cacheRoot);
     const controls = controlProjection(options.controls, read);
     const appOnlyParents = appOnlyParentProjection(options.cacheRoot, options.appOnlyParents ?? [], read);
+    const hookParents = reviewedHookParentProjection(options.cacheRoot, options.reviewedHookParents ?? [], read);
     const skillParents = new Set(controls.map((control) => control.pluginParent));
-    if (appOnlyParents.some((parent) => skillParents.has(parent.pluginParent)))
+    if (appOnlyParents.some((parent) => skillParents.has(parent.pluginParent)) || hookParents.some((parent) => skillParents.has(parent.pluginParent) || appOnlyParents.some((app) => app.pluginParent === parent.pluginParent)))
       refuse3();
     if (!reviewedCodexPluginCapabilitiesUnchanged(options.cacheRoot, options.controls, read, options.rules))
       refuse3();
     const files = initialTree.files;
-    assertParents(options.cacheRoot, controls, appOnlyParents, files, initialTree.state.members);
+    assertParents(options.cacheRoot, controls, appOnlyParents, hookParents, files, initialTree.state.members);
     const expectedNamesByRoot = assertSkillMaterializations(options.cacheRoot, options.controls, files, read);
     const docs = files.filter((path) => path.endsWith(`${sep7}SKILL.md`));
     const skillRows = [];
@@ -34128,6 +34316,8 @@ function captureCodexSemanticCacheWitness(options) {
       const rel = relative6(options.cacheRoot, document2).split(sep7);
       if (appOnlyParents.some((parent) => parent.pluginParent === join19(options.cacheRoot, rel[0], rel[1])))
         refuse3();
+      if (hookParents.some((parent) => parent.pluginParent === join19(options.cacheRoot, rel[0], rel[1])))
+        refuse3();
       const documentStat = lstatSync13(document2, { throwIfNoEntry: false });
       if (!documentStat?.isFile() || documentStat.isSymbolicLink() || documentStat.size > MAX_DOCUMENT_BYTES)
         refuse3();
@@ -34191,7 +34381,7 @@ function captureCodexSemanticCacheWitness(options) {
     tracked.verify();
     const finalTree = treeSnapshot(options.cacheRoot);
     assertSameTree(initialTree.state, finalTree.state, tracked.paths());
-    const completeProjection = { schema: CODEX_SEMANTIC_CACHE_WITNESS_SCHEMA, cacheRoot: options.cacheRoot, controls, appOnlyParents, skills: uniqueSkills };
+    const completeProjection = { schema: CODEX_SEMANTIC_CACHE_WITNESS_SCHEMA, cacheRoot: options.cacheRoot, controls, appOnlyParents, hookParents, skills: uniqueSkills };
     return { ...completeProjection, sha256: hash3(completeProjection) };
   } catch (error61) {
     if (error61 instanceof Error && error61.message.startsWith("CODEX_SEMANTIC_CACHE_WITNESS_UNSUPPORTED"))
@@ -34207,6 +34397,7 @@ function assertCodexSemanticCacheWitnessUnchanged(previous, current) {
     cacheRoot: previous.cacheRoot,
     controls: previous.controls,
     appOnlyParents: previous.appOnlyParents,
+    ...previous.hookParents === undefined ? {} : { hookParents: previous.hookParents },
     skills: previous.skills
   };
   const currentProjection = {
@@ -34214,20 +34405,41 @@ function assertCodexSemanticCacheWitnessUnchanged(previous, current) {
     cacheRoot: current.cacheRoot,
     controls: current.controls,
     appOnlyParents: current.appOnlyParents,
+    ...current.hookParents === undefined ? {} : { hookParents: current.hookParents },
     skills: current.skills
   };
-  if (hash3(priorProjection) !== previous.sha256 || hash3(currentProjection) !== current.sha256 || canonical7(priorProjection) !== canonical7(currentProjection))
+  const comparable = (projection) => ({ ...projection, hookParents: projection.hookParents ?? [] });
+  if (hash3(priorProjection) !== previous.sha256 || hash3(currentProjection) !== current.sha256 || canonical7(comparable(priorProjection)) !== canonical7(comparable(currentProjection)))
     refuse3();
 }
 var CODEX_SEMANTIC_CACHE_WITNESS_SCHEMA = "hasna.codex-semantic-cache-witness.v1", identifier3 = (value) => typeof value === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(value), digest = (value) => typeof value === "string" && /^[a-f0-9]{64}$/.test(value), refuse3 = () => {
   throw new Error("CODEX_SEMANTIC_CACHE_WITNESS_UNSUPPORTED: review Codex plugin cache identity and controls");
-}, MAX_DOCUMENT_BYTES, MAX_RECEIPT_BYTES;
+}, MAX_DOCUMENT_BYTES, MAX_RECEIPT_BYTES, codexHookEvents;
 var init_codex_semantic_cache_witness = __esm(() => {
   init_claude_settings_witness();
   init_codex_plugin_skill_controls();
   init_codex_native_skill_catalog();
   MAX_DOCUMENT_BYTES = 1024 * 1024;
   MAX_RECEIPT_BYTES = 16 * 1024;
+  codexHookEvents = new Set([
+    "SessionStart",
+    "UserPromptSubmit",
+    "PreToolUse",
+    "PostToolUse",
+    "PostToolUseFailure",
+    "Stop",
+    "SubagentStart",
+    "SubagentStop",
+    "PreCompact",
+    "Notification",
+    "PermissionRequest",
+    "SessionEnd",
+    "ConfigChange",
+    "WorktreeCreate",
+    "WorktreeRemove",
+    "TeammateIdle",
+    "TaskComplete"
+  ]);
 });
 
 // src/lib/managed-policy.ts
@@ -34337,6 +34549,79 @@ var init_agent_bridge = __esm(() => {
 // src/lib/agent-codex.ts
 var init_agent_codex = () => {};
 
+// src/lib/hook-diagnostics.ts
+var CONTEXT_ERROR_CODES, HOOK_REFUSAL_REASON_CODES, OPTIONAL_CONTEXT_FAILURES;
+var init_hook_diagnostics = __esm(() => {
+  CONTEXT_ERROR_CODES = new Set([
+    "SKILLS_API_CREDENTIAL_UNAVAILABLE",
+    "SKILLS_API_UNAVAILABLE",
+    "SKILLS_API_UNAUTHORIZED",
+    "SKILLS_API_FORBIDDEN",
+    "SKILLS_API_RESOURCE_UNAVAILABLE",
+    "SESSION_WRITE_BUSY",
+    "SKILLS_CONTEXT_FAILED",
+    "SKILLS_STORAGE_FULL",
+    "PROFILE_LOCK_MISMATCH",
+    "PROFILE_IDENTITY_MISMATCH",
+    "PROFILE_APPLIED_REPORT_FAILED",
+    "CACHED_AUTHORITY_REQUIRED",
+    "CACHED_PROFILE_EXPIRED",
+    "CACHED_PROFILE_MISSING",
+    "CACHED_BUNDLE_MISSING",
+    "INVALID_CONTEXT_INPUT",
+    "CONTEXT_INPUT_TOO_LARGE",
+    "INVALID_CONTEXT_BUDGET",
+    "INVALID_SELECTION",
+    "INVALID_SELECTION_ALIASES",
+    "INVALID_RECEIPT",
+    "INVALID_CACHE_FILE",
+    "UNSAFE_CACHE_PATH",
+    "RECEIPT_TOO_LARGE",
+    "BUNDLE_DIGEST_MISMATCH",
+    "BUNDLE_IDENTITY_MISMATCH",
+    "BUNDLE_UNAVAILABLE",
+    "BUNDLE_TOO_LARGE",
+    "SKILL_NOT_SELECTED",
+    "INVALID_SESSION",
+    "SESSION_PARENT_NOT_FOUND",
+    "SESSION_PARENT_MISMATCH",
+    "SESSION_NOT_FOUND",
+    "SESSION_GENERATION_CHANGED",
+    "SESSION_GENERATION_EXHAUSTED",
+    "SESSION_PARENT_CHANGED",
+    "SESSION_RECEIPT_CHANGED",
+    "SESSION_RECONCILIATION_REQUIRED",
+    "SESSION_RENEWAL_TIMEOUT",
+    "SESSION_CONTEXT_CONFLICT",
+    "SESSION_RECONCILIATION_INCOMPLETE",
+    "SESSION_WRITE_LOCKED",
+    "SESSION_WRITE_LOCK_CHANGED",
+    "SESSION_LOCK_RECOVERY_INCOMPLETE"
+  ]);
+  HOOK_REFUSAL_REASON_CODES = Object.freeze([
+    ...CONTEXT_ERROR_CODES,
+    "SKILLS_HOOK_FAILED",
+    "SKILLS_HOOK_TIMEOUT",
+    "SKILLS_HOOK_INVALID_RESPONSE"
+  ]);
+  OPTIONAL_CONTEXT_FAILURES = new Set([
+    "SKILLS_API_CREDENTIAL_UNAVAILABLE",
+    "SKILLS_API_UNAVAILABLE",
+    "SKILLS_API_UNAUTHORIZED",
+    "SKILLS_API_FORBIDDEN",
+    "SKILLS_API_RESOURCE_UNAVAILABLE",
+    "CACHED_PROFILE_EXPIRED",
+    "CACHED_PROFILE_MISSING",
+    "CACHED_BUNDLE_MISSING",
+    "SESSION_RECONCILIATION_REQUIRED",
+    "SESSION_RENEWAL_TIMEOUT",
+    "SESSION_WRITE_BUSY",
+    "SESSION_PARENT_CHANGED",
+    "SESSION_CONTEXT_CONFLICT",
+    "SKILLS_HOOK_TIMEOUT"
+  ]);
+});
+
 // src/lib/agent-sumi.ts
 import { spawnSync as spawnSync4 } from "child_process";
 import { accessSync, constants as constants9, existsSync as existsSync8, lstatSync as lstatSync15, realpathSync as realpathSync7, statSync as statSync7 } from "fs";
@@ -34464,6 +34749,7 @@ function sumiConfigPath(home, cwd = process.cwd(), env = process.env) {
 }
 var SUMI_PATH_SELECTORS, SUMI_PATH_KEYS, SUMI_PATH_OUTPUT_LIMIT, SumiPathResolverError;
 var init_agent_sumi = __esm(() => {
+  init_hook_diagnostics();
   SUMI_PATH_SELECTORS = ["SUMI_HOME", "SUMI_CONFIG_DIR", "XDG_DATA_HOME", "XDG_CACHE_HOME", "XDG_CONFIG_HOME", "XDG_STATE_HOME"];
   SUMI_PATH_KEYS = ["data", "cache", "config", "state"];
   SUMI_PATH_OUTPUT_LIMIT = 128 * 1024;
@@ -35904,7 +36190,7 @@ var init_plugin_admission = __esm(() => {
 
 // src/lib/plugin-discovery.ts
 import { closeSync as closeSync15, constants as constants13, fstatSync as fstatSync15, lstatSync as lstatSync19, openSync as openSync15, opendirSync as opendirSync3, readSync as readSync10 } from "fs";
-import { basename as basename7, dirname as dirname17, isAbsolute as isAbsolute17, join as join28, resolve as resolve18 } from "path";
+import { basename as basename8, dirname as dirname17, isAbsolute as isAbsolute17, join as join28, resolve as resolve18 } from "path";
 function validateManagedPluginWitnesses(value) {
   pluginNeed(Array.isArray(value) && value.length > 0 && value.length <= PLUGIN_PROJECTION_LIMITS.registrations, "Invalid managed plugin witness collection");
   const seen = new Set;
@@ -35987,7 +36273,7 @@ function hashManagedPluginRegistry(path, managed) {
       pluginNeed(/^(?:[A-Za-z0-9][A-Za-z0-9._+-]*-)?[a-f0-9]{12}$/.test(row.version) && row.installPath === join28(cacheRoot, row.version), "Managed plugin cache path or version is outside its registration");
       const approval = (producer) => {
         pluginText(producer);
-        const digest2 = `sha256:${basename7(producer)}`;
+        const digest2 = `sha256:${basename8(producer)}`;
         const receipt2 = readPluginAdmissionReceipt(witness.storeRoot, witness.bindingId, digest2);
         pluginNeed(receipt2.materializedPath === producer, "Managed producer path is not an approved immutable projection");
         if (!verified.has(producer)) {
@@ -36053,7 +36339,7 @@ var init_plugin_discovery = __esm(() => {
 // src/lib/claude-marketplace-registry.ts
 import { createHash as createHash19 } from "crypto";
 import { closeSync as closeSync16, constants as constants14, fstatSync as fstatSync16, lstatSync as lstatSync20, openSync as openSync16, readSync as readSync11 } from "fs";
-import { basename as basename8, dirname as dirname18, isAbsolute as isAbsolute18, resolve as resolve19 } from "path";
+import { basename as basename9, dirname as dirname18, isAbsolute as isAbsolute18, resolve as resolve19 } from "path";
 function need8(value, reason2) {
   if (!value)
     throw new Error(`Claude marketplace registry ${reason2}`);
@@ -36073,7 +36359,7 @@ function parents2(path) {
 }
 function readRegistry2(path, budget2) {
   absolutePath4(path);
-  need8(basename8(path) === "known_marketplaces.json", "requires known_marketplaces.json");
+  need8(basename9(path) === "known_marketplaces.json", "requires known_marketplaces.json");
   need8(Number.isSafeInteger(budget2.remaining) && budget2.remaining >= 0, "has an invalid byte budget");
   const ancestors2 = parents2(path), initial = lstatSync20(path, { bigint: true });
   need8(initial.isFile() && !initial.isSymbolicLink() && initial.size <= BigInt(CLAUDE_MARKETPLACE_REGISTRY_LIMITS.bytes), "is not a bounded regular file");
@@ -36281,7 +36567,7 @@ var init_codex_hook_discovery_recovery = __esm(() => {
 // src/lib/agent-discovery.ts
 import { createHash as createHash21 } from "crypto";
 import { lstatSync as lstatSync21, readFileSync as readFileSync16, readdirSync as readdirSync8, realpathSync as realpathSync8 } from "fs";
-import { basename as basename9, dirname as dirname19, isAbsolute as isAbsolute19, join as join29, relative as relative7, resolve as resolve20, sep as sep9 } from "path";
+import { basename as basename10, dirname as dirname19, isAbsolute as isAbsolute19, join as join29, relative as relative7, resolve as resolve20, sep as sep9 } from "path";
 import { isDeepStrictEqual as isDeepStrictEqual4 } from "util";
 function discoveryExecutable(agent) {
   const command = DISCOVERY_RUNTIME_COMMANDS[agent];
@@ -36348,7 +36634,7 @@ function assertReviewedClaudeCacheClosures(home, config2, review, canonical9) {
         throw new Error("Reviewed Claude enabled plugin registration requires an object with an installPath string");
       }
       if ([cacheAliasRoot, cacheRoot].some((root) => row.installPath === root || row.installPath.startsWith(root + sep9))) {
-        if (!cachePath(row.installPath) || row.installPath.length > AGENT_POLICY_LIMITS.pathCharacters || row.version !== undefined && (typeof row.version !== "string" || basename9(row.installPath) !== row.version)) {
+        if (!cachePath(row.installPath) || row.installPath.length > AGENT_POLICY_LIMITS.pathCharacters || row.version !== undefined && (typeof row.version !== "string" || basename10(row.installPath) !== row.version)) {
           throw new Error("Reviewed Claude discovery has a malformed active cache registration");
         }
         if (row.scope === "user" && (row.projectPath === undefined || row.projectPath === null)) {} else if (row.scope === "project" && typeof row.projectPath === "string" && isAbsolute19(row.projectPath) && resolve20(row.projectPath) === row.projectPath && row.projectPath.length <= AGENT_POLICY_LIMITS.pathCharacters) {} else
@@ -36610,7 +36896,7 @@ function absentRetiredClaudeRoots(binding) {
     if (!targetValid || !targetScopes.has("user\x00"))
       continue;
     const active = rows[0]?.installPath;
-    if (typeof active !== "string" || rows[0]?.version !== basename9(active) || dirname19(active) !== dirname19(root) || active === root || !lstatSync21(active, { throwIfNoEntry: false })?.isDirectory() || realpathSync8(active) !== active)
+    if (typeof active !== "string" || rows[0]?.version !== basename10(active) || dirname19(active) !== dirname19(root) || active === root || !lstatSync21(active, { throwIfNoEntry: false })?.isDirectory() || realpathSync8(active) !== active)
       continue;
     const activeManifest = full(join29(active, ".claude-plugin/plugin.json"));
     if (!activeManifest || projected(activeManifest) !== activeManifest.sha256)
@@ -36619,14 +36905,15 @@ function absentRetiredClaudeRoots(binding) {
   }
   return [...result];
 }
-function codexSemanticCacheSourceRole(source, cacheRoot, parents3) {
+function codexSemanticCacheSourceRole(source, cacheRoot, parents3, hookParents = []) {
   if (!isAbsolute19(source.path) || resolve20(source.path) !== source.path || /[\x00-\x1f\x7f]/.test(source.path) || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.reviewArtifact !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes")
     return false;
   const parts = relative7(cacheRoot, source.path).split(sep9);
   if (parts.length < 3 || !parents3.includes(join29(cacheRoot, parts[0], parts[1])))
     return false;
   const tail = parts.slice(3).join("/");
-  return parts.length === 5 && tail === ".codex-plugin/plugin.json" && source.sha256 !== null || parts.length === 4 && [".app.json", ".mcp.json"].includes(tail) && source.sha256 !== null || source.sha256 === null && (parts.length === 4 && tail === "SKILL.md" || parts.length === 5 && tail === "hooks/hooks.json");
+  const parent = join29(cacheRoot, parts[0], parts[1]);
+  return parts.length === 5 && tail === ".codex-plugin/plugin.json" && source.sha256 !== null || parts.length === 4 && [".app.json", ".mcp.json"].includes(tail) && source.sha256 !== null || parts.length === 5 && tail === "hooks/hooks.json" && hookParents.includes(parent) && source.sha256 !== null || source.sha256 === null && (parts.length === 4 && tail === "SKILL.md" || parts.length === 5 && tail === "hooks/hooks.json");
 }
 function codexSemanticCacheDirectoryRole(path, cacheRoot) {
   return isAbsolute19(path) && resolve20(path) === path && !/[\x00-\x1f\x7f]/.test(path) && (path === cacheRoot || path.startsWith(cacheRoot + sep9));
@@ -36658,20 +36945,28 @@ function verifyCodexSemanticCacheDiscovery(binding, reviewedRootAliases) {
   const cacheRoot = proof.witness.cacheRoot;
   if (controls.some((control) => dirname19(dirname19(control.pluginParent)) !== cacheRoot))
     throw new Error("Codex semantic cache names another enrolled cache");
-  const parents3 = [...new Set([...controls.map((control) => control.pluginParent), ...proof.appOnlyParents.map((parent) => parent.pluginParent)])];
-  const sources = binding.sources.filter((source) => codexSemanticCacheSourceRole(source, cacheRoot, parents3));
+  const reviewedHookParents = proof.reviewedHookParents ?? [];
+  if (!Array.isArray(reviewedHookParents) || reviewedHookParents.length > 4096 || reviewedHookParents.some((parent) => !parent || !(parent.installation === "remote-receipt" && Object.keys(parent).sort().join(",") === "installation,namespace,pluginId,pluginParent,remotePluginId,role" && typeof parent.remotePluginId === "string" || parent.installation === "local-marketplace" && Object.keys(parent).sort().join(",") === "installation,marketplaceSha256,marketplaceSourcePath,namespace,pluginId,pluginParent,role" && typeof parent.marketplaceSourcePath === "string" && /^[a-f0-9]{64}$/.test(parent.marketplaceSha256 ?? "")) || parent.role !== "reviewed-hook" || typeof parent.pluginId !== "string" || typeof parent.namespace !== "string" || typeof parent.pluginParent !== "string") || new Set(reviewedHookParents.map((parent) => parent.pluginParent)).size !== reviewedHookParents.length || !isDeepStrictEqual4((proof.witness.hookParents ?? []).map(({ manifestSha256: _manifest, hooksSha256: _hooks, receiptSha256: _receipt, ...parent }) => parent), reviewedHookParents)) {
+    throw new Error("Invalid reviewed native-hook cache role");
+  }
+  for (const parent of reviewedHookParents)
+    if (parent.installation === "local-marketplace" && !binding.sources.some((source) => source.path === parent.marketplaceSourcePath && source.sha256 === parent.marketplaceSha256 && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.reviewArtifact === undefined && (source.hashMode === undefined || source.hashMode === "bytes")))
+      throw new Error("Local marketplace hook parent lost its enrolled source witness");
+  const parents3 = [...new Set([...controls.map((control) => control.pluginParent), ...proof.appOnlyParents.map((parent) => parent.pluginParent), ...reviewedHookParents.map((parent) => parent.pluginParent)])];
+  const hookParentPaths = reviewedHookParents.map((parent) => parent.pluginParent);
+  const sources = binding.sources.filter((source) => codexSemanticCacheSourceRole(source, cacheRoot, parents3, hookParentPaths));
   const directories = (binding.directories ?? []).filter((directory) => codexSemanticCacheDirectoryRole(directory.path, cacheRoot));
   if (!directories.length || !isDeepStrictEqual4(sources, proof.supersededSources) || !isDeepStrictEqual4(directories, proof.supersededDirectories))
     throw new Error("Codex semantic cache provenance changed");
   const configPath = proof.configPath;
-  if (!isAbsolute19(configPath) || resolve20(configPath) !== configPath || basename9(configPath) !== "config.toml" || /[\x00-\x1f\x7f]/.test(configPath))
+  if (!isAbsolute19(configPath) || resolve20(configPath) !== configPath || basename10(configPath) !== "config.toml" || /[\x00-\x1f\x7f]/.test(configPath))
     throw new Error("Invalid semantic cache configuration source");
   const configSource = binding.sources.find((source) => source.path === configPath && source.sha256 !== null && source.format === undefined && source.fields === undefined);
   if (!configSource || projected(configSource) !== configSource.sha256)
     throw new Error("Codex semantic cache requires unchanged reviewed configuration");
   assertCodexSemanticCacheHookSafety(cacheRoot, parents3, configPath, proof.hookRootAlias);
   const rules = parseConfig(read(configPath), configPath, true).skills?.config ?? [];
-  const current = captureCodexSemanticCacheWitness({ cacheRoot, controls, appOnlyParents: proof.appOnlyParents, rules });
+  const current = captureCodexSemanticCacheWitness({ cacheRoot, controls, appOnlyParents: proof.appOnlyParents, reviewedHookParents, rules });
   assertCodexSemanticCacheWitnessUnchanged(proof.witness, current);
   return proof;
 }
@@ -36755,7 +37050,7 @@ function codexInstallationRoots(binding) {
   const config2 = join29(dirname19(dirname19(cache)), "config.toml"), home = dirname19(dirname19(dirname19(cache)));
   const configSource = binding.sources.find((source) => source.path === config2 && source.sha256 !== null && (!source.format || source.format === "toml" && source.fields?.includes("plugins")));
   const nativeRoots = NATIVE_SKILL_ROOTS.filter(([agent]) => agent === "codex").map(([, path]) => join29(home, path));
-  if (!configSource || proof.plugins.some((input2) => nativeRoots.some((root) => root === input2.sourceRoot || root.startsWith(input2.sourceRoot + sep9) || input2.sourceRoot.startsWith(root + sep9)) || binding.sources.some((source) => basename9(source.path) === "config.toml" && (source.path === input2.sourceRoot || source.path.startsWith(input2.sourceRoot + sep9)))))
+  if (!configSource || proof.plugins.some((input2) => nativeRoots.some((root) => root === input2.sourceRoot || root.startsWith(input2.sourceRoot + sep9) || input2.sourceRoot.startsWith(root + sep9)) || binding.sources.some((source) => basename10(source.path) === "config.toml" && (source.path === input2.sourceRoot || source.path.startsWith(input2.sourceRoot + sep9)))))
     throw new Error("Native installation input overlaps configuration or loading roots");
   if (proof.plugins.some((input2) => dirname19(dirname19(input2.pluginParent)) !== cache || !binding.sources.some((source) => source.path === join29(input2.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined)))
     throw new Error("Missing native installation input source witness");
@@ -36767,13 +37062,13 @@ function codexInstallationRoots(binding) {
   });
 }
 function assertMarketplaceBinding(binding, source) {
-  if (source.hashMode === "claude-plugin-manifest-v1" && (binding.agent !== "claude" || basename9(source.path) !== "plugin.json" || !source.path.endsWith(join29(sep9, ".claude-plugin", "plugin.json"))))
+  if (source.hashMode === "claude-plugin-manifest-v1" && (binding.agent !== "claude" || basename10(source.path) !== "plugin.json" || !source.path.endsWith(join29(sep9, ".claude-plugin", "plugin.json"))))
     throw new Error("Claude plugin manifest witnesses require Claude plugin discovery");
-  if (source.hashMode === "sumi-settings-v1" && (binding.agent !== "sumi" || binding.method !== "reviewed" || basename9(source.path) !== "sumi.json"))
+  if (source.hashMode === "sumi-settings-v1" && (binding.agent !== "sumi" || binding.method !== "reviewed" || basename10(source.path) !== "sumi.json"))
     throw new Error("Sumi settings witnesses require explicit reviewed Sumi configuration");
-  if ((source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4" || source.hashMode === "codex-settings-v5")) && (binding.agent !== "codex" || binding.method !== "reviewed" || basename9(source.path) !== "config.toml"))
+  if ((source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4" || source.hashMode === "codex-settings-v5")) && (binding.agent !== "codex" || binding.method !== "reviewed" || basename10(source.path) !== "config.toml"))
     throw new Error("Codex settings witnesses require explicit reviewed Codex configuration");
-  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4")) && (binding.agent !== "claude" || binding.method !== "reviewed" || basename9(source.path) !== "settings.json"))
+  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4")) && (binding.agent !== "claude" || binding.method !== "reviewed" || basename10(source.path) !== "settings.json"))
     throw new Error("Claude settings witnesses require explicit reviewed Claude configuration");
   if ((source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2") && (binding.agent !== "claude" || binding.method !== "reviewed"))
     throw new Error("Claude marketplace witnesses require explicit reviewed Claude discovery");
@@ -36922,7 +37217,7 @@ function resolveAgentDiscovery(options) {
       throw new Error("Discovery review must include the agent configuration source");
     const reviewedSources = supersedesSettingsProjection(agent, review.sources, canonical9(configPath)) ? sources.filter((source) => !isSupersededSettingsProjection(agent, canonical9(configPath), source)) : sources;
     const reviewedSourcesWithManifestProjection = review.sources.map((source) => {
-      if (agent !== "claude" || source.sha256 === null || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes" || basename9(source.path) !== "plugin.json" || !source.path.endsWith(join29(sep9, ".claude-plugin", "plugin.json")))
+      if (agent !== "claude" || source.sha256 === null || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes" || basename10(source.path) !== "plugin.json" || !source.path.endsWith(join29(sep9, ".claude-plugin", "plugin.json")))
         return source;
       const pluginRoot = dirname19(dirname19(source.path)), hooksPath = join29(pluginRoot, "hooks/hooks.json");
       const hookStat = lstatSync21(hooksPath, { throwIfNoEntry: false });
@@ -37102,7 +37397,7 @@ var init_agent_discovery = __esm(() => {
 // src/lib/authoring-path.ts
 import { lstatSync as lstatSync22, realpathSync as realpathSync9 } from "fs";
 import { homedir as homedir3 } from "os";
-import { basename as basename10, dirname as dirname20, join as join30, resolve as resolve21, sep as sep10 } from "path";
+import { basename as basename11, dirname as dirname20, join as join30, resolve as resolve21, sep as sep10 } from "path";
 function pathParts(path) {
   return resolve21(path).split(sep10).filter(Boolean);
 }
@@ -37121,7 +37416,7 @@ function physicalPath(path) {
   let cursor = resolve21(path);
   const suffix = [];
   while (!lstatSync22(cursor, { throwIfNoEntry: false })) {
-    suffix.unshift(basename10(cursor));
+    suffix.unshift(basename11(cursor));
     const parent = dirname20(cursor);
     if (parent === cursor)
       return resolve21(path);
@@ -37216,7 +37511,7 @@ import {
   statSync as statSync8,
   writeFileSync as writeFileSync6
 } from "fs";
-import { basename as basename11, dirname as dirname21, isAbsolute as isAbsolute20, join as join31, normalize as normalize4, relative as relative8, resolve as resolve22, sep as sep11 } from "path";
+import { basename as basename12, dirname as dirname21, isAbsolute as isAbsolute20, join as join31, normalize as normalize4, relative as relative8, resolve as resolve22, sep as sep11 } from "path";
 function getPortableSkillsRoot(options = {}) {
   return resolvePortableSkillsRoot(options, true);
 }
@@ -37314,7 +37609,7 @@ function physicalImportPath(path) {
   let ancestor = resolve22(path);
   const suffix = [];
   while (!existsSync12(ancestor)) {
-    suffix.unshift(basename11(ancestor));
+    suffix.unshift(basename12(ancestor));
     ancestor = dirname21(ancestor);
   }
   return join31(realpathSync10(ancestor), ...suffix);
@@ -37339,8 +37634,8 @@ function portPortableSkill(sourcePath, options = {}) {
   const explicitName = options.name != null;
   const skillName = normalizeNewPortableSkillName(options.name ?? inferred.name);
   if (isOfficialSkillName(skillName) && !options.allowShadow) {
-    const sourceSlug = safeNormalizeName(basename11(absoluteSource));
-    const via = explicitName ? `Name '${skillName}' matches a bundled official skill.` : `Inferred name '${skillName}'${sourceSlug && sourceSlug !== skillName ? ` (from source folder '${basename11(absoluteSource)}')` : ""} matches a bundled official skill.`;
+    const sourceSlug = safeNormalizeName(basename12(absoluteSource));
+    const via = explicitName ? `Name '${skillName}' matches a bundled official skill.` : `Inferred name '${skillName}'${sourceSlug && sourceSlug !== skillName ? ` (from source folder '${basename12(absoluteSource)}')` : ""} matches a bundled official skill.`;
     throw new Error(`${via} Importing it would shadow the official '${skillName}'. ` + `Pass --name to choose a different name, or --allow-shadow to override deliberately.`);
   }
   const readOnlyDestination = join31(resolvePortableSkillsRoot(options, false), skillName);
@@ -38969,13 +39264,13 @@ var init_remote_workspace_leave = __esm(() => {
 
 // src/lib/auth-store.ts
 import { chmodSync, existsSync as existsSync14, mkdirSync as mkdirSync9, readFileSync as readFileSync18, renameSync as renameSync4, statSync as statSync9, unlinkSync as unlinkSync4, writeFileSync as writeFileSync7 } from "fs";
-import { basename as basename12, dirname as dirname22, join as join33 } from "path";
+import { basename as basename13, dirname as dirname22, join as join33 } from "path";
 function getAuthFilePath(env = process.env) {
   return skillsCredentialFilePath(env);
 }
 function getIdentityFilePath(env = process.env) {
   const file2 = skillsCredentialFilePath(env);
-  return join33(dirname22(file2), basename12(file2).replace(/^credentials/, "identity") + ".json");
+  return join33(dirname22(file2), basename13(file2).replace(/^credentials/, "identity") + ".json");
 }
 function getApiUrl(action, env = process.env, options = {}) {
   return requireSkillsApiOrigin(action, env, options);