@hasna/skills 0.10.65 → 0.10.66

package/bin/index.js

@@ -36888,7 +36888,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.65",
+    version: "0.10.66",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -40633,8 +40633,8 @@ function assertAgentPolicyCollections(policy) {
         }
     }
     if (value.codexSemanticCache !== undefined) {
-      const proof = record(value.codexSemanticCache, 8), witness = record(proof.witness, 6);
-      requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && Object.keys(proof).length === 8 && proof.schema === "hasna.codex-semantic-cache-discovery.v1" && typeof proof.previousPolicySha256 === "string" && /^[a-f0-9]{64}$/.test(proof.previousPolicySha256) && Object.keys(witness).length === 6 && witness.schema === "hasna.codex-semantic-cache-witness.v1" && typeof witness.sha256 === "string" && /^[a-f0-9]{64}$/.test(witness.sha256));
+      const proof = record(value.codexSemanticCache, 9), witness = record(proof.witness, 7);
+      requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && [8, 9].includes(Object.keys(proof).length) && Object.keys(proof).every((key) => ["schema", "configPath", "hookRootAlias", "witness", "appOnlyParents", "previousPolicySha256", "supersededSources", "supersededDirectories", "reviewedHookParents"].includes(key)) && proof.schema === "hasna.codex-semantic-cache-discovery.v1" && typeof proof.previousPolicySha256 === "string" && /^[a-f0-9]{64}$/.test(proof.previousPolicySha256) && [6, 7].includes(Object.keys(witness).length) && Object.keys(witness).every((key) => ["schema", "cacheRoot", "controls", "appOnlyParents", "skills", "sha256", "hookParents"].includes(key)) && witness.schema === "hasna.codex-semantic-cache-witness.v1" && typeof witness.sha256 === "string" && /^[a-f0-9]{64}$/.test(witness.sha256));
       text(proof.configPath);
       requireBound(isAbsolute4(proof.configPath) && resolve5(proof.configPath) === proof.configPath && basename4(proof.configPath) === "config.toml");
       text(witness.cacheRoot);
@@ -40653,6 +40653,20 @@ function assertAgentPolicyCollections(policy) {
           text(parent[key]);
         requireBound(isAbsolute4(parent.pluginParent) && resolve5(parent.pluginParent) === parent.pluginParent);
       }
+      if (proof.reviewedHookParents !== undefined)
+        for (const parent of array(proof.reviewedHookParents, 4096)) {
+          requireBound(object(parent) && parent.role === "reviewed-hook" && (parent.installation === "remote-receipt" && Object.keys(parent).length === 6 || parent.installation === "local-marketplace" && Object.keys(parent).length === 7));
+          requireBound(parent.installation === "remote-receipt" ? Object.keys(parent).sort().join(",") === "installation,namespace,pluginId,pluginParent,remotePluginId,role" : Object.keys(parent).sort().join(",") === "installation,marketplaceSha256,marketplaceSourcePath,namespace,pluginId,pluginParent,role");
+          for (const key of ["pluginId", "namespace", "pluginParent", "installation"])
+            text(parent[key]);
+          if (parent.installation === "remote-receipt")
+            text(parent.remotePluginId);
+          else {
+            text(parent.marketplaceSourcePath);
+            requireBound(typeof parent.marketplaceSha256 === "string" && /^[a-f0-9]{64}$/.test(parent.marketplaceSha256) && isAbsolute4(parent.marketplaceSourcePath) && resolve5(parent.marketplaceSourcePath) === parent.marketplaceSourcePath && basename4(parent.marketplaceSourcePath) === "marketplace.json");
+          }
+          requireBound(isAbsolute4(parent.pluginParent) && resolve5(parent.pluginParent) === parent.pluginParent);
+        }
       for (const row of [...array(witness.controls, 4096), ...array(witness.appOnlyParents, 4096)]) {
         requireBound(object(row));
         for (const key of ["pluginId", "namespace", "pluginParent"])
@@ -40661,6 +40675,26 @@ function assertAgentPolicyCollections(policy) {
           if (row[key] !== undefined)
             requireBound(typeof row[key] === "string" && /^[a-f0-9]{64}$/.test(row[key]));
       }
+      if (witness.hookParents !== undefined)
+        for (const row of array(witness.hookParents, 4096)) {
+          requireBound(object(row) && row.role === "reviewed-hook" && (row.installation === "remote-receipt" && Object.keys(row).length === 9 || row.installation === "local-marketplace" && Object.keys(row).length === 9));
+          requireBound(row.installation === "remote-receipt" ? Object.keys(row).sort().join(",") === "hooksSha256,installation,manifestSha256,namespace,pluginId,pluginParent,receiptSha256,remotePluginId,role" : Object.keys(row).sort().join(",") === "hooksSha256,installation,manifestSha256,marketplaceSha256,marketplaceSourcePath,namespace,pluginId,pluginParent,role");
+          for (const key of ["pluginId", "namespace", "pluginParent", "installation"])
+            text(row[key]);
+          if (row.installation === "remote-receipt")
+            text(row.remotePluginId);
+          else {
+            text(row.marketplaceSourcePath);
+            requireBound(typeof row.marketplaceSha256 === "string" && /^[a-f0-9]{64}$/.test(row.marketplaceSha256) && isAbsolute4(row.marketplaceSourcePath) && resolve5(row.marketplaceSourcePath) === row.marketplaceSourcePath && basename4(row.marketplaceSourcePath) === "marketplace.json");
+          }
+          requireBound(isAbsolute4(row.pluginParent) && resolve5(row.pluginParent) === row.pluginParent);
+          for (const key of ["manifestSha256", "hooksSha256"])
+            requireBound(typeof row[key] === "string" && /^[a-f0-9]{64}$/.test(row[key]));
+          if (row.installation === "remote-receipt")
+            requireBound(typeof row.receiptSha256 === "string" && /^[a-f0-9]{64}$/.test(row.receiptSha256));
+          else
+            requireBound(row.receiptSha256 === undefined);
+        }
       for (const skill of array(witness.skills, 4096)) {
         requireBound(object(skill));
         for (const key of ["name", "pluginId", "namespace", "pluginParent"])
@@ -53789,7 +53823,25 @@ var init_codex_settings_witness = __esm(() => {
 // src/lib/codex-semantic-cache-witness.ts
 import { createHash as createHash17 } from "crypto";
 import { constants as constants10, closeSync as closeSync9, fstatSync as fstatSync9, lstatSync as lstatSync16, openSync as openSync9, readSync as readSync7, readdirSync as readdirSync7, realpathSync as realpathSync8 } from "fs";
-import { dirname as dirname15, isAbsolute as isAbsolute15, join as join25, relative as relative6, resolve as resolve15, sep as sep7 } from "path";
+import { basename as basename9, dirname as dirname15, isAbsolute as isAbsolute15, join as join25, relative as relative6, resolve as resolve15, sep as sep7 } from "path";
+function codexLocalMarketplaceMapsPlugin(text2, marketplace, plugin) {
+  try {
+    hashNativeJsonControls(text2);
+    const value = JSON.parse(text2);
+    if (!plainObject(value) || !exactKeys(value, ["interface", "name", "plugins"]) || value.name !== marketplace || !(typeof value.interface === "string" || Number.isSafeInteger(value.interface)) || !Array.isArray(value.plugins) || value.plugins.length < 1 || value.plugins.length > 4096)
+      return false;
+    const rows = value.plugins.filter((row2) => plainObject(row2) && row2.name === plugin);
+    if (rows.length !== 1)
+      return false;
+    const row = rows[0];
+    if (!exactKeys(row, ["name", "source"]) || !plainObject(row.source) || !exactKeys(row.source, ["source", "path"]) || row.source.source !== "local" || typeof row.source.path !== "string" || !row.source.path.startsWith("./") || row.source.path.includes("\\"))
+      return false;
+    const parts = row.source.path.split("/");
+    return parts[0] === "." && parts.length > 1 && parts.slice(1).every((part) => /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(part)) && parts.at(-1) === plugin;
+  } catch {
+    return false;
+  }
+}
 function defaultRead(path) {
   const before2 = lstatSync16(path, { throwIfNoEntry: false, bigint: true });
   if (before2 === undefined)
@@ -53851,7 +53903,7 @@ function validPluginParent(cacheRoot, pluginParent, namespace, pluginId) {
   return parts.length === 2 && parts.every(identifier3) && parts[1] === namespace && pluginId === `${namespace}@${parts[0]}`;
 }
 function assertWitnessShape(value) {
-  if (!plainObject(value) || !exactKeys(value, ["schema", "cacheRoot", "controls", "appOnlyParents", "skills", "sha256"]) || value.schema !== CODEX_SEMANTIC_CACHE_WITNESS_SCHEMA || typeof value.cacheRoot !== "string" || !isAbsolute15(value.cacheRoot) || resolve15(value.cacheRoot) !== value.cacheRoot || !digest(value.sha256) || !Array.isArray(value.controls) || value.controls.length === 0 || value.controls.length > 4096 || !Array.isArray(value.appOnlyParents) || value.appOnlyParents.length > 4096 || !Array.isArray(value.skills) || value.skills.length === 0 || value.skills.length > 4096)
+  if (!plainObject(value) || !exactKeys(value, ["schema", "cacheRoot", "controls", "appOnlyParents", "skills", "sha256"], ["hookParents"]) || value.schema !== CODEX_SEMANTIC_CACHE_WITNESS_SCHEMA || typeof value.cacheRoot !== "string" || !isAbsolute15(value.cacheRoot) || resolve15(value.cacheRoot) !== value.cacheRoot || !digest(value.sha256) || !Array.isArray(value.controls) || value.controls.length === 0 || value.controls.length > 4096 || !Array.isArray(value.appOnlyParents) || value.appOnlyParents.length > 4096 || !Array.isArray(value.skills) || value.skills.length === 0 || value.skills.length > 4096)
     refuse4();
   const witness = value;
   const controlParents = new Set;
@@ -53872,6 +53924,20 @@ function assertWitnessShape(value) {
       refuse4();
     appOnlyParentPaths.add(row.pluginParent);
   }
+  const hookParentPaths = new Set;
+  const hookParents = witness.hookParents === undefined ? [] : witness.hookParents;
+  if (!Array.isArray(hookParents) || hookParents.length > 4096)
+    refuse4();
+  for (const candidate of hookParents) {
+    if (!plainObject(candidate))
+      refuse4();
+    const row = candidate;
+    const remote = row.installation === "remote-receipt";
+    const local = row.installation === "local-marketplace";
+    if (!exactKeys(row, ["role", "pluginId", "namespace", "pluginParent", "installation", "manifestSha256", "hooksSha256"], remote ? ["remotePluginId", "receiptSha256"] : local ? ["marketplaceSourcePath", "marketplaceSha256"] : []) || row.role !== "reviewed-hook" || !identifier3(row.namespace) || typeof row.pluginId !== "string" || !/^[A-Za-z0-9_-]{1,64}@[A-Za-z0-9_-]{1,64}$/.test(row.pluginId) || typeof row.pluginParent !== "string" || !validPluginParent(String(witness.cacheRoot), row.pluginParent, row.namespace, row.pluginId) || remote && (typeof row.remotePluginId !== "string" || !/^[A-Za-z0-9_~-]{1,1024}$/.test(row.remotePluginId) || !digest(row.receiptSha256)) || local && (typeof row.marketplaceSourcePath !== "string" || !isAbsolute15(row.marketplaceSourcePath) || resolve15(row.marketplaceSourcePath) !== row.marketplaceSourcePath || basename9(row.marketplaceSourcePath) !== "marketplace.json" || !digest(row.marketplaceSha256)) || !remote && !local || !digest(row.manifestSha256) || !digest(row.hooksSha256) || hookParentPaths.has(row.pluginParent) || controlParents.has(row.pluginParent) || appOnlyParentPaths.has(row.pluginParent))
+      refuse4();
+    hookParentPaths.add(row.pluginParent);
+  }
   const skillNames = new Set;
   const qualifiedNames = new Set;
   for (const candidate of witness.skills) {
@@ -53891,6 +53957,7 @@ function assertWitnessShape(value) {
     cacheRoot: witness.cacheRoot,
     controls: witness.controls,
     appOnlyParents: witness.appOnlyParents,
+    ...witness.hookParents === undefined ? {} : { hookParents: witness.hookParents },
     skills: witness.skills
   };
   if (hash2(projection) !== witness.sha256)
@@ -54081,10 +54148,128 @@ function appOnlyParentProjection(cacheRoot, parents2, read2) {
   }
   return rows.sort((a, b) => a.pluginId.localeCompare(b.pluginId) || a.pluginParent.localeCompare(b.pluginParent));
 }
-function assertParents(cacheRoot, controls, appOnlyParents, files, members) {
+function assertJsonValue(value, depth = 0, budget2 = { members: 0 }) {
+  if (depth > 32 || ++budget2.members > 4096)
+    refuse4();
+  if (value === null || typeof value === "string" || typeof value === "boolean")
+    return;
+  if (typeof value === "number" && Number.isFinite(value))
+    return;
+  if (Array.isArray(value)) {
+    for (const item of value)
+      assertJsonValue(item, depth + 1, budget2);
+    return;
+  }
+  if (!plainObject(value))
+    refuse4();
+  for (const [key, item] of Object.entries(value)) {
+    if (!key || /[\x00-\x1f\x7f]/.test(key))
+      refuse4();
+    assertJsonValue(item, depth + 1, budget2);
+  }
+}
+function reviewedHookControls(root, read2) {
+  const manifestPath = join25(root, ".codex-plugin/plugin.json"), hooksPath = join25(root, "hooks/hooks.json");
+  let manifest, manifestSha256, hooks, hooksSha256;
+  try {
+    const manifestText = read2(manifestPath);
+    manifestSha256 = hashNativeJsonControls(manifestText, "version");
+    manifest = JSON.parse(manifestText);
+    const hooksText = read2(hooksPath);
+    hashNativeJsonControls(hooksText);
+    hooksSha256 = createHash17("sha256").update(hooksText).digest("hex");
+    hooks = JSON.parse(hooksText);
+  } catch {
+    return refuse4();
+  }
+  if (!plainObject(manifest) || !exactKeys(manifest, ["name", "version", "hooks"], ["description"]) || !identifier3(manifest.name) || typeof manifest.version !== "string" || manifest.version !== basename9(root) || manifest.hooks !== "./hooks/hooks.json" || manifest.description !== undefined && (typeof manifest.description !== "string" || !manifest.description.trim() || manifest.description.length > 1024))
+    refuse4();
+  const manifestRecord = manifest;
+  if (!plainObject(hooks) || !exactKeys(hooks, ["hooks"]) || !plainObject(hooks.hooks))
+    refuse4();
+  const hookTable = hooks.hooks;
+  const events = Object.entries(hookTable);
+  if (!events.length || events.length > 32)
+    refuse4();
+  for (const [event, groups] of events) {
+    if (!codexHookEvents.has(event) || !Array.isArray(groups) || !groups.length || groups.length > 32)
+      refuse4();
+    for (const group of groups) {
+      if (!plainObject(group) || !exactKeys(group, ["hooks"]) || !Array.isArray(group.hooks) || !group.hooks.length || group.hooks.length > 32)
+        refuse4();
+      const handlers = group.hooks;
+      for (const handler of handlers) {
+        if (!plainObject(handler) || !exactKeys(handler, ["type", "server", "tool", "input"], ["timeout"]) || handler.type !== "mcp_tool" || !identifier3(handler.server) || !identifier3(handler.tool) || !plainObject(handler.input) || handler.timeout !== undefined && (!Number.isSafeInteger(handler.timeout) || Number(handler.timeout) < 1 || Number(handler.timeout) > 300))
+          refuse4();
+        assertJsonValue(handler.input);
+      }
+    }
+  }
+  return { namespace: manifestRecord.name, manifestSha256, hooksSha256 };
+}
+function reviewedHookParentProjection(cacheRoot, parents2, read2) {
+  if (!Array.isArray(parents2) || parents2.length > 4096)
+    refuse4();
+  const seen = new Set, rows = [];
+  for (const parent of parents2) {
+    const remote = parent?.installation === "remote-receipt", local = parent?.installation === "local-marketplace";
+    if (!parent || !exactKeys(parent, ["installation", "namespace", "pluginId", "pluginParent", "role"], remote ? ["remotePluginId"] : local ? ["marketplaceSourcePath", "marketplaceSha256"] : []) || parent.role !== "reviewed-hook" || !identifier3(parent.namespace) || !/^[A-Za-z0-9_-]{1,64}@[A-Za-z0-9_-]{1,64}$/.test(parent.pluginId) || typeof parent.pluginParent !== "string" || remote && (typeof parent.remotePluginId !== "string" || !/^[A-Za-z0-9_~-]{1,1024}$/.test(parent.remotePluginId)) || local && (typeof parent.marketplaceSourcePath !== "string" || !isAbsolute15(parent.marketplaceSourcePath) || resolve15(parent.marketplaceSourcePath) !== parent.marketplaceSourcePath || basename9(parent.marketplaceSourcePath) !== "marketplace.json" || !digest(parent.marketplaceSha256)) || !remote && !local)
+      refuse4();
+    const parts = relative6(cacheRoot, parent.pluginParent).split(sep7);
+    if (!isAbsolute15(parent.pluginParent) || resolve15(parent.pluginParent) !== parent.pluginParent || parts.length !== 2 || parts.some((part) => !identifier3(part)) || parts[1] !== parent.namespace || parent.pluginId !== `${parent.namespace}@${parts[0]}` || seen.has(parent.pluginParent))
+      refuse4();
+    seen.add(parent.pluginParent);
+    const parentStat = lstatSync16(parent.pluginParent, { throwIfNoEntry: false });
+    if (!parentStat?.isDirectory() || parentStat.isSymbolicLink() || realpathSync8(parent.pluginParent) !== parent.pluginParent)
+      refuse4();
+    const receiptPath = join25(parent.pluginParent, ".codex-remote-plugin-install.json"), receiptStat = lstatSync16(receiptPath, { throwIfNoEntry: false });
+    let receiptText;
+    if (remote) {
+      if (!receiptStat?.isFile() || receiptStat.isSymbolicLink() || receiptStat.size > MAX_RECEIPT_BYTES)
+        refuse4();
+      try {
+        receiptText = read2(receiptPath);
+        hashNativeJsonControls(receiptText);
+        const receipt = JSON.parse(receiptText);
+        if (!plainObject(receipt) || !exactKeys(receipt, ["schema_version", "remote_plugin_id"]) || receipt.schema_version !== 1 || receipt.remote_plugin_id !== parent.remotePluginId)
+          refuse4();
+      } catch {
+        refuse4();
+      }
+    } else {
+      const marketplaceSourcePath = parent.marketplaceSourcePath ?? refuse4();
+      if (receiptStat !== undefined || !parent.marketplaceSha256)
+        refuse4();
+      let marketplaceText;
+      try {
+        marketplaceText = read2(marketplaceSourcePath);
+      } catch {
+        return refuse4();
+      }
+      if (createHash17("sha256").update(marketplaceText).digest("hex") !== parent.marketplaceSha256 || !codexLocalMarketplaceMapsPlugin(marketplaceText, parts[0], parent.namespace))
+        refuse4();
+    }
+    const materializations = readdirSync7(parent.pluginParent).filter((name) => name !== ".codex-remote-plugin-install.json").map((version) => {
+      if (!/^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$/.test(version))
+        refuse4();
+      const root = join25(parent.pluginParent, version), stat = lstatSync16(root, { throwIfNoEntry: false });
+      if (!stat?.isDirectory() || stat.isSymbolicLink() || realpathSync8(root) !== root)
+        refuse4();
+      const controls = reviewedHookControls(root, read2);
+      if (controls.namespace !== parent.namespace)
+        refuse4();
+      return { manifestSha256: controls.manifestSha256, hooksSha256: controls.hooksSha256 };
+    });
+    if (!materializations.length || materializations.some((item) => canonical7(item) !== canonical7(materializations[0])))
+      refuse4();
+    rows.push({ ...parent, ...receiptText === undefined ? {} : { receiptSha256: createHash17("sha256").update(receiptText).digest("hex") }, ...materializations[0] });
+  }
+  return rows.sort((a, b) => a.pluginId.localeCompare(b.pluginId) || a.pluginParent.localeCompare(b.pluginParent));
+}
+function assertParents(cacheRoot, controls, appOnlyParents, hookParents, files, members) {
   const expected = new Set;
   const expectedMarkets = new Set;
-  for (const control of [...controls, ...appOnlyParents]) {
+  for (const control of [...controls, ...appOnlyParents, ...hookParents]) {
     const rel = relative6(cacheRoot, control.pluginParent), parts = rel.split(sep7);
     if (resolve15(control.pluginParent) !== control.pluginParent || parts.length !== 2 || parts.some((part) => !identifier3(part)) || control.pluginId !== `${control.namespace}@${parts[0]}` || parts[1] !== control.namespace)
       refuse4();
@@ -54125,7 +54310,9 @@ function assertParents(cacheRoot, controls, appOnlyParents, files, members) {
       refuse4();
     if ([".app.json", ".mcp.json"].includes(base2) && (parts.length !== 4 || dirname15(member) !== root))
       refuse4();
-    if (parts.includes("hooks"))
+    if ([".app.json", ".mcp.json"].includes(base2) && hookParents.some((reviewed) => reviewed.pluginParent === parent))
+      refuse4();
+    if (parts.includes("hooks") && (![4, 5].includes(parts.length) || parts[3] !== "hooks" || (parts.length === 4 ? base2 !== "hooks" : base2 !== "hooks.json") || !hookParents.some((reviewed) => reviewed.pluginParent === join25(cacheRoot, parts[0], parts[1]))))
       refuse4();
   }
 }
@@ -54235,13 +54422,14 @@ function captureCodexSemanticCacheWitness(options) {
     const initialTree = treeSnapshot(options.cacheRoot);
     const controls = controlProjection(options.controls, read2);
     const appOnlyParents = appOnlyParentProjection(options.cacheRoot, options.appOnlyParents ?? [], read2);
+    const hookParents = reviewedHookParentProjection(options.cacheRoot, options.reviewedHookParents ?? [], read2);
     const skillParents = new Set(controls.map((control) => control.pluginParent));
-    if (appOnlyParents.some((parent) => skillParents.has(parent.pluginParent)))
+    if (appOnlyParents.some((parent) => skillParents.has(parent.pluginParent)) || hookParents.some((parent) => skillParents.has(parent.pluginParent) || appOnlyParents.some((app) => app.pluginParent === parent.pluginParent)))
       refuse4();
     if (!reviewedCodexPluginCapabilitiesUnchanged(options.cacheRoot, options.controls, read2, options.rules))
       refuse4();
     const files = initialTree.files;
-    assertParents(options.cacheRoot, controls, appOnlyParents, files, initialTree.state.members);
+    assertParents(options.cacheRoot, controls, appOnlyParents, hookParents, files, initialTree.state.members);
     const expectedNamesByRoot = assertSkillMaterializations(options.cacheRoot, options.controls, files, read2);
     const docs = files.filter((path) => path.endsWith(`${sep7}SKILL.md`));
     const skillRows = [];
@@ -54250,6 +54438,8 @@ function captureCodexSemanticCacheWitness(options) {
       const rel = relative6(options.cacheRoot, document3).split(sep7);
       if (appOnlyParents.some((parent) => parent.pluginParent === join25(options.cacheRoot, rel[0], rel[1])))
         refuse4();
+      if (hookParents.some((parent) => parent.pluginParent === join25(options.cacheRoot, rel[0], rel[1])))
+        refuse4();
       const documentStat = lstatSync16(document3, { throwIfNoEntry: false });
       if (!documentStat?.isFile() || documentStat.isSymbolicLink() || documentStat.size > MAX_DOCUMENT_BYTES)
         refuse4();
@@ -54313,7 +54503,7 @@ function captureCodexSemanticCacheWitness(options) {
     tracked.verify();
     const finalTree = treeSnapshot(options.cacheRoot);
     assertSameTree(initialTree.state, finalTree.state, tracked.paths());
-    const completeProjection = { schema: CODEX_SEMANTIC_CACHE_WITNESS_SCHEMA, cacheRoot: options.cacheRoot, controls, appOnlyParents, skills: uniqueSkills };
+    const completeProjection = { schema: CODEX_SEMANTIC_CACHE_WITNESS_SCHEMA, cacheRoot: options.cacheRoot, controls, appOnlyParents, hookParents, skills: uniqueSkills };
     return { ...completeProjection, sha256: hash2(completeProjection) };
   } catch (error) {
     if (error instanceof Error && error.message.startsWith("CODEX_SEMANTIC_CACHE_WITNESS_UNSUPPORTED"))
@@ -54329,6 +54519,7 @@ function assertCodexSemanticCacheWitnessUnchanged(previous, current) {
     cacheRoot: previous.cacheRoot,
     controls: previous.controls,
     appOnlyParents: previous.appOnlyParents,
+    ...previous.hookParents === undefined ? {} : { hookParents: previous.hookParents },
     skills: previous.skills
   };
   const currentProjection = {
@@ -54336,20 +54527,41 @@ function assertCodexSemanticCacheWitnessUnchanged(previous, current) {
     cacheRoot: current.cacheRoot,
     controls: current.controls,
     appOnlyParents: current.appOnlyParents,
+    ...current.hookParents === undefined ? {} : { hookParents: current.hookParents },
     skills: current.skills
   };
-  if (hash2(priorProjection) !== previous.sha256 || hash2(currentProjection) !== current.sha256 || canonical7(priorProjection) !== canonical7(currentProjection))
+  const comparable = (projection) => ({ ...projection, hookParents: projection.hookParents ?? [] });
+  if (hash2(priorProjection) !== previous.sha256 || hash2(currentProjection) !== current.sha256 || canonical7(comparable(priorProjection)) !== canonical7(comparable(currentProjection)))
     refuse4();
 }
 var CODEX_SEMANTIC_CACHE_WITNESS_SCHEMA = "hasna.codex-semantic-cache-witness.v1", identifier3 = (value) => typeof value === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(value), digest = (value) => typeof value === "string" && /^[a-f0-9]{64}$/.test(value), refuse4 = () => {
   throw new Error("CODEX_SEMANTIC_CACHE_WITNESS_UNSUPPORTED: review Codex plugin cache identity and controls");
-}, MAX_DOCUMENT_BYTES, MAX_RECEIPT_BYTES;
+}, MAX_DOCUMENT_BYTES, MAX_RECEIPT_BYTES, codexHookEvents;
 var init_codex_semantic_cache_witness = __esm(() => {
   init_claude_settings_witness();
   init_codex_plugin_skill_controls();
   init_codex_native_skill_catalog();
   MAX_DOCUMENT_BYTES = 1024 * 1024;
   MAX_RECEIPT_BYTES = 16 * 1024;
+  codexHookEvents = new Set([
+    "SessionStart",
+    "UserPromptSubmit",
+    "PreToolUse",
+    "PostToolUse",
+    "PostToolUseFailure",
+    "Stop",
+    "SubagentStart",
+    "SubagentStop",
+    "PreCompact",
+    "Notification",
+    "PermissionRequest",
+    "SessionEnd",
+    "ConfigChange",
+    "WorktreeCreate",
+    "WorktreeRemove",
+    "TeammateIdle",
+    "TaskComplete"
+  ]);
 });
 
 // src/lib/managed-policy.ts
@@ -55745,7 +55957,7 @@ var init_retained_review_artifacts = __esm(() => {
 import { createHash as createHash22, randomUUID as randomUUID6 } from "crypto";
 import { isDeepStrictEqual as isDeepStrictEqual7 } from "util";
 import { existsSync as existsSync13, lstatSync as lstatSync23, statSync as statSync10, mkdirSync as mkdirSync7, readFileSync as readFileSync16, readdirSync as readdirSync9, opendirSync as opendirSync3, readlinkSync as readlinkSync7, realpathSync as realpathSync11, renameSync as renameSync3, rmdirSync as rmdirSync2, writeFileSync as writeFileSync6, unlinkSync as unlinkSync4, chmodSync, openSync as openSync14, closeSync as closeSync14, fsyncSync as fsyncSync6, fstatSync as fstatSync14, readSync as readSync11, constants as constants16, linkSync as linkSync2 } from "fs";
-import { dirname as dirname18, join as join30, resolve as resolve19, relative as relative7, isAbsolute as isAbsolute20, sep as sep9 } from "path";
+import { basename as basename10, dirname as dirname18, join as join30, resolve as resolve19, relative as relative7, isAbsolute as isAbsolute20, sep as sep9 } from "path";
 import { homedir as homedir3 } from "os";
 function nativeAgentRoot(home, agent, cwd2 = process.cwd()) {
   if (agent === "sumi")
@@ -56896,7 +57108,7 @@ function planAgentSettingsWitnessUpgrade(options) {
   return { dataDir: dataDir3, profileId: policy.profileId, changes: [{ path: join30(dataDir3, "agent-policy.json"), before: snapshot2.text, after: after2 }], nativeSkills: [], observedPolicy: { path: join30(dataDir3, "agent-policy.json"), before: snapshot2.text }, observedSettings: { path: configPath, before: settings }, discoveryBefore: [replacement], discoveryAfter: [replacement], ...policy.bridge.discoveryExecutables ? { discoveryExecutables: policy.bridge.discoveryExecutables } : {}, rootAliases: aliases, managedAgentChecks: { home, agents: [options.agent] }, settingsWitnessUpgrade: { agent: options.agent, path: configPath, fromHashMode: previous.hashMode ?? "bytes", fromSha256: previous.sha256, toHashMode: next.hashMode, toSha256: next.sha256, reviewedPreimage: options.reviewedPreimage, currentSettingsSha256: options.expectedSettingsSha256, replacedWitnesses: replaced.map((source) => ({ hashMode: source.hashMode ?? "bytes", sha256: source.sha256 })) } };
 }
 function planCodexSemanticCacheWitnessUpgrade(options) {
-  if (options.agent !== "codex" || !/^[a-f0-9]{64}$/.test(options.expectedPolicySha256) || !/^[a-f0-9]{64}$/.test(options.expectedSettingsSha256) || options.expectedCacheWitnessSha256 !== undefined && !/^[a-f0-9]{64}$/.test(options.expectedCacheWitnessSha256) || !Array.isArray(options.appOnlyParents) || options.appOnlyParents.length > 4096 || new Set(options.appOnlyParents).size !== options.appOnlyParents.length)
+  if (options.agent !== "codex" || !/^[a-f0-9]{64}$/.test(options.expectedPolicySha256) || !/^[a-f0-9]{64}$/.test(options.expectedSettingsSha256) || options.expectedCacheWitnessSha256 !== undefined && !/^[a-f0-9]{64}$/.test(options.expectedCacheWitnessSha256) || !Array.isArray(options.appOnlyParents) || options.appOnlyParents.length > 4096 || new Set(options.appOnlyParents).size !== options.appOnlyParents.length || options.reviewedHookParents !== undefined && (!Array.isArray(options.reviewedHookParents) || options.reviewedHookParents.length > 4096 || new Set(options.reviewedHookParents).size !== options.reviewedHookParents.length))
     throw new Error("Invalid Codex semantic cache upgrade request");
   const home = resolve19(options.home ?? homedir3()), dataDir3 = options.dataDir ?? getDataDirReadOnly();
   const snapshot2 = readManagedSkillPolicySnapshot(dataDir3);
@@ -56920,14 +57132,23 @@ function planCodexSemanticCacheWitnessUpgrade(options) {
     throw new Error("Native settings preimage changed");
   const boundedRead = (path) => new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(readNativeBytes(path, 1024 * 1024));
   const unchangedFullSource = (path) => {
-    const source = binding.sources.find((source2) => source2.path === path && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined && source2.reviewArtifact === undefined && (source2.hashMode === undefined || source2.hashMode === "bytes"));
-    if (!source)
-      throw new Error("Cache upgrade lacks prior full identity source");
+    const sources = binding.sources.filter((source2) => source2.path === path && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined && source2.reviewArtifact === undefined && (source2.hashMode === undefined || source2.hashMode === "bytes"));
+    if (sources.length !== 1)
+      throw new Error("Cache upgrade requires one unambiguous prior full identity source");
+    const source = sources[0];
     const text2 = boundedRead(path);
     if (sha4(text2) !== source.sha256)
       throw new Error("Reviewed cache identity source changed");
     return text2;
   };
+  const unchangedReviewedHookSource = (path) => {
+    const sources = binding.sources.filter((source) => source.path === path);
+    if (!sources.length)
+      throw new Error("Cache upgrade lacks prior full identity source");
+    if (sources.length !== 1)
+      throw new Error("Reviewed hook identity source is ambiguous");
+    return unchangedFullSource(path);
+  };
   const appOnlyParents = options.appOnlyParents.map((parent) => {
     const parts = relative7(cacheRoot, parent).split(sep9);
     if (!isAbsolute20(parent) || resolve19(parent) !== parent || parts.length !== 2 || parts.some((part) => !/^[A-Za-z0-9_-]{1,64}$/.test(part)) || controls.some((control) => control.pluginParent === parent))
@@ -56942,11 +57163,60 @@ function planCodexSemanticCacheWitnessUpgrade(options) {
       unchangedFullSource(source.path);
     return { role: "app-only", pluginId: `${parts[1]}@${parts[0]}`, namespace: parts[1], pluginParent: parent, remotePluginId: receipt.remote_plugin_id };
   }).sort((a, b) => a.pluginParent.localeCompare(b.pluginParent));
-  const parents2 = [...new Set([...controls.map((control) => control.pluginParent), ...appOnlyParents.map((parent) => parent.pluginParent)])];
+  const reviewedHookParents = (options.reviewedHookParents ?? []).map((parent) => {
+    const parts = relative7(cacheRoot, parent).split(sep9);
+    if (!isAbsolute20(parent) || resolve19(parent) !== parent || parts.length !== 2 || parts.some((part) => !/^[A-Za-z0-9_-]{1,64}$/.test(part)) || controls.some((control) => control.pluginParent === parent) || appOnlyParents.some((role) => role.pluginParent === parent))
+      throw new Error("Unsupported reviewed native-hook parent role");
+    const receiptPath = join30(parent, ".codex-remote-plugin-install.json"), receiptStat = lstatSync23(receiptPath, { throwIfNoEntry: false });
+    let identity6;
+    if (receiptStat) {
+      if (!receiptStat.isFile() || receiptStat.isSymbolicLink() || receiptStat.size > 16 * 1024)
+        throw new Error("Invalid reviewed native-hook install receipt");
+      const receiptText = unchangedReviewedHookSource(receiptPath);
+      let receipt;
+      try {
+        hashNativeJsonControls(receiptText);
+        receipt = JSON.parse(receiptText);
+      } catch {
+        throw new Error("Invalid reviewed native-hook install receipt");
+      }
+      if (!receipt || Array.isArray(receipt) || Object.keys(receipt).length !== 2 || receipt.schema_version !== 1 || typeof receipt.remote_plugin_id !== "string" || !/^[A-Za-z0-9_~-]{1,1024}$/.test(receipt.remote_plugin_id))
+        throw new Error("Invalid reviewed native-hook install receipt");
+      identity6 = { role: "reviewed-hook", pluginId: `${parts[1]}@${parts[0]}`, namespace: parts[1], pluginParent: parent, installation: "remote-receipt", remotePluginId: receipt.remote_plugin_id };
+    } else {
+      const pluginId = `${parts[1]}@${parts[0]}`;
+      const marketplaceSources = binding.sources.filter((source2) => basename10(source2.path) === "marketplace.json" && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined && source2.reviewArtifact === undefined && (source2.hashMode === undefined || source2.hashMode === "bytes"));
+      const matches2 = marketplaceSources.flatMap((source2) => {
+        const text2 = unchangedFullSource(source2.path);
+        return codexLocalMarketplaceMapsPlugin(text2, parts[0], parts[1]) ? [{ source: source2, text: text2 }] : [];
+      });
+      if (matches2.length !== 1)
+        throw new Error("Local marketplace hook parent lacks one exact enrolled marketplace source");
+      const { source } = matches2[0];
+      const config = Bun.TOML.parse(settings);
+      if (config.plugins?.[pluginId]?.enabled !== true)
+        throw new Error("Local marketplace hook parent is not enabled in the unchanged Codex settings");
+      identity6 = { role: "reviewed-hook", pluginId, namespace: parts[1], pluginParent: parent, installation: "local-marketplace", marketplaceSourcePath: source.path, marketplaceSha256: source.sha256 };
+    }
+    const versions = readdirSync9(parent).filter((name) => name !== ".codex-remote-plugin-install.json");
+    if (!versions.length || versions.length > 4096)
+      throw new Error("Reviewed native-hook parent has no bounded materializations");
+    for (const version of versions) {
+      if (!/^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$/.test(version))
+        throw new Error("Invalid reviewed native-hook version identity");
+      const root = join30(parent, version), stat = lstatSync23(root, { throwIfNoEntry: false });
+      if (!stat?.isDirectory() || stat.isSymbolicLink() || realpathSync11(root) !== root)
+        throw new Error("Invalid reviewed native-hook materialization");
+      unchangedReviewedHookSource(join30(root, ".codex-plugin/plugin.json"));
+      unchangedReviewedHookSource(join30(root, "hooks/hooks.json"));
+    }
+    return identity6;
+  }).sort((a, b) => a.pluginParent.localeCompare(b.pluginParent));
+  const parents2 = [...new Set([...controls.map((control) => control.pluginParent), ...appOnlyParents.map((parent) => parent.pluginParent), ...reviewedHookParents.map((parent) => parent.pluginParent)])];
   const reviewedAlias = aliases.find((alias) => alias.agent === "codex");
   const hookRootAlias = reviewedAlias ? { alias: reviewedAlias.alias, target: reviewedAlias.target } : null;
   assertCodexSemanticCacheHookSafety(cacheRoot, parents2, configPath, hookRootAlias);
-  const supersededSources = binding.sources.filter((source) => codexSemanticCacheSourceRole(source, cacheRoot, parents2));
+  const supersededSources = binding.sources.filter((source) => codexSemanticCacheSourceRole(source, cacheRoot, parents2, reviewedHookParents.map((parent) => parent.pluginParent)));
   for (const source of supersededSources)
     if ([".app.json", ".mcp.json"].includes(source.path.split(sep9).at(-1)))
       unchangedFullSource(source.path);
@@ -56954,7 +57224,7 @@ function planCodexSemanticCacheWitnessUpgrade(options) {
   if (!supersededDirectories.some((directory) => directory.path === cacheRoot) || (binding.directories ?? []).some((directory) => cacheRoot.startsWith(directory.path + sep9)))
     throw new Error("Cache upgrade requires exact cache directory coverage without an unproved ancestor projection");
   const rules = Bun.TOML.parse(settings).skills?.config ?? [];
-  const witness = captureCodexSemanticCacheWitness({ cacheRoot, controls, appOnlyParents, rules, read: boundedRead });
+  const witness = captureCodexSemanticCacheWitness({ cacheRoot, controls, appOnlyParents, reviewedHookParents, rules, read: boundedRead });
   if (options.expectedCacheWitnessSha256 !== undefined && witness.sha256 !== options.expectedCacheWitnessSha256)
     throw new Error("Reviewed semantic cache preimage changed");
   const replacement = { ...binding, codexDisabledPluginSkills: controls, codexSemanticCache: {
@@ -56963,6 +57233,7 @@ function planCodexSemanticCacheWitnessUpgrade(options) {
     hookRootAlias,
     witness,
     appOnlyParents,
+    reviewedHookParents,
     previousPolicySha256: options.expectedPolicySha256,
     supersededSources,
     supersededDirectories
@@ -56981,7 +57252,7 @@ function planCodexSemanticCacheWitnessUpgrade(options) {
     rootAliases: aliases,
     managedAgentChecks: { home, agents: ["codex"] },
     ...policy.bridge.discoveryExecutables ? { discoveryExecutables: policy.bridge.discoveryExecutables } : {},
-    cacheWitnessUpgrade: { ...options, home, dataDir: dataDir3, appOnlyParents: appOnlyParents.map((parent) => parent.pluginParent) }
+    cacheWitnessUpgrade: { ...options, home, dataDir: dataDir3, appOnlyParents: appOnlyParents.map((parent) => parent.pluginParent), reviewedHookParents: reviewedHookParents.map((parent) => parent.pluginParent) }
   };
 }
 function planReviewedArtifactMigration(options) {
@@ -57716,7 +57987,7 @@ import {
   writeFileSync as writeFileSync8
 } from "fs";
 import { homedir as homedir4 } from "os";
-import { basename as basename9, dirname as dirname19, join as join32 } from "path";
+import { basename as basename11, dirname as dirname19, join as join32 } from "path";
 function isSkillsOwnershipMarker(marker) {
   return typeof marker === "object" && marker !== null && Object.hasOwn(marker, "managedBy") && marker.managedBy === SYNC_MARKER_MANAGED_BY;
 }
@@ -57958,7 +58229,7 @@ function writeManagedSkillDirUnlocked(dir, skillMd, options, assertCurrent) {
     return { action, path: skillMdPath };
   const parentDir = dirname19(dir);
   mkdirSync9(parentDir, { recursive: true });
-  const transactionDir = mkdtempSync(join32(parentDir, `.hasna-skills-write-${basename9(dir)}-`));
+  const transactionDir = mkdtempSync(join32(parentDir, `.hasna-skills-write-${basename11(dir)}-`));
   const candidateDir = join32(transactionDir, "candidate");
   const backupDir = join32(transactionDir, "backup");
   const candidateSkillMdPath = join32(candidateDir, "SKILL.md");
@@ -60132,7 +60403,7 @@ var init_plugin_admission = __esm(() => {
 
 // src/lib/plugin-discovery.ts
 import { closeSync as closeSync16, constants as constants18, fstatSync as fstatSync16, lstatSync as lstatSync26, openSync as openSync16, opendirSync as opendirSync5, readSync as readSync13 } from "fs";
-import { basename as basename10, dirname as dirname21, isAbsolute as isAbsolute23, join as join38, resolve as resolve22 } from "path";
+import { basename as basename12, dirname as dirname21, isAbsolute as isAbsolute23, join as join38, resolve as resolve22 } from "path";
 function validateManagedPluginWitnesses(value) {
   pluginNeed(Array.isArray(value) && value.length > 0 && value.length <= PLUGIN_PROJECTION_LIMITS.registrations, "Invalid managed plugin witness collection");
   const seen = new Set;
@@ -60215,7 +60486,7 @@ function hashManagedPluginRegistry(path, managed) {
       pluginNeed(/^(?:[A-Za-z0-9][A-Za-z0-9._+-]*-)?[a-f0-9]{12}$/.test(row.version) && row.installPath === join38(cacheRoot, row.version), "Managed plugin cache path or version is outside its registration");
       const approval = (producer) => {
         pluginText(producer);
-        const digest2 = `sha256:${basename10(producer)}`;
+        const digest2 = `sha256:${basename12(producer)}`;
         const receipt2 = readPluginAdmissionReceipt(witness.storeRoot, witness.bindingId, digest2);
         pluginNeed(receipt2.materializedPath === producer, "Managed producer path is not an approved immutable projection");
         if (!verified.has(producer)) {
@@ -60284,7 +60555,7 @@ var init_plugin_discovery = __esm(() => {
 // src/lib/claude-marketplace-registry.ts
 import { createHash as createHash25 } from "crypto";
 import { closeSync as closeSync17, constants as constants19, fstatSync as fstatSync17, lstatSync as lstatSync27, openSync as openSync17, readSync as readSync14 } from "fs";
-import { basename as basename11, dirname as dirname22, isAbsolute as isAbsolute24, resolve as resolve23 } from "path";
+import { basename as basename13, dirname as dirname22, isAbsolute as isAbsolute24, resolve as resolve23 } from "path";
 function need8(value, reason2) {
   if (!value)
     throw new Error(`Claude marketplace registry ${reason2}`);
@@ -60304,7 +60575,7 @@ function parents2(path) {
 }
 function readRegistry2(path, budget2) {
   absolutePath4(path);
-  need8(basename11(path) === "known_marketplaces.json", "requires known_marketplaces.json");
+  need8(basename13(path) === "known_marketplaces.json", "requires known_marketplaces.json");
   need8(Number.isSafeInteger(budget2.remaining) && budget2.remaining >= 0, "has an invalid byte budget");
   const ancestors2 = parents2(path), initial2 = lstatSync27(path, { bigint: true });
   need8(initial2.isFile() && !initial2.isSymbolicLink() && initial2.size <= BigInt(CLAUDE_MARKETPLACE_REGISTRY_LIMITS.bytes), "is not a bounded regular file");
@@ -60751,7 +61022,7 @@ var init_codex_hook_discovery_recovery = __esm(() => {
 // src/lib/agent-discovery.ts
 import { createHash as createHash27 } from "crypto";
 import { lstatSync as lstatSync28, readFileSync as readFileSync21, readdirSync as readdirSync12, realpathSync as realpathSync12 } from "fs";
-import { basename as basename12, dirname as dirname23, isAbsolute as isAbsolute26, join as join39, relative as relative8, resolve as resolve24, sep as sep10 } from "path";
+import { basename as basename14, dirname as dirname23, isAbsolute as isAbsolute26, join as join39, relative as relative8, resolve as resolve24, sep as sep10 } from "path";
 import { isDeepStrictEqual as isDeepStrictEqual11 } from "util";
 function discoveryRootUnresolved(agent, command, detail) {
   return new Error(`${DISCOVERY_ROOT_UNRESOLVED}: ${agent} discovery cannot resolve its "${command}" executable: ${detail}. The reviewed discovery is unchanged; this is an environment gap, not drift.`);
@@ -60831,7 +61102,7 @@ function assertReviewedClaudeCacheClosures(home, config, review, canonical9) {
         throw new Error("Reviewed Claude enabled plugin registration requires an object with an installPath string");
       }
       if ([cacheAliasRoot, cacheRoot].some((root2) => row.installPath === root2 || row.installPath.startsWith(root2 + sep10))) {
-        if (!cachePath(row.installPath) || row.installPath.length > AGENT_POLICY_LIMITS.pathCharacters || row.version !== undefined && (typeof row.version !== "string" || basename12(row.installPath) !== row.version)) {
+        if (!cachePath(row.installPath) || row.installPath.length > AGENT_POLICY_LIMITS.pathCharacters || row.version !== undefined && (typeof row.version !== "string" || basename14(row.installPath) !== row.version)) {
           throw new Error("Reviewed Claude discovery has a malformed active cache registration");
         }
         if (row.scope === "user" && (row.projectPath === undefined || row.projectPath === null)) {} else if (row.scope === "project" && typeof row.projectPath === "string" && isAbsolute26(row.projectPath) && resolve24(row.projectPath) === row.projectPath && row.projectPath.length <= AGENT_POLICY_LIMITS.pathCharacters) {} else
@@ -61109,7 +61380,7 @@ function absentRetiredClaudeRoots(binding) {
     if (!targetValid || !targetScopes.has("user\x00"))
       continue;
     const active = rows[0]?.installPath;
-    if (typeof active !== "string" || rows[0]?.version !== basename12(active) || dirname23(active) !== dirname23(root2) || active === root2 || !lstatSync28(active, { throwIfNoEntry: false })?.isDirectory() || realpathSync12(active) !== active)
+    if (typeof active !== "string" || rows[0]?.version !== basename14(active) || dirname23(active) !== dirname23(root2) || active === root2 || !lstatSync28(active, { throwIfNoEntry: false })?.isDirectory() || realpathSync12(active) !== active)
       continue;
     const activeManifest = full(join39(active, ".claude-plugin/plugin.json"));
     if (!activeManifest || projected(activeManifest) !== activeManifest.sha256)
@@ -61118,14 +61389,15 @@ function absentRetiredClaudeRoots(binding) {
   }
   return [...result2];
 }
-function codexSemanticCacheSourceRole(source, cacheRoot, parents3) {
+function codexSemanticCacheSourceRole(source, cacheRoot, parents3, hookParents = []) {
   if (!isAbsolute26(source.path) || resolve24(source.path) !== source.path || /[\x00-\x1f\x7f]/.test(source.path) || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.reviewArtifact !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes")
     return false;
   const parts = relative8(cacheRoot, source.path).split(sep10);
   if (parts.length < 3 || !parents3.includes(join39(cacheRoot, parts[0], parts[1])))
     return false;
   const tail2 = parts.slice(3).join("/");
-  return parts.length === 5 && tail2 === ".codex-plugin/plugin.json" && source.sha256 !== null || parts.length === 4 && [".app.json", ".mcp.json"].includes(tail2) && source.sha256 !== null || source.sha256 === null && (parts.length === 4 && tail2 === "SKILL.md" || parts.length === 5 && tail2 === "hooks/hooks.json");
+  const parent = join39(cacheRoot, parts[0], parts[1]);
+  return parts.length === 5 && tail2 === ".codex-plugin/plugin.json" && source.sha256 !== null || parts.length === 4 && [".app.json", ".mcp.json"].includes(tail2) && source.sha256 !== null || parts.length === 5 && tail2 === "hooks/hooks.json" && hookParents.includes(parent) && source.sha256 !== null || source.sha256 === null && (parts.length === 4 && tail2 === "SKILL.md" || parts.length === 5 && tail2 === "hooks/hooks.json");
 }
 function codexSemanticCacheDirectoryRole(path, cacheRoot) {
   return isAbsolute26(path) && resolve24(path) === path && !/[\x00-\x1f\x7f]/.test(path) && (path === cacheRoot || path.startsWith(cacheRoot + sep10));
@@ -61157,20 +61429,28 @@ function verifyCodexSemanticCacheDiscovery(binding, reviewedRootAliases) {
   const cacheRoot = proof.witness.cacheRoot;
   if (controls.some((control) => dirname23(dirname23(control.pluginParent)) !== cacheRoot))
     throw new Error("Codex semantic cache names another enrolled cache");
-  const parents3 = [...new Set([...controls.map((control) => control.pluginParent), ...proof.appOnlyParents.map((parent) => parent.pluginParent)])];
-  const sources = binding.sources.filter((source) => codexSemanticCacheSourceRole(source, cacheRoot, parents3));
+  const reviewedHookParents = proof.reviewedHookParents ?? [];
+  if (!Array.isArray(reviewedHookParents) || reviewedHookParents.length > 4096 || reviewedHookParents.some((parent) => !parent || !(parent.installation === "remote-receipt" && Object.keys(parent).sort().join(",") === "installation,namespace,pluginId,pluginParent,remotePluginId,role" && typeof parent.remotePluginId === "string" || parent.installation === "local-marketplace" && Object.keys(parent).sort().join(",") === "installation,marketplaceSha256,marketplaceSourcePath,namespace,pluginId,pluginParent,role" && typeof parent.marketplaceSourcePath === "string" && /^[a-f0-9]{64}$/.test(parent.marketplaceSha256 ?? "")) || parent.role !== "reviewed-hook" || typeof parent.pluginId !== "string" || typeof parent.namespace !== "string" || typeof parent.pluginParent !== "string") || new Set(reviewedHookParents.map((parent) => parent.pluginParent)).size !== reviewedHookParents.length || !isDeepStrictEqual11((proof.witness.hookParents ?? []).map(({ manifestSha256: _manifest, hooksSha256: _hooks, receiptSha256: _receipt, ...parent }) => parent), reviewedHookParents)) {
+    throw new Error("Invalid reviewed native-hook cache role");
+  }
+  for (const parent of reviewedHookParents)
+    if (parent.installation === "local-marketplace" && !binding.sources.some((source) => source.path === parent.marketplaceSourcePath && source.sha256 === parent.marketplaceSha256 && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.reviewArtifact === undefined && (source.hashMode === undefined || source.hashMode === "bytes")))
+      throw new Error("Local marketplace hook parent lost its enrolled source witness");
+  const parents3 = [...new Set([...controls.map((control) => control.pluginParent), ...proof.appOnlyParents.map((parent) => parent.pluginParent), ...reviewedHookParents.map((parent) => parent.pluginParent)])];
+  const hookParentPaths = reviewedHookParents.map((parent) => parent.pluginParent);
+  const sources = binding.sources.filter((source) => codexSemanticCacheSourceRole(source, cacheRoot, parents3, hookParentPaths));
   const directories = (binding.directories ?? []).filter((directory) => codexSemanticCacheDirectoryRole(directory.path, cacheRoot));
   if (!directories.length || !isDeepStrictEqual11(sources, proof.supersededSources) || !isDeepStrictEqual11(directories, proof.supersededDirectories))
     throw new Error("Codex semantic cache provenance changed");
   const configPath = proof.configPath;
-  if (!isAbsolute26(configPath) || resolve24(configPath) !== configPath || basename12(configPath) !== "config.toml" || /[\x00-\x1f\x7f]/.test(configPath))
+  if (!isAbsolute26(configPath) || resolve24(configPath) !== configPath || basename14(configPath) !== "config.toml" || /[\x00-\x1f\x7f]/.test(configPath))
     throw new Error("Invalid semantic cache configuration source");
   const configSource = binding.sources.find((source) => source.path === configPath && source.sha256 !== null && source.format === undefined && source.fields === undefined);
   if (!configSource || projected(configSource) !== configSource.sha256)
     throw new Error("Codex semantic cache requires unchanged reviewed configuration");
   assertCodexSemanticCacheHookSafety(cacheRoot, parents3, configPath, proof.hookRootAlias);
   const rules = parseConfig(read2(configPath), configPath, true).skills?.config ?? [];
-  const current = captureCodexSemanticCacheWitness({ cacheRoot, controls, appOnlyParents: proof.appOnlyParents, rules });
+  const current = captureCodexSemanticCacheWitness({ cacheRoot, controls, appOnlyParents: proof.appOnlyParents, reviewedHookParents, rules });
   assertCodexSemanticCacheWitnessUnchanged(proof.witness, current);
   return proof;
 }
@@ -61254,7 +61534,7 @@ function codexInstallationRoots(binding) {
   const config = join39(dirname23(dirname23(cache3)), "config.toml"), home = dirname23(dirname23(dirname23(cache3)));
   const configSource = binding.sources.find((source) => source.path === config && source.sha256 !== null && (!source.format || source.format === "toml" && source.fields?.includes("plugins")));
   const nativeRoots = NATIVE_SKILL_ROOTS.filter(([agent]) => agent === "codex").map(([, path]) => join39(home, path));
-  if (!configSource || proof.plugins.some((input) => nativeRoots.some((root2) => root2 === input.sourceRoot || root2.startsWith(input.sourceRoot + sep10) || input.sourceRoot.startsWith(root2 + sep10)) || binding.sources.some((source) => basename12(source.path) === "config.toml" && (source.path === input.sourceRoot || source.path.startsWith(input.sourceRoot + sep10)))))
+  if (!configSource || proof.plugins.some((input) => nativeRoots.some((root2) => root2 === input.sourceRoot || root2.startsWith(input.sourceRoot + sep10) || input.sourceRoot.startsWith(root2 + sep10)) || binding.sources.some((source) => basename14(source.path) === "config.toml" && (source.path === input.sourceRoot || source.path.startsWith(input.sourceRoot + sep10)))))
     throw new Error("Native installation input overlaps configuration or loading roots");
   if (proof.plugins.some((input) => dirname23(dirname23(input.pluginParent)) !== cache3 || !binding.sources.some((source) => source.path === join39(input.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined)))
     throw new Error("Missing native installation input source witness");
@@ -61266,13 +61546,13 @@ function codexInstallationRoots(binding) {
   });
 }
 function assertMarketplaceBinding(binding, source) {
-  if (source.hashMode === "claude-plugin-manifest-v1" && (binding.agent !== "claude" || basename12(source.path) !== "plugin.json" || !source.path.endsWith(join39(sep10, ".claude-plugin", "plugin.json"))))
+  if (source.hashMode === "claude-plugin-manifest-v1" && (binding.agent !== "claude" || basename14(source.path) !== "plugin.json" || !source.path.endsWith(join39(sep10, ".claude-plugin", "plugin.json"))))
     throw new Error("Claude plugin manifest witnesses require Claude plugin discovery");
-  if (source.hashMode === "sumi-settings-v1" && (binding.agent !== "sumi" || binding.method !== "reviewed" || basename12(source.path) !== "sumi.json"))
+  if (source.hashMode === "sumi-settings-v1" && (binding.agent !== "sumi" || binding.method !== "reviewed" || basename14(source.path) !== "sumi.json"))
     throw new Error("Sumi settings witnesses require explicit reviewed Sumi configuration");
-  if ((source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4" || source.hashMode === "codex-settings-v5")) && (binding.agent !== "codex" || binding.method !== "reviewed" || basename12(source.path) !== "config.toml"))
+  if ((source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4" || source.hashMode === "codex-settings-v5")) && (binding.agent !== "codex" || binding.method !== "reviewed" || basename14(source.path) !== "config.toml"))
     throw new Error("Codex settings witnesses require explicit reviewed Codex configuration");
-  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4")) && (binding.agent !== "claude" || binding.method !== "reviewed" || basename12(source.path) !== "settings.json"))
+  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4")) && (binding.agent !== "claude" || binding.method !== "reviewed" || basename14(source.path) !== "settings.json"))
     throw new Error("Claude settings witnesses require explicit reviewed Claude configuration");
   if ((source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2") && (binding.agent !== "claude" || binding.method !== "reviewed"))
     throw new Error("Claude marketplace witnesses require explicit reviewed Claude discovery");
@@ -61384,7 +61664,7 @@ function verifyAutomaticDiscoveryClosure(binding, options) {
   const current = resolveAgentDiscovery({ home: options.home, agent: binding.agent, canonical: options.canonical, executable: runtime });
   if (JSON.stringify(current) === JSON.stringify(binding))
     return;
-  const reviewedWithRuntime = (binding.builtinNames?.length ?? 0) > 0 || binding.sources.some((source) => basename12(source.path) === "package.json");
+  const reviewedWithRuntime = (binding.builtinNames?.length ?? 0) > 0 || binding.sources.some((source) => basename14(source.path) === "package.json");
   const otherwiseCurrent = current.method === binding.method && JSON.stringify(current.roots) === JSON.stringify(binding.roots) && JSON.stringify(current.directories) === JSON.stringify(binding.directories) && current.sources.every((source) => binding.sources.some((saved) => isDeepStrictEqual11(saved, source)));
   if (command && gap && runtime === null && reviewedWithRuntime && otherwiseCurrent)
     throw discoveryRootUnresolved(binding.agent, command, gap);
@@ -61527,7 +61807,7 @@ function resolveAgentDiscovery(options) {
       throw new Error("Discovery review must include the agent configuration source");
     const reviewedSources = supersedesSettingsProjection(agent, review.sources, canonical9(configPath)) ? sources.filter((source) => !isSupersededSettingsProjection(agent, canonical9(configPath), source)) : sources;
     const reviewedSourcesWithManifestProjection = review.sources.map((source) => {
-      if (agent !== "claude" || source.sha256 === null || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes" || basename12(source.path) !== "plugin.json" || !source.path.endsWith(join39(sep10, ".claude-plugin", "plugin.json")))
+      if (agent !== "claude" || source.sha256 === null || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes" || basename14(source.path) !== "plugin.json" || !source.path.endsWith(join39(sep10, ".claude-plugin", "plugin.json")))
         return source;
       const pluginRoot = dirname23(dirname23(source.path)), hooksPath = join39(pluginRoot, "hooks/hooks.json");
       const hookStat = lstatSync28(hooksPath, { throwIfNoEntry: false });
@@ -61707,7 +61987,7 @@ var init_agent_discovery = __esm(() => {
 // src/lib/authoring-path.ts
 import { lstatSync as lstatSync29, realpathSync as realpathSync13 } from "fs";
 import { homedir as homedir7 } from "os";
-import { basename as basename13, dirname as dirname24, join as join40, resolve as resolve25, sep as sep11 } from "path";
+import { basename as basename15, dirname as dirname24, join as join40, resolve as resolve25, sep as sep11 } from "path";
 function pathParts(path) {
   return resolve25(path).split(sep11).filter(Boolean);
 }
@@ -61726,7 +62006,7 @@ function physicalPath(path) {
   let cursor = resolve25(path);
   const suffix = [];
   while (!lstatSync29(cursor, { throwIfNoEntry: false })) {
-    suffix.unshift(basename13(cursor));
+    suffix.unshift(basename15(cursor));
     const parent = dirname24(cursor);
     if (parent === cursor)
       return resolve25(path);
@@ -61821,7 +62101,7 @@ import {
   statSync as statSync13,
   writeFileSync as writeFileSync10
 } from "fs";
-import { basename as basename14, dirname as dirname25, isAbsolute as isAbsolute27, join as join41, normalize as normalize4, relative as relative9, resolve as resolve26, sep as sep12 } from "path";
+import { basename as basename16, dirname as dirname25, isAbsolute as isAbsolute27, join as join41, normalize as normalize4, relative as relative9, resolve as resolve26, sep as sep12 } from "path";
 function getPortableSkillsRoot(options = {}) {
   return resolvePortableSkillsRoot(options, true);
 }
@@ -61969,7 +62249,7 @@ function physicalImportPath(path) {
   let ancestor = resolve26(path);
   const suffix = [];
   while (!existsSync19(ancestor)) {
-    suffix.unshift(basename14(ancestor));
+    suffix.unshift(basename16(ancestor));
     ancestor = dirname25(ancestor);
   }
   return join41(realpathSync14(ancestor), ...suffix);
@@ -61994,8 +62274,8 @@ function portPortableSkill(sourcePath, options = {}) {
   const explicitName = options.name != null;
   const skillName = normalizeNewPortableSkillName(options.name ?? inferred.name);
   if (isOfficialSkillName(skillName) && !options.allowShadow) {
-    const sourceSlug = safeNormalizeName(basename14(absoluteSource));
-    const via = explicitName ? `Name '${skillName}' matches a bundled official skill.` : `Inferred name '${skillName}'${sourceSlug && sourceSlug !== skillName ? ` (from source folder '${basename14(absoluteSource)}')` : ""} matches a bundled official skill.`;
+    const sourceSlug = safeNormalizeName(basename16(absoluteSource));
+    const via = explicitName ? `Name '${skillName}' matches a bundled official skill.` : `Inferred name '${skillName}'${sourceSlug && sourceSlug !== skillName ? ` (from source folder '${basename16(absoluteSource)}')` : ""} matches a bundled official skill.`;
     throw new Error(`${via} Importing it would shadow the official '${skillName}'. ` + `Pass --name to choose a different name, or --allow-shadow to override deliberately.`);
   }
   const readOnlyDestination = join41(resolvePortableSkillsRoot(options, false), skillName);
@@ -64204,13 +64484,13 @@ var require_cli_spinners = __commonJS((exports, module) => {
 
 // src/lib/auth-store.ts
 import { chmodSync as chmodSync2, existsSync as existsSync21, mkdirSync as mkdirSync13, readFileSync as readFileSync25, renameSync as renameSync8, statSync as statSync14, unlinkSync as unlinkSync6, writeFileSync as writeFileSync11 } from "fs";
-import { basename as basename15, dirname as dirname26, join as join43 } from "path";
+import { basename as basename17, dirname as dirname26, join as join43 } from "path";
 function getAuthFilePath(env3 = process.env) {
   return skillsCredentialFilePath(env3);
 }
 function getIdentityFilePath(env3 = process.env) {
   const file = skillsCredentialFilePath(env3);
-  return join43(dirname26(file), basename15(file).replace(/^credentials/, "identity") + ".json");
+  return join43(dirname26(file), basename17(file).replace(/^credentials/, "identity") + ".json");
 }
 function getAuthIdentity(env3 = process.env) {
   return readIdentity(env3);
@@ -86234,7 +86514,7 @@ var init_remote_auth = __esm(() => {
 // src/lib/sign-in.ts
 import { createHash as createHash30 } from "crypto";
 import { chmodSync as chmodSync3, mkdirSync as mkdirSync14, readFileSync as readFileSync26, readdirSync as readdirSync15, renameSync as renameSync9, unlinkSync as unlinkSync7, writeFileSync as writeFileSync12 } from "fs";
-import { basename as basename16, dirname as dirname27, join as join44 } from "path";
+import { basename as basename18, dirname as dirname27, join as join44 } from "path";
 function isRecord7(value) {
   return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }
@@ -86379,7 +86659,7 @@ async function pollDeviceAuthorization(input2) {
 }
 function pendingDeviceSignInStem(env3) {
   const file2 = skillsCredentialFilePath(env3);
-  return { dir: dirname27(file2), stem: basename16(file2).replace(/^credentials/, "device-login") };
+  return { dir: dirname27(file2), stem: basename18(file2).replace(/^credentials/, "device-login") };
 }
 function pendingDeviceSignInPath(origin, env3 = process.env) {
   const { dir, stem } = pendingDeviceSignInStem(env3);
@@ -113773,7 +114053,7 @@ import {
   renameSync as renameSync14,
   writeFileSync as writeFileSync24
 } from "fs";
-import { basename as basename17, delimiter as delimiter3, dirname as dirname36, isAbsolute as isAbsolute33, join as join63, relative as relative12, resolve as resolve31, sep as sep14 } from "path";
+import { basename as basename19, delimiter as delimiter3, dirname as dirname36, isAbsolute as isAbsolute33, join as join63, relative as relative12, resolve as resolve31, sep as sep14 } from "path";
 function oldLauncherState(item) {
   if (item.oldShape === "pinned")
     return { shape: "pinned", runtime: item.oldRuntime, cwd: item.oldCwd, target: item.oldTarget, sha256: item.oldSha256, format: item.oldFormat, profile: item.oldProfile };
@@ -114605,7 +114885,7 @@ function inspectAliasPackageChain(home, aliasPath, oldLinkTarget, oldTarget, bin
 function validateAliasSource(home, name, actual) {
   const packageRoot = dirname36(dirname36(actual));
   const roots = [join63(home, ".hasna", "skills", "runtime"), join63(home, ".bun", "install"), join63(home, ".local", "lib", "node_modules")];
-  if (basename17(packageRoot) !== "skills" || basename17(dirname36(packageRoot)) !== "@hasna" || !roots.some((root2) => isWithin(root2, packageRoot))) {
+  if (basename19(packageRoot) !== "skills" || basename19(dirname36(packageRoot)) !== "@hasna" || !roots.some((root2) => isWithin(root2, packageRoot))) {
     throw new Error("ALIAS_SOURCE_ROOT_UNSUPPORTED");
   }
   assertOwnedSafePath(packageRoot, home);
@@ -114700,8 +114980,8 @@ function adoptCopyfileAliases(options = {}) {
     for (const item of aliases) {
       if (!launcherIs(item.path, oldLauncherState(item)))
         throw new Error("ALIAS_CHANGED_BEFORE_SWITCH");
-      inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename17(item.path)], item.chain, true);
-      const source = validateAliasSource(home, basename17(item.path), item.oldTarget);
+      inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename19(item.path)], item.chain, true);
+      const source = validateAliasSource(home, basename19(item.path), item.oldTarget);
       if (source.version !== item.oldVersion || source.binarySha256 !== item.oldBinarySha256)
         throw new Error("ALIAS_SOURCE_DRIFT");
       receipt.state = "switching";
@@ -114710,11 +114990,11 @@ function adoptCopyfileAliases(options = {}) {
       replaceLauncher(item);
       if (!launcherIs(item.path, newLauncherState(item)) || !launcherIs(item.backupPath, oldLauncherState(item)))
         throw new Error("ALIAS_SWITCH_READBACK_MISMATCH");
-      inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename17(item.path)], item.chain, true);
+      inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename19(item.path)], item.chain, true);
       options.onAliasSwitched?.(item.path);
     }
     for (const item of aliases) {
-      inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename17(item.path)], item.chain, true);
+      inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename19(item.path)], item.chain, true);
       if (!launcherIs(item.backupPath, oldLauncherState(item)))
         throw new Error("ALIAS_BACKUP_DRIFT");
     }
@@ -114727,16 +115007,16 @@ function adoptCopyfileAliases(options = {}) {
       for (const item of [...aliases].reverse()) {
         try {
           if (!entryExists(item.backupPath)) {
-            inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename17(item.path)], item.chain, true);
-            const source2 = validateAliasSource(home, basename17(item.path), item.oldTarget);
+            inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename19(item.path)], item.chain, true);
+            const source2 = validateAliasSource(home, basename19(item.path), item.oldTarget);
             if (!entryExists(item.path) || !launcherIs(item.path, oldLauncherState(item)) || source2.version !== item.oldVersion || source2.binarySha256 !== item.oldBinarySha256)
               failed = true;
             continue;
           }
           if (!launcherIs(item.backupPath, oldLauncherState(item)))
             throw new Error("ALIAS_BACKUP_DRIFT");
-          inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename17(item.path)], item.chain, true);
-          const source = validateAliasSource(home, basename17(item.path), item.oldTarget);
+          inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename19(item.path)], item.chain, true);
+          const source = validateAliasSource(home, basename19(item.path), item.oldTarget);
           if (source.version !== item.oldVersion || source.binarySha256 !== item.oldBinarySha256)
             throw new Error("ALIAS_SOURCE_DRIFT");
           if (launcherIs(item.path, oldLauncherState(item)))
@@ -114789,7 +115069,7 @@ function rollbackCopyfileAliases(receiptId, options = {}) {
       throw new Error("ALIAS_RECEIPT_BINDING_INVALID");
     const seen = new Set;
     for (const item of receipt.aliases) {
-      const name = basename17(item.path), target = layout.bin[name];
+      const name = basename19(item.path), target = layout.bin[name];
       if (!target || seen.has(item.path) || !aliasDirs(home).includes(dirname36(item.path)) || item.newTarget !== join63(layout.currentPackageRoot, target) || item.backupPath !== `${item.path}.skills-alias-prev-${receiptId}` || item.chain !== undefined && (!item.chain || typeof item.chain !== "object" || typeof item.chain.packageLinkPath !== "string" || typeof item.chain.packageLinkTarget !== "string")) {
         throw new Error("ALIAS_RECEIPT_LAUNCHER_INVALID");
       }
@@ -114845,7 +115125,7 @@ function rollbackCopyfileAliases(receiptId, options = {}) {
       restored++;
     }
     for (const item of receipt.aliases) {
-      inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename17(item.path)], item.chain, true);
+      inspectAliasPackageChain(home, item.path, item.oldLinkTarget, item.oldTarget, layout.bin[basename19(item.path)], item.chain, true);
     }
     receipt.state = "rolled-back";
     persistAliasReceipt(receiptPath, receipt);
@@ -114898,8 +115178,8 @@ async function updateCopyfileRuntime(version2, options = {}) {
   const finalPath = join63(layout.runtimeRoot, `${version2}-copyfile`);
   const launcherRuntime = pinnedLauncherRuntime();
   const launchers = layout.launchers.map((item) => {
-    const newTarget = join63(finalPath, "node_modules", "@hasna", "skills", layout.bin[basename17(item.path)]);
-    return { ...item, newTarget, ...pinnedRecordFields(launcherRuntime, finalPath, newTarget, launcherProfileForBin(basename17(item.path), layout.bin[basename17(item.path)])) };
+    const newTarget = join63(finalPath, "node_modules", "@hasna", "skills", layout.bin[basename19(item.path)]);
+    return { ...item, newTarget, ...pinnedRecordFields(launcherRuntime, finalPath, newTarget, launcherProfileForBin(basename19(item.path), layout.bin[basename19(item.path)])) };
   });
   const releaseLock = acquireRuntimeLock(layout.runtimeRoot);
   let switched = [];
@@ -115121,11 +115401,11 @@ function rollbackCopyfileRuntime(receiptId, options = {}) {
     const switched = [];
     const seen = new Set;
     for (const item of receipt.launchers) {
-      const bin = oldBins[basename17(item.path)];
+      const bin = oldBins[basename19(item.path)];
       if (!bin || !isAbsolute33(item.path) || seen.has(item.path) || item.oldTarget !== join63(receipt.currentPackageRoot, bin) || item.newTarget !== join63(receipt.targetPackageRoot, bin) || !/^.+\.skills-prev-[0-9a-f-]{36}$/.test(item.backupPath) || !item.backupPath.startsWith(`${item.path}.skills-prev-`) || typeof item.oldLinkTarget !== "string" || resolve31(dirname36(item.path), item.oldLinkTarget) !== item.oldTarget)
         throw new Error("RECEIPT_LAUNCHER_BINDING_INVALID");
       assertNoSymlinkAncestors(dirname36(item.path));
-      assertLauncherRecordShapes(item, launcherProfileForBin(basename17(item.path), bin));
+      assertLauncherRecordShapes(item, launcherProfileForBin(basename19(item.path), bin));
       seen.add(item.path);
       const oldState = oldLauncherState(item), newState = newLauncherState(item);
       let activeTarget;
@@ -115191,7 +115471,7 @@ __export(exports_runtime, {
 });
 import { createHash as createHash39, randomUUID as randomUUID11 } from "crypto";
 import { lstatSync as lstatSync36, mkdirSync as mkdirSync27, readFileSync as readFileSync41, writeFileSync as writeFileSync25 } from "fs";
-import { basename as basename18, isAbsolute as isAbsolute34, join as join64 } from "path";
+import { basename as basename20, isAbsolute as isAbsolute34, join as join64 } from "path";
 import { createInterface } from "readline";
 function registerRuntime(parent) {
   parent.command("run").argument("<skill>", "Skill name").argument("[args...]", "Arguments to pass to the skill; use -- to end Skills options").allowUnknownOption(true).passThroughOptions(true).option("--json", "Output result as JSON", false).option("--remote", "Run on the configured server, using its catalog and quote", false).option("--target <target>", "Execution target: local or cloud").option("--secret-bindings <path>", "Reviewed, exact-selection local execution vault bindings (JSON file)").option("--secret-bindings-template", "Print a scoped bindings template without resolving secrets or running the skill", false).option("--input <json>", "Structured cloud execution input").option("--skill-version <version>", "Exact selected skill version").option("--selection-profile <id>", "Selected Skills profile").option("--session <id>", "Pinned Skills session").option("--cached", "Use the explicit verified selected cache", false).option("--yes", "Approve the server's quoted credit cost for this run", false).option("--idempotency-key <key>", "Reuse this key when retrying the same remote submission").option("--file <path>", "Attach a local input file to a remote run (repeatable)", (value, prior) => [...prior, value], []).option("--wait", "Poll remote runs until a terminal status", false).option("--poll-interval-ms <ms>", "Remote polling interval in milliseconds", "1000").option("--poll-timeout-ms <ms>", "Maximum time to wait for a remote run", "300000").description("Run a skill directly").action(async (name, args2, options, command) => {
@@ -115724,7 +116004,7 @@ async function handleRun(name, args2, options, separatorBeforeSkill) {
         const info = lstatSync36(path);
         if (!info.isFile() || info.size > 20 * 1024 * 1024)
           throw new Error("Input must be a regular file no larger than 20 MiB");
-        return { name: basename18(path), bytes: new Uint8Array(readFileSync41(path)) };
+        return { name: basename20(path), bytes: new Uint8Array(readFileSync41(path)) };
       });
       describeRemoteFiles(inputFiles);
       client2 = new RemoteSkillsClient(routing.apiKey, routing.apiOrigin);
@@ -118175,7 +118455,7 @@ var init_codex_native_trust = __esm(() => {
 // src/lib/claude-prospective-review.ts
 import { createHash as createHash43 } from "crypto";
 import { lstatSync as lstatSync41, readFileSync as readFileSync45, readdirSync as readdirSync25, realpathSync as realpathSync22 } from "fs";
-import { basename as basename19, dirname as dirname42, isAbsolute as isAbsolute38, join as join71, relative as relative14, resolve as resolve37, sep as sep17 } from "path";
+import { basename as basename21, dirname as dirname42, isAbsolute as isAbsolute38, join as join71, relative as relative14, resolve as resolve37, sep as sep17 } from "path";
 import { isDeepStrictEqual as isDeepStrictEqual18 } from "util";
 function hashClaudeDiscoveryBinding(binding) {
   return sha8(JSON.stringify(binding));
@@ -118192,7 +118472,7 @@ function object11(value) {
 function hasOwn2(value, key) {
   return object11(value) && Object.hasOwn(value, key);
 }
-function assertJsonValue(value, name, depth = 0) {
+function assertJsonValue2(value, name, depth = 0) {
   if (depth > 32)
     refuse8(`${name} exceeds the JSON nesting bound`);
   if (value === null || typeof value === "string" || typeof value === "boolean")
@@ -118204,12 +118484,12 @@ function assertJsonValue(value, name, depth = 0) {
   }
   if (Array.isArray(value)) {
     for (const item of value)
-      assertJsonValue(item, name, depth + 1);
+      assertJsonValue2(item, name, depth + 1);
     return;
   }
   if (object11(value)) {
     for (const item of Object.values(value))
-      assertJsonValue(item, name, depth + 1);
+      assertJsonValue2(item, name, depth + 1);
     return;
   }
   refuse8(`${name} contains a non-JSON value`);
@@ -118500,13 +118780,13 @@ function reviewClaudeProspectiveCandidate(request2, requestFileSha256) {
     pluginNames.add(selected.plugin);
     if (!object11(selected.optionsPatch))
       refuse8("selected plugin optionsPatch must be a JSON object");
-    assertJsonValue(selected.optionsPatch, "selected plugin optionsPatch");
+    assertJsonValue2(selected.optionsPatch, "selected plugin optionsPatch");
     if (selected.optionsPatch.enabled !== true)
       refuse8("selected plugin optionsPatch must explicitly declare enabled: true");
     if (Buffer.byteLength(canonicalJson3(selected.optionsPatch), "utf8") > 16 * 1024)
       refuse8("selected plugin optionsPatch exceeds its byte bound");
     abs(selected.manifestPath, "manifest path");
-    if (!selected.manifestPath.startsWith(candidate2.root + sep17) || basename19(dirname42(selected.manifestPath)) !== ".claude-plugin" || selected.manifestPath !== join71(dirname42(dirname42(selected.manifestPath)), ".claude-plugin", "plugin.json"))
+    if (!selected.manifestPath.startsWith(candidate2.root + sep17) || basename21(dirname42(selected.manifestPath)) !== ".claude-plugin" || selected.manifestPath !== join71(dirname42(dirname42(selected.manifestPath)), ".claude-plugin", "plugin.json"))
       refuse8("plugin manifest must be under a plugin root inside the frozen marketplace closure");
     const pluginRoot2 = dirname42(dirname42(selected.manifestPath));
     const relativePluginRoot = relative14(candidate2.root, pluginRoot2);
@@ -119249,13 +119529,13 @@ function registerAgentIntegration(parent) {
       process.exitCode = 1;
     }
   });
-  hook.command("rebind-cache").requiredOption("--agent <agent>", "codex").requiredOption("--expected-policy-sha256 <sha256>", "Exact current managed policy bytes").requiredOption("--expected-settings-sha256 <sha256>", "Exact current Codex configuration bytes").option("--app-only-parent <path>", "Explicit canonical remote cache parent with app capabilities and no Skill docs", (value, previous) => [...previous, value], []).option("--expected-cache-witness-sha256 <sha256>", "Exact semantic cache digest from the reviewed preview; required with --apply").option("--apply", "Apply the reviewed policy-only cache witness migration", false).option("--json", "Return metadata-only preview or receipt", false).description("Explicitly migrate an enrolled Codex cache to semantic skill and capability identity").action(async (options) => {
+  hook.command("rebind-cache").requiredOption("--agent <agent>", "codex").requiredOption("--expected-policy-sha256 <sha256>", "Exact current managed policy bytes").requiredOption("--expected-settings-sha256 <sha256>", "Exact current Codex configuration bytes").option("--app-only-parent <path>", "Explicit canonical remote cache parent with app capabilities and no Skill docs", (value, previous) => [...previous, value], []).option("--reviewed-hook-parent <path>", "Explicit canonical cache parent with already-reviewed native mcp_tool hooks", (value, previous) => [...previous, value], []).option("--expected-cache-witness-sha256 <sha256>", "Exact semantic cache digest from the reviewed preview; required with --apply").option("--apply", "Apply the reviewed policy-only cache witness migration", false).option("--json", "Return metadata-only preview or receipt", false).description("Explicitly migrate an enrolled Codex cache to semantic skill and capability identity").action(async (options) => {
     try {
       if (options.agent !== "codex")
         throw new Error("Cache witness rebind accepts codex only");
       if (options.apply && options.expectedCacheWitnessSha256 === undefined)
         throw new Error("Cache witness apply requires --expected-cache-witness-sha256 from an exact reviewed preview");
-      const plan = planCodexSemanticCacheWitnessUpgrade({ agent: "codex", appOnlyParents: options.appOnlyParent, expectedPolicySha256: options.expectedPolicySha256, expectedSettingsSha256: options.expectedSettingsSha256, ...options.expectedCacheWitnessSha256 !== undefined ? { expectedCacheWitnessSha256: options.expectedCacheWitnessSha256 } : {} });
+      const plan = planCodexSemanticCacheWitnessUpgrade({ agent: "codex", appOnlyParents: options.appOnlyParent, reviewedHookParents: options.reviewedHookParent, expectedPolicySha256: options.expectedPolicySha256, expectedSettingsSha256: options.expectedSettingsSha256, ...options.expectedCacheWitnessSha256 !== undefined ? { expectedCacheWitnessSha256: options.expectedCacheWitnessSha256 } : {} });
       const result2 = options.apply ? applyAgentIntegration(plan) : { changed: [], backups: [] };
       const proof = plan.discoveryAfter[0].codexSemanticCache;
       await writeCliOutput(options.json ? JSON.stringify({ applied: options.apply, cacheWitnessUpgrade: plan.cacheWitnessUpgrade, witness: proof.witness, previousDirectories: proof.supersededDirectories, previousSources: proof.supersededSources, ...result2 }) : `Codex semantic cache witness ${options.apply ? "upgraded" : "planned"}; native configuration and cache were not changed.`);
@@ -120853,7 +121133,7 @@ var init_registry_sync = __esm(() => {
 
 // src/lib/review-export.ts
 import { constants as constants30, closeSync as closeSync31, existsSync as existsSync38, fstatSync as fstatSync31, fsyncSync as fsyncSync10, lstatSync as lstatSync45, openSync as openSync31, realpathSync as realpathSync24, statSync as statSync25, writeFileSync as writeFileSync33 } from "fs";
-import { basename as basename20, dirname as dirname47, isAbsolute as isAbsolute43, join as join74, parse as parse13, resolve as resolve41, sep as sep21 } from "path";
+import { basename as basename22, dirname as dirname47, isAbsolute as isAbsolute43, join as join74, parse as parse13, resolve as resolve41, sep as sep21 } from "path";
 function exactVersion(spec) {
   const at2 = spec.indexOf("@");
   const slug2 = spec.slice(0, at2);
@@ -120864,7 +121144,7 @@ function exactVersion(spec) {
   return { slug: slug2, version: version2 };
 }
 function assertPrivateDestination(output2) {
-  if (!isAbsolute43(output2) || resolve41(output2) !== output2 || !basename20(output2).endsWith(".tar.gz")) {
+  if (!isAbsolute43(output2) || resolve41(output2) !== output2 || !basename22(output2).endsWith(".tar.gz")) {
     throw new Error("Review output must be an absolute, normalized .tar.gz path.");
   }
   const parent = dirname47(output2);