@hasna/skills 0.10.65 → 0.10.67

package/dist/index.js

@@ -7262,7 +7262,7 @@ import {
   statSync as statSync12,
   writeFileSync as writeFileSync9
 } from "fs";
-import { basename as basename13, dirname as dirname25, isAbsolute as isAbsolute25, join as join37, normalize as normalize4, relative as relative10, resolve as resolve25, sep as sep13 } from "path";
+import { basename as basename15, dirname as dirname25, isAbsolute as isAbsolute25, join as join37, normalize as normalize4, relative as relative10, resolve as resolve25, sep as sep13 } from "path";
 
 // src/lib/registry-data/index.ts
 var SKILLS = [];
@@ -8922,7 +8922,7 @@ var NATIVE_SKILL_ROOTS = [
 // src/lib/authoring-path.ts
 import { lstatSync as lstatSync29, realpathSync as realpathSync14 } from "fs";
 import { homedir as homedir6 } from "os";
-import { basename as basename12, dirname as dirname24, join as join36, resolve as resolve24, sep as sep12 } from "path";
+import { basename as basename14, dirname as dirname24, join as join36, resolve as resolve24, sep as sep12 } from "path";
 
 // src/lib/agent-adapters.ts
 var INTEGRATION_AGENTS = ["claude", "codex", "gemini", "opencode", "cursor", "hermes", "sumi"];
@@ -9744,8 +9744,8 @@ function assertAgentPolicyCollections(policy) {
         }
     }
     if (value.codexSemanticCache !== undefined) {
-      const proof = record(value.codexSemanticCache, 8), witness = record(proof.witness, 6);
-      requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && Object.keys(proof).length === 8 && proof.schema === "hasna.codex-semantic-cache-discovery.v1" && typeof proof.previousPolicySha256 === "string" && /^[a-f0-9]{64}$/.test(proof.previousPolicySha256) && Object.keys(witness).length === 6 && witness.schema === "hasna.codex-semantic-cache-witness.v1" && typeof witness.sha256 === "string" && /^[a-f0-9]{64}$/.test(witness.sha256));
+      const proof = record(value.codexSemanticCache, 9), witness = record(proof.witness, 7);
+      requireBound(agent === "codex" && value.agent === "codex" && value.method === "reviewed" && [8, 9].includes(Object.keys(proof).length) && Object.keys(proof).every((key) => ["schema", "configPath", "hookRootAlias", "witness", "appOnlyParents", "previousPolicySha256", "supersededSources", "supersededDirectories", "reviewedHookParents"].includes(key)) && proof.schema === "hasna.codex-semantic-cache-discovery.v1" && typeof proof.previousPolicySha256 === "string" && /^[a-f0-9]{64}$/.test(proof.previousPolicySha256) && [6, 7].includes(Object.keys(witness).length) && Object.keys(witness).every((key) => ["schema", "cacheRoot", "controls", "appOnlyParents", "skills", "sha256", "hookParents"].includes(key)) && witness.schema === "hasna.codex-semantic-cache-witness.v1" && typeof witness.sha256 === "string" && /^[a-f0-9]{64}$/.test(witness.sha256));
       text(proof.configPath);
       requireBound(isAbsolute4(proof.configPath) && resolve4(proof.configPath) === proof.configPath && basename4(proof.configPath) === "config.toml");
       text(witness.cacheRoot);
@@ -9764,6 +9764,20 @@ function assertAgentPolicyCollections(policy) {
           text(parent[key]);
         requireBound(isAbsolute4(parent.pluginParent) && resolve4(parent.pluginParent) === parent.pluginParent);
       }
+      if (proof.reviewedHookParents !== undefined)
+        for (const parent of array(proof.reviewedHookParents, 4096)) {
+          requireBound(object(parent) && parent.role === "reviewed-hook" && (parent.installation === "remote-receipt" && Object.keys(parent).length === 6 || parent.installation === "local-marketplace" && Object.keys(parent).length === 7));
+          requireBound(parent.installation === "remote-receipt" ? Object.keys(parent).sort().join(",") === "installation,namespace,pluginId,pluginParent,remotePluginId,role" : Object.keys(parent).sort().join(",") === "installation,marketplaceSha256,marketplaceSourcePath,namespace,pluginId,pluginParent,role");
+          for (const key of ["pluginId", "namespace", "pluginParent", "installation"])
+            text(parent[key]);
+          if (parent.installation === "remote-receipt")
+            text(parent.remotePluginId);
+          else {
+            text(parent.marketplaceSourcePath);
+            requireBound(typeof parent.marketplaceSha256 === "string" && /^[a-f0-9]{64}$/.test(parent.marketplaceSha256) && isAbsolute4(parent.marketplaceSourcePath) && resolve4(parent.marketplaceSourcePath) === parent.marketplaceSourcePath && basename4(parent.marketplaceSourcePath) === "marketplace.json");
+          }
+          requireBound(isAbsolute4(parent.pluginParent) && resolve4(parent.pluginParent) === parent.pluginParent);
+        }
       for (const row of [...array(witness.controls, 4096), ...array(witness.appOnlyParents, 4096)]) {
         requireBound(object(row));
         for (const key of ["pluginId", "namespace", "pluginParent"])
@@ -9772,6 +9786,26 @@ function assertAgentPolicyCollections(policy) {
           if (row[key] !== undefined)
             requireBound(typeof row[key] === "string" && /^[a-f0-9]{64}$/.test(row[key]));
       }
+      if (witness.hookParents !== undefined)
+        for (const row of array(witness.hookParents, 4096)) {
+          requireBound(object(row) && row.role === "reviewed-hook" && (row.installation === "remote-receipt" && Object.keys(row).length === 9 || row.installation === "local-marketplace" && Object.keys(row).length === 9));
+          requireBound(row.installation === "remote-receipt" ? Object.keys(row).sort().join(",") === "hooksSha256,installation,manifestSha256,namespace,pluginId,pluginParent,receiptSha256,remotePluginId,role" : Object.keys(row).sort().join(",") === "hooksSha256,installation,manifestSha256,marketplaceSha256,marketplaceSourcePath,namespace,pluginId,pluginParent,role");
+          for (const key of ["pluginId", "namespace", "pluginParent", "installation"])
+            text(row[key]);
+          if (row.installation === "remote-receipt")
+            text(row.remotePluginId);
+          else {
+            text(row.marketplaceSourcePath);
+            requireBound(typeof row.marketplaceSha256 === "string" && /^[a-f0-9]{64}$/.test(row.marketplaceSha256) && isAbsolute4(row.marketplaceSourcePath) && resolve4(row.marketplaceSourcePath) === row.marketplaceSourcePath && basename4(row.marketplaceSourcePath) === "marketplace.json");
+          }
+          requireBound(isAbsolute4(row.pluginParent) && resolve4(row.pluginParent) === row.pluginParent);
+          for (const key of ["manifestSha256", "hooksSha256"])
+            requireBound(typeof row[key] === "string" && /^[a-f0-9]{64}$/.test(row[key]));
+          if (row.installation === "remote-receipt")
+            requireBound(typeof row.receiptSha256 === "string" && /^[a-f0-9]{64}$/.test(row.receiptSha256));
+          else
+            requireBound(row.receiptSha256 === undefined);
+        }
       for (const skill of array(witness.skills, 4096)) {
         requireBound(object(skill));
         for (const key of ["name", "pluginId", "namespace", "pluginParent"])
@@ -9851,7 +9885,7 @@ function assertAgentPolicyCollections(policy) {
 // src/lib/agent-discovery.ts
 import { createHash as createHash28 } from "crypto";
 import { lstatSync as lstatSync28, readFileSync as readFileSync21, readdirSync as readdirSync11, realpathSync as realpathSync13 } from "fs";
-import { basename as basename11, dirname as dirname23, isAbsolute as isAbsolute24, join as join35, relative as relative9, resolve as resolve23, sep as sep11 } from "path";
+import { basename as basename13, dirname as dirname23, isAbsolute as isAbsolute24, join as join35, relative as relative9, resolve as resolve23, sep as sep11 } from "path";
 import { isDeepStrictEqual as isDeepStrictEqual7 } from "util";
 
 // node_modules/yaml/dist/index.js
@@ -10542,7 +10576,7 @@ function projectReviewedClaudePluginManifest(text2, reviewedSha256) {
 
 // src/lib/plugin-discovery.ts
 import { closeSync as closeSync16, constants as constants17, fstatSync as fstatSync16, lstatSync as lstatSync26, openSync as openSync16, opendirSync as opendirSync5, readSync as readSync12 } from "fs";
-import { basename as basename9, dirname as dirname21, isAbsolute as isAbsolute22, join as join34, resolve as resolve21 } from "path";
+import { basename as basename11, dirname as dirname21, isAbsolute as isAbsolute22, join as join34, resolve as resolve21 } from "path";
 
 // src/lib/plugin-admission.ts
 import { homedir as homedir5 } from "os";
@@ -11888,7 +11922,7 @@ function replaceSkillSession(expected, replacement, plan, options = {}, beforeCo
   });
 }
 // package.json
-var version = "0.10.65";
+var version = "0.10.67";
 var package_default = {
   name: "@hasna/skills",
   version,
@@ -14246,7 +14280,7 @@ import {
   writeFileSync as writeFileSync7
 } from "fs";
 import { homedir as homedir3 } from "os";
-import { basename as basename8, dirname as dirname19, join as join28 } from "path";
+import { basename as basename10, dirname as dirname19, join as join28 } from "path";
 
 // src/lib/codex-plugin-skill-controls.ts
 import { createHash as createHash14 } from "crypto";
@@ -16178,7 +16212,7 @@ function upgradeCodexSettingsWitnessV5(previous, reviewedSettingsPath) {
 // src/lib/codex-semantic-cache-witness.ts
 import { createHash as createHash18 } from "crypto";
 import { constants as constants9, closeSync as closeSync9, fstatSync as fstatSync9, lstatSync as lstatSync16, openSync as openSync9, readSync as readSync6, readdirSync as readdirSync7, realpathSync as realpathSync9 } from "fs";
-import { dirname as dirname15, isAbsolute as isAbsolute14, join as join20, relative as relative7, resolve as resolve14, sep as sep8 } from "path";
+import { basename as basename8, dirname as dirname15, isAbsolute as isAbsolute14, join as join20, relative as relative7, resolve as resolve14, sep as sep8 } from "path";
 var CODEX_SEMANTIC_CACHE_WITNESS_SCHEMA = "hasna.codex-semantic-cache-witness.v1";
 var identifier3 = (value) => typeof value === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(value);
 var digest = (value) => typeof value === "string" && /^[a-f0-9]{64}$/.test(value);
@@ -16187,6 +16221,26 @@ var refuse4 = () => {
 };
 var MAX_DOCUMENT_BYTES = 1024 * 1024;
 var MAX_RECEIPT_BYTES = 16 * 1024;
+function codexLocalMarketplaceMapsPlugin(text2, marketplace, plugin) {
+  try {
+    hashNativeJsonControls(text2);
+    const value = JSON.parse(text2);
+    const marketplaceInterface = plainObject(value) ? value.interface : undefined;
+    const validInterface = typeof marketplaceInterface === "string" || Number.isSafeInteger(marketplaceInterface) || plainObject(marketplaceInterface) && exactKeys(marketplaceInterface, [], ["displayName"]) && typeof marketplaceInterface.displayName === "string" && marketplaceInterface.displayName.trim().length > 0;
+    if (!plainObject(value) || !exactKeys(value, ["interface", "name", "plugins"]) || value.name !== marketplace || !validInterface || !Array.isArray(value.plugins) || value.plugins.length < 1 || value.plugins.length > 4096)
+      return false;
+    const rows = value.plugins.filter((row2) => plainObject(row2) && row2.name === plugin);
+    if (rows.length !== 1)
+      return false;
+    const row = rows[0];
+    if (!exactKeys(row, ["name", "source"]) || !plainObject(row.source) || !exactKeys(row.source, ["source", "path"]) || row.source.source !== "local" || typeof row.source.path !== "string" || !row.source.path.startsWith("./") || row.source.path.includes("\\"))
+      return false;
+    const parts = row.source.path.split("/");
+    return parts[0] === "." && parts.length > 1 && parts.slice(1).every((part) => /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(part)) && parts.at(-1) === plugin;
+  } catch {
+    return false;
+  }
+}
 function defaultRead(path) {
   const before = lstatSync16(path, { throwIfNoEntry: false, bigint: true });
   if (before === undefined)
@@ -16248,7 +16302,7 @@ function validPluginParent(cacheRoot, pluginParent, namespace, pluginId) {
   return parts.length === 2 && parts.every(identifier3) && parts[1] === namespace && pluginId === `${namespace}@${parts[0]}`;
 }
 function assertWitnessShape(value) {
-  if (!plainObject(value) || !exactKeys(value, ["schema", "cacheRoot", "controls", "appOnlyParents", "skills", "sha256"]) || value.schema !== CODEX_SEMANTIC_CACHE_WITNESS_SCHEMA || typeof value.cacheRoot !== "string" || !isAbsolute14(value.cacheRoot) || resolve14(value.cacheRoot) !== value.cacheRoot || !digest(value.sha256) || !Array.isArray(value.controls) || value.controls.length === 0 || value.controls.length > 4096 || !Array.isArray(value.appOnlyParents) || value.appOnlyParents.length > 4096 || !Array.isArray(value.skills) || value.skills.length === 0 || value.skills.length > 4096)
+  if (!plainObject(value) || !exactKeys(value, ["schema", "cacheRoot", "controls", "appOnlyParents", "skills", "sha256"], ["hookParents"]) || value.schema !== CODEX_SEMANTIC_CACHE_WITNESS_SCHEMA || typeof value.cacheRoot !== "string" || !isAbsolute14(value.cacheRoot) || resolve14(value.cacheRoot) !== value.cacheRoot || !digest(value.sha256) || !Array.isArray(value.controls) || value.controls.length === 0 || value.controls.length > 4096 || !Array.isArray(value.appOnlyParents) || value.appOnlyParents.length > 4096 || !Array.isArray(value.skills) || value.skills.length === 0 || value.skills.length > 4096)
     refuse4();
   const witness = value;
   const controlParents = new Set;
@@ -16269,6 +16323,20 @@ function assertWitnessShape(value) {
       refuse4();
     appOnlyParentPaths.add(row.pluginParent);
   }
+  const hookParentPaths = new Set;
+  const hookParents = witness.hookParents === undefined ? [] : witness.hookParents;
+  if (!Array.isArray(hookParents) || hookParents.length > 4096)
+    refuse4();
+  for (const candidate of hookParents) {
+    if (!plainObject(candidate))
+      refuse4();
+    const row = candidate;
+    const remote = row.installation === "remote-receipt";
+    const local = row.installation === "local-marketplace";
+    if (!exactKeys(row, ["role", "pluginId", "namespace", "pluginParent", "installation", "manifestSha256", "hooksSha256"], remote ? ["remotePluginId", "receiptSha256"] : local ? ["marketplaceSourcePath", "marketplaceSha256"] : []) || row.role !== "reviewed-hook" || !identifier3(row.namespace) || typeof row.pluginId !== "string" || !/^[A-Za-z0-9_-]{1,64}@[A-Za-z0-9_-]{1,64}$/.test(row.pluginId) || typeof row.pluginParent !== "string" || !validPluginParent(String(witness.cacheRoot), row.pluginParent, row.namespace, row.pluginId) || remote && (typeof row.remotePluginId !== "string" || !/^[A-Za-z0-9_~-]{1,1024}$/.test(row.remotePluginId) || !digest(row.receiptSha256)) || local && (typeof row.marketplaceSourcePath !== "string" || !isAbsolute14(row.marketplaceSourcePath) || resolve14(row.marketplaceSourcePath) !== row.marketplaceSourcePath || basename8(row.marketplaceSourcePath) !== "marketplace.json" || !digest(row.marketplaceSha256)) || !remote && !local || !digest(row.manifestSha256) || !digest(row.hooksSha256) || hookParentPaths.has(row.pluginParent) || controlParents.has(row.pluginParent) || appOnlyParentPaths.has(row.pluginParent))
+      refuse4();
+    hookParentPaths.add(row.pluginParent);
+  }
   const skillNames = new Set;
   const qualifiedNames = new Set;
   for (const candidate of witness.skills) {
@@ -16288,6 +16356,7 @@ function assertWitnessShape(value) {
     cacheRoot: witness.cacheRoot,
     controls: witness.controls,
     appOnlyParents: witness.appOnlyParents,
+    ...witness.hookParents === undefined ? {} : { hookParents: witness.hookParents },
     skills: witness.skills
   };
   if (hash2(projection) !== witness.sha256)
@@ -16478,10 +16547,147 @@ function appOnlyParentProjection(cacheRoot, parents2, read2) {
   }
   return rows.sort((a, b) => a.pluginId.localeCompare(b.pluginId) || a.pluginParent.localeCompare(b.pluginParent));
 }
-function assertParents(cacheRoot, controls, appOnlyParents, files, members) {
+var codexHookEvents = new Set([
+  "SessionStart",
+  "UserPromptSubmit",
+  "PreToolUse",
+  "PostToolUse",
+  "PostToolUseFailure",
+  "Stop",
+  "SubagentStart",
+  "SubagentStop",
+  "PreCompact",
+  "Notification",
+  "PermissionRequest",
+  "SessionEnd",
+  "ConfigChange",
+  "WorktreeCreate",
+  "WorktreeRemove",
+  "TeammateIdle",
+  "TaskComplete"
+]);
+function assertJsonValue(value, depth = 0, budget2 = { members: 0 }) {
+  if (depth > 32 || ++budget2.members > 4096)
+    refuse4();
+  if (value === null || typeof value === "string" || typeof value === "boolean")
+    return;
+  if (typeof value === "number" && Number.isFinite(value))
+    return;
+  if (Array.isArray(value)) {
+    for (const item of value)
+      assertJsonValue(item, depth + 1, budget2);
+    return;
+  }
+  if (!plainObject(value))
+    refuse4();
+  for (const [key, item] of Object.entries(value)) {
+    if (!key || /[\x00-\x1f\x7f]/.test(key))
+      refuse4();
+    assertJsonValue(item, depth + 1, budget2);
+  }
+}
+function reviewedHookControls(root, read2) {
+  const manifestPath = join20(root, ".codex-plugin/plugin.json"), hooksPath = join20(root, "hooks/hooks.json");
+  let manifest, manifestSha256, hooks, hooksSha256;
+  try {
+    const manifestText = read2(manifestPath);
+    manifestSha256 = hashNativeJsonControls(manifestText, "version");
+    manifest = JSON.parse(manifestText);
+    const hooksText = read2(hooksPath);
+    hashNativeJsonControls(hooksText);
+    hooksSha256 = createHash18("sha256").update(hooksText).digest("hex");
+    hooks = JSON.parse(hooksText);
+  } catch {
+    return refuse4();
+  }
+  if (!plainObject(manifest) || !exactKeys(manifest, ["name", "version", "hooks"], ["description"]) || !identifier3(manifest.name) || typeof manifest.version !== "string" || manifest.version !== basename8(root) || manifest.hooks !== "./hooks/hooks.json" || manifest.description !== undefined && (typeof manifest.description !== "string" || !manifest.description.trim() || manifest.description.length > 1024))
+    refuse4();
+  const manifestRecord = manifest;
+  if (!plainObject(hooks) || !exactKeys(hooks, ["hooks"], ["description"]) || !plainObject(hooks.hooks) || hooks.description !== undefined && typeof hooks.description !== "string")
+    refuse4();
+  const hookTable = hooks.hooks;
+  const events = Object.entries(hookTable);
+  if (!events.length || events.length > 32)
+    refuse4();
+  for (const [event, groups] of events) {
+    if (!codexHookEvents.has(event) || !Array.isArray(groups) || !groups.length || groups.length > 32)
+      refuse4();
+    for (const group of groups) {
+      if (!plainObject(group) || !exactKeys(group, ["hooks"]) || !Array.isArray(group.hooks) || !group.hooks.length || group.hooks.length > 32)
+        refuse4();
+      const handlers = group.hooks;
+      for (const handler of handlers) {
+        if (!plainObject(handler) || !exactKeys(handler, ["type", "server", "tool", "input"], ["timeout"]) || handler.type !== "mcp_tool" || !identifier3(handler.server) || !identifier3(handler.tool) || !plainObject(handler.input) || handler.timeout !== undefined && (!Number.isSafeInteger(handler.timeout) || Number(handler.timeout) < 1 || Number(handler.timeout) > 300))
+          refuse4();
+        assertJsonValue(handler.input);
+      }
+    }
+  }
+  return { namespace: manifestRecord.name, manifestSha256, hooksSha256 };
+}
+function reviewedHookParentProjection(cacheRoot, parents2, read2) {
+  if (!Array.isArray(parents2) || parents2.length > 4096)
+    refuse4();
+  const seen = new Set, rows = [];
+  for (const parent of parents2) {
+    const remote = parent?.installation === "remote-receipt", local = parent?.installation === "local-marketplace";
+    if (!parent || !exactKeys(parent, ["installation", "namespace", "pluginId", "pluginParent", "role"], remote ? ["remotePluginId"] : local ? ["marketplaceSourcePath", "marketplaceSha256"] : []) || parent.role !== "reviewed-hook" || !identifier3(parent.namespace) || !/^[A-Za-z0-9_-]{1,64}@[A-Za-z0-9_-]{1,64}$/.test(parent.pluginId) || typeof parent.pluginParent !== "string" || remote && (typeof parent.remotePluginId !== "string" || !/^[A-Za-z0-9_~-]{1,1024}$/.test(parent.remotePluginId)) || local && (typeof parent.marketplaceSourcePath !== "string" || !isAbsolute14(parent.marketplaceSourcePath) || resolve14(parent.marketplaceSourcePath) !== parent.marketplaceSourcePath || basename8(parent.marketplaceSourcePath) !== "marketplace.json" || !digest(parent.marketplaceSha256)) || !remote && !local)
+      refuse4();
+    const parts = relative7(cacheRoot, parent.pluginParent).split(sep8);
+    if (!isAbsolute14(parent.pluginParent) || resolve14(parent.pluginParent) !== parent.pluginParent || parts.length !== 2 || parts.some((part) => !identifier3(part)) || parts[1] !== parent.namespace || parent.pluginId !== `${parent.namespace}@${parts[0]}` || seen.has(parent.pluginParent))
+      refuse4();
+    seen.add(parent.pluginParent);
+    const parentStat = lstatSync16(parent.pluginParent, { throwIfNoEntry: false });
+    if (!parentStat?.isDirectory() || parentStat.isSymbolicLink() || realpathSync9(parent.pluginParent) !== parent.pluginParent)
+      refuse4();
+    const receiptPath = join20(parent.pluginParent, ".codex-remote-plugin-install.json"), receiptStat = lstatSync16(receiptPath, { throwIfNoEntry: false });
+    let receiptText;
+    if (remote) {
+      if (!receiptStat?.isFile() || receiptStat.isSymbolicLink() || receiptStat.size > MAX_RECEIPT_BYTES)
+        refuse4();
+      try {
+        receiptText = read2(receiptPath);
+        hashNativeJsonControls(receiptText);
+        const receipt = JSON.parse(receiptText);
+        if (!plainObject(receipt) || !exactKeys(receipt, ["schema_version", "remote_plugin_id"]) || receipt.schema_version !== 1 || receipt.remote_plugin_id !== parent.remotePluginId)
+          refuse4();
+      } catch {
+        refuse4();
+      }
+    } else {
+      const marketplaceSourcePath = parent.marketplaceSourcePath ?? refuse4();
+      if (receiptStat !== undefined || !parent.marketplaceSha256)
+        refuse4();
+      let marketplaceText;
+      try {
+        marketplaceText = read2(marketplaceSourcePath);
+      } catch {
+        return refuse4();
+      }
+      if (createHash18("sha256").update(marketplaceText).digest("hex") !== parent.marketplaceSha256 || !codexLocalMarketplaceMapsPlugin(marketplaceText, parts[0], parent.namespace))
+        refuse4();
+    }
+    const materializations = readdirSync7(parent.pluginParent).filter((name) => name !== ".codex-remote-plugin-install.json").map((version2) => {
+      if (!/^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$/.test(version2))
+        refuse4();
+      const root = join20(parent.pluginParent, version2), stat = lstatSync16(root, { throwIfNoEntry: false });
+      if (!stat?.isDirectory() || stat.isSymbolicLink() || realpathSync9(root) !== root)
+        refuse4();
+      const controls = reviewedHookControls(root, read2);
+      if (controls.namespace !== parent.namespace)
+        refuse4();
+      return { manifestSha256: controls.manifestSha256, hooksSha256: controls.hooksSha256 };
+    });
+    if (!materializations.length || materializations.some((item) => canonical7(item) !== canonical7(materializations[0])))
+      refuse4();
+    rows.push({ ...parent, ...receiptText === undefined ? {} : { receiptSha256: createHash18("sha256").update(receiptText).digest("hex") }, ...materializations[0] });
+  }
+  return rows.sort((a, b) => a.pluginId.localeCompare(b.pluginId) || a.pluginParent.localeCompare(b.pluginParent));
+}
+function assertParents(cacheRoot, controls, appOnlyParents, hookParents, files, members) {
   const expected = new Set;
   const expectedMarkets = new Set;
-  for (const control of [...controls, ...appOnlyParents]) {
+  for (const control of [...controls, ...appOnlyParents, ...hookParents]) {
     const rel = relative7(cacheRoot, control.pluginParent), parts = rel.split(sep8);
     if (resolve14(control.pluginParent) !== control.pluginParent || parts.length !== 2 || parts.some((part) => !identifier3(part)) || control.pluginId !== `${control.namespace}@${parts[0]}` || parts[1] !== control.namespace)
       refuse4();
@@ -16522,7 +16728,9 @@ function assertParents(cacheRoot, controls, appOnlyParents, files, members) {
       refuse4();
     if ([".app.json", ".mcp.json"].includes(base) && (parts.length !== 4 || dirname15(member) !== root))
       refuse4();
-    if (parts.includes("hooks"))
+    if ([".app.json", ".mcp.json"].includes(base) && hookParents.some((reviewed) => reviewed.pluginParent === parent))
+      refuse4();
+    if ((parts[3] === "hooks" || base === "hooks.json") && (![4, 5].includes(parts.length) || parts[3] !== "hooks" || (parts.length === 4 ? base !== "hooks" : base !== "hooks.json") || !hookParents.some((reviewed) => reviewed.pluginParent === join20(cacheRoot, parts[0], parts[1]))))
       refuse4();
   }
 }
@@ -16632,13 +16840,14 @@ function captureCodexSemanticCacheWitness(options) {
     const initialTree = treeSnapshot(options.cacheRoot);
     const controls = controlProjection(options.controls, read2);
     const appOnlyParents = appOnlyParentProjection(options.cacheRoot, options.appOnlyParents ?? [], read2);
+    const hookParents = reviewedHookParentProjection(options.cacheRoot, options.reviewedHookParents ?? [], read2);
     const skillParents = new Set(controls.map((control) => control.pluginParent));
-    if (appOnlyParents.some((parent) => skillParents.has(parent.pluginParent)))
+    if (appOnlyParents.some((parent) => skillParents.has(parent.pluginParent)) || hookParents.some((parent) => skillParents.has(parent.pluginParent) || appOnlyParents.some((app) => app.pluginParent === parent.pluginParent)))
       refuse4();
     if (!reviewedCodexPluginCapabilitiesUnchanged(options.cacheRoot, options.controls, read2, options.rules))
       refuse4();
     const files = initialTree.files;
-    assertParents(options.cacheRoot, controls, appOnlyParents, files, initialTree.state.members);
+    assertParents(options.cacheRoot, controls, appOnlyParents, hookParents, files, initialTree.state.members);
     const expectedNamesByRoot = assertSkillMaterializations(options.cacheRoot, options.controls, files, read2);
     const docs = files.filter((path) => path.endsWith(`${sep8}SKILL.md`));
     const skillRows = [];
@@ -16647,6 +16856,8 @@ function captureCodexSemanticCacheWitness(options) {
       const rel = relative7(options.cacheRoot, document2).split(sep8);
       if (appOnlyParents.some((parent) => parent.pluginParent === join20(options.cacheRoot, rel[0], rel[1])))
         refuse4();
+      if (hookParents.some((parent) => parent.pluginParent === join20(options.cacheRoot, rel[0], rel[1])))
+        refuse4();
       const documentStat = lstatSync16(document2, { throwIfNoEntry: false });
       if (!documentStat?.isFile() || documentStat.isSymbolicLink() || documentStat.size > MAX_DOCUMENT_BYTES)
         refuse4();
@@ -16710,7 +16921,7 @@ function captureCodexSemanticCacheWitness(options) {
     tracked.verify();
     const finalTree = treeSnapshot(options.cacheRoot);
     assertSameTree(initialTree.state, finalTree.state, tracked.paths());
-    const completeProjection = { schema: CODEX_SEMANTIC_CACHE_WITNESS_SCHEMA, cacheRoot: options.cacheRoot, controls, appOnlyParents, skills: uniqueSkills };
+    const completeProjection = { schema: CODEX_SEMANTIC_CACHE_WITNESS_SCHEMA, cacheRoot: options.cacheRoot, controls, appOnlyParents, hookParents, skills: uniqueSkills };
     return { ...completeProjection, sha256: hash2(completeProjection) };
   } catch (error) {
     if (error instanceof Error && error.message.startsWith("CODEX_SEMANTIC_CACHE_WITNESS_UNSUPPORTED"))
@@ -16726,6 +16937,7 @@ function assertCodexSemanticCacheWitnessUnchanged(previous, current) {
     cacheRoot: previous.cacheRoot,
     controls: previous.controls,
     appOnlyParents: previous.appOnlyParents,
+    ...previous.hookParents === undefined ? {} : { hookParents: previous.hookParents },
     skills: previous.skills
   };
   const currentProjection = {
@@ -16733,9 +16945,11 @@ function assertCodexSemanticCacheWitnessUnchanged(previous, current) {
     cacheRoot: current.cacheRoot,
     controls: current.controls,
     appOnlyParents: current.appOnlyParents,
+    ...current.hookParents === undefined ? {} : { hookParents: current.hookParents },
     skills: current.skills
   };
-  if (hash2(priorProjection) !== previous.sha256 || hash2(currentProjection) !== current.sha256 || canonical7(priorProjection) !== canonical7(currentProjection))
+  const comparable = (projection) => ({ ...projection, hookParents: projection.hookParents ?? [] });
+  if (hash2(priorProjection) !== previous.sha256 || hash2(currentProjection) !== current.sha256 || canonical7(comparable(priorProjection)) !== canonical7(comparable(currentProjection)))
     refuse4();
 }
 
@@ -16743,7 +16957,7 @@ function assertCodexSemanticCacheWitnessUnchanged(previous, current) {
 import { createHash as createHash23, randomUUID as randomUUID3 } from "crypto";
 import { isDeepStrictEqual as isDeepStrictEqual6 } from "util";
 import { existsSync as existsSync9, lstatSync as lstatSync23, statSync as statSync10, mkdirSync as mkdirSync7, readFileSync as readFileSync16, readdirSync as readdirSync9, opendirSync as opendirSync3, readlinkSync as readlinkSync7, realpathSync as realpathSync12, renameSync as renameSync3, rmdirSync as rmdirSync2, writeFileSync as writeFileSync6, unlinkSync as unlinkSync4, chmodSync, openSync as openSync14, closeSync as closeSync14, fsyncSync as fsyncSync6, fstatSync as fstatSync14, readSync as readSync10, constants as constants15, linkSync as linkSync2 } from "fs";
-import { dirname as dirname18, join as join27, resolve as resolve18, relative as relative8, isAbsolute as isAbsolute19, sep as sep10 } from "path";
+import { basename as basename9, dirname as dirname18, join as join27, resolve as resolve18, relative as relative8, isAbsolute as isAbsolute19, sep as sep10 } from "path";
 import { homedir as homedir2 } from "os";
 
 // src/lib/managed-policy.ts
@@ -19107,7 +19321,7 @@ function planAgentSettingsWitnessUpgrade(options) {
   return { dataDir: dataDir2, profileId: policy.profileId, changes: [{ path: join27(dataDir2, "agent-policy.json"), before: snapshot2.text, after }], nativeSkills: [], observedPolicy: { path: join27(dataDir2, "agent-policy.json"), before: snapshot2.text }, observedSettings: { path: configPath, before: settings }, discoveryBefore: [replacement], discoveryAfter: [replacement], ...policy.bridge.discoveryExecutables ? { discoveryExecutables: policy.bridge.discoveryExecutables } : {}, rootAliases: aliases, managedAgentChecks: { home, agents: [options.agent] }, settingsWitnessUpgrade: { agent: options.agent, path: configPath, fromHashMode: previous.hashMode ?? "bytes", fromSha256: previous.sha256, toHashMode: next.hashMode, toSha256: next.sha256, reviewedPreimage: options.reviewedPreimage, currentSettingsSha256: options.expectedSettingsSha256, replacedWitnesses: replaced.map((source) => ({ hashMode: source.hashMode ?? "bytes", sha256: source.sha256 })) } };
 }
 function planCodexSemanticCacheWitnessUpgrade(options) {
-  if (options.agent !== "codex" || !/^[a-f0-9]{64}$/.test(options.expectedPolicySha256) || !/^[a-f0-9]{64}$/.test(options.expectedSettingsSha256) || options.expectedCacheWitnessSha256 !== undefined && !/^[a-f0-9]{64}$/.test(options.expectedCacheWitnessSha256) || !Array.isArray(options.appOnlyParents) || options.appOnlyParents.length > 4096 || new Set(options.appOnlyParents).size !== options.appOnlyParents.length)
+  if (options.agent !== "codex" || !/^[a-f0-9]{64}$/.test(options.expectedPolicySha256) || !/^[a-f0-9]{64}$/.test(options.expectedSettingsSha256) || options.expectedCacheWitnessSha256 !== undefined && !/^[a-f0-9]{64}$/.test(options.expectedCacheWitnessSha256) || !Array.isArray(options.appOnlyParents) || options.appOnlyParents.length > 4096 || new Set(options.appOnlyParents).size !== options.appOnlyParents.length || options.reviewedHookParents !== undefined && (!Array.isArray(options.reviewedHookParents) || options.reviewedHookParents.length > 4096 || new Set(options.reviewedHookParents).size !== options.reviewedHookParents.length))
     throw new Error("Invalid Codex semantic cache upgrade request");
   const home = resolve18(options.home ?? homedir2()), dataDir2 = options.dataDir ?? getDataDirReadOnly();
   const snapshot2 = readManagedSkillPolicySnapshot(dataDir2);
@@ -19131,14 +19345,23 @@ function planCodexSemanticCacheWitnessUpgrade(options) {
     throw new Error("Native settings preimage changed");
   const boundedRead = (path) => new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(readNativeBytes(path, 1024 * 1024));
   const unchangedFullSource = (path) => {
-    const source = binding.sources.find((source2) => source2.path === path && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined && source2.reviewArtifact === undefined && (source2.hashMode === undefined || source2.hashMode === "bytes"));
-    if (!source)
-      throw new Error("Cache upgrade lacks prior full identity source");
+    const sources = binding.sources.filter((source2) => source2.path === path && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined && source2.reviewArtifact === undefined && (source2.hashMode === undefined || source2.hashMode === "bytes"));
+    if (sources.length !== 1)
+      throw new Error("Cache upgrade requires one unambiguous prior full identity source");
+    const source = sources[0];
     const text2 = boundedRead(path);
     if (sha4(text2) !== source.sha256)
       throw new Error("Reviewed cache identity source changed");
     return text2;
   };
+  const unchangedReviewedHookSource = (path) => {
+    const sources = binding.sources.filter((source) => source.path === path);
+    if (!sources.length)
+      throw new Error("Cache upgrade lacks prior full identity source");
+    if (sources.length !== 1)
+      throw new Error("Reviewed hook identity source is ambiguous");
+    return unchangedFullSource(path);
+  };
   const appOnlyParents = options.appOnlyParents.map((parent) => {
     const parts = relative8(cacheRoot, parent).split(sep10);
     if (!isAbsolute19(parent) || resolve18(parent) !== parent || parts.length !== 2 || parts.some((part) => !/^[A-Za-z0-9_-]{1,64}$/.test(part)) || controls.some((control) => control.pluginParent === parent))
@@ -19153,11 +19376,60 @@ function planCodexSemanticCacheWitnessUpgrade(options) {
       unchangedFullSource(source.path);
     return { role: "app-only", pluginId: `${parts[1]}@${parts[0]}`, namespace: parts[1], pluginParent: parent, remotePluginId: receipt.remote_plugin_id };
   }).sort((a, b) => a.pluginParent.localeCompare(b.pluginParent));
-  const parents2 = [...new Set([...controls.map((control) => control.pluginParent), ...appOnlyParents.map((parent) => parent.pluginParent)])];
+  const reviewedHookParents = (options.reviewedHookParents ?? []).map((parent) => {
+    const parts = relative8(cacheRoot, parent).split(sep10);
+    if (!isAbsolute19(parent) || resolve18(parent) !== parent || parts.length !== 2 || parts.some((part) => !/^[A-Za-z0-9_-]{1,64}$/.test(part)) || controls.some((control) => control.pluginParent === parent) || appOnlyParents.some((role) => role.pluginParent === parent))
+      throw new Error("Unsupported reviewed native-hook parent role");
+    const receiptPath = join27(parent, ".codex-remote-plugin-install.json"), receiptStat = lstatSync23(receiptPath, { throwIfNoEntry: false });
+    let identity5;
+    if (receiptStat) {
+      if (!receiptStat.isFile() || receiptStat.isSymbolicLink() || receiptStat.size > 16 * 1024)
+        throw new Error("Invalid reviewed native-hook install receipt");
+      const receiptText = unchangedReviewedHookSource(receiptPath);
+      let receipt;
+      try {
+        hashNativeJsonControls(receiptText);
+        receipt = JSON.parse(receiptText);
+      } catch {
+        throw new Error("Invalid reviewed native-hook install receipt");
+      }
+      if (!receipt || Array.isArray(receipt) || Object.keys(receipt).length !== 2 || receipt.schema_version !== 1 || typeof receipt.remote_plugin_id !== "string" || !/^[A-Za-z0-9_~-]{1,1024}$/.test(receipt.remote_plugin_id))
+        throw new Error("Invalid reviewed native-hook install receipt");
+      identity5 = { role: "reviewed-hook", pluginId: `${parts[1]}@${parts[0]}`, namespace: parts[1], pluginParent: parent, installation: "remote-receipt", remotePluginId: receipt.remote_plugin_id };
+    } else {
+      const pluginId = `${parts[1]}@${parts[0]}`;
+      const marketplaceSources = binding.sources.filter((source2) => basename9(source2.path) === "marketplace.json" && source2.sha256 !== null && source2.format === undefined && source2.fields === undefined && source2.reviewArtifact === undefined && (source2.hashMode === undefined || source2.hashMode === "bytes"));
+      const matches = marketplaceSources.flatMap((source2) => {
+        const text2 = unchangedFullSource(source2.path);
+        return codexLocalMarketplaceMapsPlugin(text2, parts[0], parts[1]) ? [{ source: source2, text: text2 }] : [];
+      });
+      if (matches.length !== 1)
+        throw new Error("Local marketplace hook parent lacks one exact enrolled marketplace source");
+      const { source } = matches[0];
+      const config = Bun.TOML.parse(settings);
+      if (config.plugins?.[pluginId]?.enabled !== true)
+        throw new Error("Local marketplace hook parent is not enabled in the unchanged Codex settings");
+      identity5 = { role: "reviewed-hook", pluginId, namespace: parts[1], pluginParent: parent, installation: "local-marketplace", marketplaceSourcePath: source.path, marketplaceSha256: source.sha256 };
+    }
+    const versions = readdirSync9(parent).filter((name) => name !== ".codex-remote-plugin-install.json");
+    if (!versions.length || versions.length > 4096)
+      throw new Error("Reviewed native-hook parent has no bounded materializations");
+    for (const version2 of versions) {
+      if (!/^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$/.test(version2))
+        throw new Error("Invalid reviewed native-hook version identity");
+      const root = join27(parent, version2), stat = lstatSync23(root, { throwIfNoEntry: false });
+      if (!stat?.isDirectory() || stat.isSymbolicLink() || realpathSync12(root) !== root)
+        throw new Error("Invalid reviewed native-hook materialization");
+      unchangedReviewedHookSource(join27(root, ".codex-plugin/plugin.json"));
+      unchangedReviewedHookSource(join27(root, "hooks/hooks.json"));
+    }
+    return identity5;
+  }).sort((a, b) => a.pluginParent.localeCompare(b.pluginParent));
+  const parents2 = [...new Set([...controls.map((control) => control.pluginParent), ...appOnlyParents.map((parent) => parent.pluginParent), ...reviewedHookParents.map((parent) => parent.pluginParent)])];
   const reviewedAlias = aliases.find((alias) => alias.agent === "codex");
   const hookRootAlias = reviewedAlias ? { alias: reviewedAlias.alias, target: reviewedAlias.target } : null;
   assertCodexSemanticCacheHookSafety(cacheRoot, parents2, configPath, hookRootAlias);
-  const supersededSources = binding.sources.filter((source) => codexSemanticCacheSourceRole(source, cacheRoot, parents2));
+  const supersededSources = binding.sources.filter((source) => codexSemanticCacheSourceRole(source, cacheRoot, parents2, reviewedHookParents.map((parent) => parent.pluginParent)));
   for (const source of supersededSources)
     if ([".app.json", ".mcp.json"].includes(source.path.split(sep10).at(-1)))
       unchangedFullSource(source.path);
@@ -19165,7 +19437,7 @@ function planCodexSemanticCacheWitnessUpgrade(options) {
   if (!supersededDirectories.some((directory) => directory.path === cacheRoot) || (binding.directories ?? []).some((directory) => cacheRoot.startsWith(directory.path + sep10)))
     throw new Error("Cache upgrade requires exact cache directory coverage without an unproved ancestor projection");
   const rules = Bun.TOML.parse(settings).skills?.config ?? [];
-  const witness = captureCodexSemanticCacheWitness({ cacheRoot, controls, appOnlyParents, rules, read: boundedRead });
+  const witness = captureCodexSemanticCacheWitness({ cacheRoot, controls, appOnlyParents, reviewedHookParents, rules, read: boundedRead });
   if (options.expectedCacheWitnessSha256 !== undefined && witness.sha256 !== options.expectedCacheWitnessSha256)
     throw new Error("Reviewed semantic cache preimage changed");
   const replacement = { ...binding, codexDisabledPluginSkills: controls, codexSemanticCache: {
@@ -19174,6 +19446,7 @@ function planCodexSemanticCacheWitnessUpgrade(options) {
     hookRootAlias,
     witness,
     appOnlyParents,
+    reviewedHookParents,
     previousPolicySha256: options.expectedPolicySha256,
     supersededSources,
     supersededDirectories
@@ -19192,7 +19465,7 @@ function planCodexSemanticCacheWitnessUpgrade(options) {
     rootAliases: aliases,
     managedAgentChecks: { home, agents: ["codex"] },
     ...policy.bridge.discoveryExecutables ? { discoveryExecutables: policy.bridge.discoveryExecutables } : {},
-    cacheWitnessUpgrade: { ...options, home, dataDir: dataDir2, appOnlyParents: appOnlyParents.map((parent) => parent.pluginParent) }
+    cacheWitnessUpgrade: { ...options, home, dataDir: dataDir2, appOnlyParents: appOnlyParents.map((parent) => parent.pluginParent), reviewedHookParents: reviewedHookParents.map((parent) => parent.pluginParent) }
   };
 }
 function planReviewedArtifactMigration(options) {
@@ -19970,7 +20243,7 @@ function writeManagedSkillDirUnlocked(dir, skillMd, options, assertCurrent) {
     return { action, path: skillMdPath };
   const parentDir = dirname19(dir);
   mkdirSync8(parentDir, { recursive: true });
-  const transactionDir = mkdtempSync(join28(parentDir, `.hasna-skills-write-${basename8(dir)}-`));
+  const transactionDir = mkdtempSync(join28(parentDir, `.hasna-skills-write-${basename10(dir)}-`));
   const candidateDir = join28(transactionDir, "candidate");
   const backupDir = join28(transactionDir, "backup");
   const candidateSkillMdPath = join28(candidateDir, "SKILL.md");
@@ -20824,9 +21097,7 @@ var GENERIC_ENV_PATTERN = /\b((?:OPENAI|ANTHROPIC|GEMINI|XAI|ELEVENLABS|DEEPGRAM
 function extractEnvVars(text2) {
   const envVars = new Set;
   for (const pattern of [ENV_VAR_PATTERN, GENERIC_ENV_PATTERN]) {
-    pattern.lastIndex = 0;
-    let match;
-    while ((match = pattern.exec(text2)) !== null) {
+    for (const match of text2.matchAll(pattern)) {
       envVars.add(match[1]);
     }
   }
@@ -22000,7 +22271,7 @@ function hashManagedPluginRegistry(path, managed) {
       pluginNeed(/^(?:[A-Za-z0-9][A-Za-z0-9._+-]*-)?[a-f0-9]{12}$/.test(row.version) && row.installPath === join34(cacheRoot, row.version), "Managed plugin cache path or version is outside its registration");
       const approval = (producer) => {
         pluginText(producer);
-        const digest2 = `sha256:${basename9(producer)}`;
+        const digest2 = `sha256:${basename11(producer)}`;
         const receipt2 = readPluginAdmissionReceipt(witness.storeRoot, witness.bindingId, digest2);
         pluginNeed(receipt2.materializedPath === producer, "Managed producer path is not an approved immutable projection");
         if (!verified.has(producer)) {
@@ -22064,7 +22335,7 @@ function captureManagedPluginRegistry(path, managedPlugins) {
 // src/lib/claude-marketplace-registry.ts
 import { createHash as createHash26 } from "crypto";
 import { closeSync as closeSync17, constants as constants18, fstatSync as fstatSync17, lstatSync as lstatSync27, openSync as openSync17, readSync as readSync13 } from "fs";
-import { basename as basename10, dirname as dirname22, isAbsolute as isAbsolute23, resolve as resolve22 } from "path";
+import { basename as basename12, dirname as dirname22, isAbsolute as isAbsolute23, resolve as resolve22 } from "path";
 var CLAUDE_MARKETPLACE_REGISTRY_LIMITS = Object.freeze({ bytes: 1024 * 1024, rows: 1024, depth: 32, nodes: 65536, stringCharacters: 16384, pathCharacters: 4096 });
 function need8(value, reason2) {
   if (!value)
@@ -22086,7 +22357,7 @@ function parents2(path) {
 }
 function readRegistry2(path, budget2) {
   absolutePath4(path);
-  need8(basename10(path) === "known_marketplaces.json", "requires known_marketplaces.json");
+  need8(basename12(path) === "known_marketplaces.json", "requires known_marketplaces.json");
   need8(Number.isSafeInteger(budget2.remaining) && budget2.remaining >= 0, "has an invalid byte budget");
   const ancestors2 = parents2(path), initial = lstatSync27(path, { bigint: true });
   need8(initial.isFile() && !initial.isSymbolicLink() && initial.size <= BigInt(CLAUDE_MARKETPLACE_REGISTRY_LIMITS.bytes), "is not a bounded regular file");
@@ -22367,7 +22638,7 @@ function assertReviewedClaudeCacheClosures(home, config, review, canonical9) {
         throw new Error("Reviewed Claude enabled plugin registration requires an object with an installPath string");
       }
       if ([cacheAliasRoot, cacheRoot].some((root2) => row.installPath === root2 || row.installPath.startsWith(root2 + sep11))) {
-        if (!cachePath(row.installPath) || row.installPath.length > AGENT_POLICY_LIMITS.pathCharacters || row.version !== undefined && (typeof row.version !== "string" || basename11(row.installPath) !== row.version)) {
+        if (!cachePath(row.installPath) || row.installPath.length > AGENT_POLICY_LIMITS.pathCharacters || row.version !== undefined && (typeof row.version !== "string" || basename13(row.installPath) !== row.version)) {
           throw new Error("Reviewed Claude discovery has a malformed active cache registration");
         }
         if (row.scope === "user" && (row.projectPath === undefined || row.projectPath === null)) {} else if (row.scope === "project" && typeof row.projectPath === "string" && isAbsolute24(row.projectPath) && resolve23(row.projectPath) === row.projectPath && row.projectPath.length <= AGENT_POLICY_LIMITS.pathCharacters) {} else
@@ -22645,7 +22916,7 @@ function absentRetiredClaudeRoots(binding) {
     if (!targetValid || !targetScopes.has("user\x00"))
       continue;
     const active = rows[0]?.installPath;
-    if (typeof active !== "string" || rows[0]?.version !== basename11(active) || dirname23(active) !== dirname23(root2) || active === root2 || !lstatSync28(active, { throwIfNoEntry: false })?.isDirectory() || realpathSync13(active) !== active)
+    if (typeof active !== "string" || rows[0]?.version !== basename13(active) || dirname23(active) !== dirname23(root2) || active === root2 || !lstatSync28(active, { throwIfNoEntry: false })?.isDirectory() || realpathSync13(active) !== active)
       continue;
     const activeManifest = full(join35(active, ".claude-plugin/plugin.json"));
     if (!activeManifest || projected(activeManifest) !== activeManifest.sha256)
@@ -22654,14 +22925,15 @@ function absentRetiredClaudeRoots(binding) {
   }
   return [...result];
 }
-function codexSemanticCacheSourceRole(source, cacheRoot, parents3) {
+function codexSemanticCacheSourceRole(source, cacheRoot, parents3, hookParents = []) {
   if (!isAbsolute24(source.path) || resolve23(source.path) !== source.path || /[\x00-\x1f\x7f]/.test(source.path) || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.reviewArtifact !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes")
     return false;
   const parts = relative9(cacheRoot, source.path).split(sep11);
   if (parts.length < 3 || !parents3.includes(join35(cacheRoot, parts[0], parts[1])))
     return false;
   const tail = parts.slice(3).join("/");
-  return parts.length === 5 && tail === ".codex-plugin/plugin.json" && source.sha256 !== null || parts.length === 4 && [".app.json", ".mcp.json"].includes(tail) && source.sha256 !== null || source.sha256 === null && (parts.length === 4 && tail === "SKILL.md" || parts.length === 5 && tail === "hooks/hooks.json");
+  const parent = join35(cacheRoot, parts[0], parts[1]);
+  return parts.length === 5 && tail === ".codex-plugin/plugin.json" && source.sha256 !== null || parts.length === 4 && [".app.json", ".mcp.json"].includes(tail) && source.sha256 !== null || parts.length === 5 && tail === "hooks/hooks.json" && hookParents.includes(parent) && source.sha256 !== null || source.sha256 === null && (parts.length === 4 && tail === "SKILL.md" || parts.length === 5 && tail === "hooks/hooks.json");
 }
 function codexSemanticCacheDirectoryRole(path, cacheRoot) {
   return isAbsolute24(path) && resolve23(path) === path && !/[\x00-\x1f\x7f]/.test(path) && (path === cacheRoot || path.startsWith(cacheRoot + sep11));
@@ -22693,20 +22965,28 @@ function verifyCodexSemanticCacheDiscovery(binding, reviewedRootAliases) {
   const cacheRoot = proof.witness.cacheRoot;
   if (controls.some((control) => dirname23(dirname23(control.pluginParent)) !== cacheRoot))
     throw new Error("Codex semantic cache names another enrolled cache");
-  const parents3 = [...new Set([...controls.map((control) => control.pluginParent), ...proof.appOnlyParents.map((parent) => parent.pluginParent)])];
-  const sources = binding.sources.filter((source) => codexSemanticCacheSourceRole(source, cacheRoot, parents3));
+  const reviewedHookParents = proof.reviewedHookParents ?? [];
+  if (!Array.isArray(reviewedHookParents) || reviewedHookParents.length > 4096 || reviewedHookParents.some((parent) => !parent || !(parent.installation === "remote-receipt" && Object.keys(parent).sort().join(",") === "installation,namespace,pluginId,pluginParent,remotePluginId,role" && typeof parent.remotePluginId === "string" || parent.installation === "local-marketplace" && Object.keys(parent).sort().join(",") === "installation,marketplaceSha256,marketplaceSourcePath,namespace,pluginId,pluginParent,role" && typeof parent.marketplaceSourcePath === "string" && /^[a-f0-9]{64}$/.test(parent.marketplaceSha256 ?? "")) || parent.role !== "reviewed-hook" || typeof parent.pluginId !== "string" || typeof parent.namespace !== "string" || typeof parent.pluginParent !== "string") || new Set(reviewedHookParents.map((parent) => parent.pluginParent)).size !== reviewedHookParents.length || !isDeepStrictEqual7((proof.witness.hookParents ?? []).map(({ manifestSha256: _manifest, hooksSha256: _hooks, receiptSha256: _receipt, ...parent }) => parent), reviewedHookParents)) {
+    throw new Error("Invalid reviewed native-hook cache role");
+  }
+  for (const parent of reviewedHookParents)
+    if (parent.installation === "local-marketplace" && !binding.sources.some((source) => source.path === parent.marketplaceSourcePath && source.sha256 === parent.marketplaceSha256 && source.sha256 !== null && source.format === undefined && source.fields === undefined && source.reviewArtifact === undefined && (source.hashMode === undefined || source.hashMode === "bytes")))
+      throw new Error("Local marketplace hook parent lost its enrolled source witness");
+  const parents3 = [...new Set([...controls.map((control) => control.pluginParent), ...proof.appOnlyParents.map((parent) => parent.pluginParent), ...reviewedHookParents.map((parent) => parent.pluginParent)])];
+  const hookParentPaths = reviewedHookParents.map((parent) => parent.pluginParent);
+  const sources = binding.sources.filter((source) => codexSemanticCacheSourceRole(source, cacheRoot, parents3, hookParentPaths));
   const directories = (binding.directories ?? []).filter((directory) => codexSemanticCacheDirectoryRole(directory.path, cacheRoot));
   if (!directories.length || !isDeepStrictEqual7(sources, proof.supersededSources) || !isDeepStrictEqual7(directories, proof.supersededDirectories))
     throw new Error("Codex semantic cache provenance changed");
   const configPath = proof.configPath;
-  if (!isAbsolute24(configPath) || resolve23(configPath) !== configPath || basename11(configPath) !== "config.toml" || /[\x00-\x1f\x7f]/.test(configPath))
+  if (!isAbsolute24(configPath) || resolve23(configPath) !== configPath || basename13(configPath) !== "config.toml" || /[\x00-\x1f\x7f]/.test(configPath))
     throw new Error("Invalid semantic cache configuration source");
   const configSource = binding.sources.find((source) => source.path === configPath && source.sha256 !== null && source.format === undefined && source.fields === undefined);
   if (!configSource || projected(configSource) !== configSource.sha256)
     throw new Error("Codex semantic cache requires unchanged reviewed configuration");
   assertCodexSemanticCacheHookSafety(cacheRoot, parents3, configPath, proof.hookRootAlias);
   const rules = parseConfig(read2(configPath), configPath, true).skills?.config ?? [];
-  const current = captureCodexSemanticCacheWitness({ cacheRoot, controls, appOnlyParents: proof.appOnlyParents, rules });
+  const current = captureCodexSemanticCacheWitness({ cacheRoot, controls, appOnlyParents: proof.appOnlyParents, reviewedHookParents, rules });
   assertCodexSemanticCacheWitnessUnchanged(proof.witness, current);
   return proof;
 }
@@ -22790,7 +23070,7 @@ function codexInstallationRoots(binding) {
   const config = join35(dirname23(dirname23(cache)), "config.toml"), home = dirname23(dirname23(dirname23(cache)));
   const configSource = binding.sources.find((source) => source.path === config && source.sha256 !== null && (!source.format || source.format === "toml" && source.fields?.includes("plugins")));
   const nativeRoots = NATIVE_SKILL_ROOTS.filter(([agent]) => agent === "codex").map(([, path]) => join35(home, path));
-  if (!configSource || proof.plugins.some((input) => nativeRoots.some((root2) => root2 === input.sourceRoot || root2.startsWith(input.sourceRoot + sep11) || input.sourceRoot.startsWith(root2 + sep11)) || binding.sources.some((source) => basename11(source.path) === "config.toml" && (source.path === input.sourceRoot || source.path.startsWith(input.sourceRoot + sep11)))))
+  if (!configSource || proof.plugins.some((input) => nativeRoots.some((root2) => root2 === input.sourceRoot || root2.startsWith(input.sourceRoot + sep11) || input.sourceRoot.startsWith(root2 + sep11)) || binding.sources.some((source) => basename13(source.path) === "config.toml" && (source.path === input.sourceRoot || source.path.startsWith(input.sourceRoot + sep11)))))
     throw new Error("Native installation input overlaps configuration or loading roots");
   if (proof.plugins.some((input) => dirname23(dirname23(input.pluginParent)) !== cache || !binding.sources.some((source) => source.path === join35(input.sourceRoot, ".codex-plugin/plugin.json") && source.sha256 !== null && source.format === undefined && source.fields === undefined)))
     throw new Error("Missing native installation input source witness");
@@ -22802,13 +23082,13 @@ function codexInstallationRoots(binding) {
   });
 }
 function assertMarketplaceBinding(binding, source) {
-  if (source.hashMode === "claude-plugin-manifest-v1" && (binding.agent !== "claude" || basename11(source.path) !== "plugin.json" || !source.path.endsWith(join35(sep11, ".claude-plugin", "plugin.json"))))
+  if (source.hashMode === "claude-plugin-manifest-v1" && (binding.agent !== "claude" || basename13(source.path) !== "plugin.json" || !source.path.endsWith(join35(sep11, ".claude-plugin", "plugin.json"))))
     throw new Error("Claude plugin manifest witnesses require Claude plugin discovery");
-  if (source.hashMode === "sumi-settings-v1" && (binding.agent !== "sumi" || binding.method !== "reviewed" || basename11(source.path) !== "sumi.json"))
+  if (source.hashMode === "sumi-settings-v1" && (binding.agent !== "sumi" || binding.method !== "reviewed" || basename13(source.path) !== "sumi.json"))
     throw new Error("Sumi settings witnesses require explicit reviewed Sumi configuration");
-  if ((source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4" || source.hashMode === "codex-settings-v5")) && (binding.agent !== "codex" || binding.method !== "reviewed" || basename11(source.path) !== "config.toml"))
+  if ((source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4" || source.hashMode === "codex-settings-v5")) && (binding.agent !== "codex" || binding.method !== "reviewed" || basename13(source.path) !== "config.toml"))
     throw new Error("Codex settings witnesses require explicit reviewed Codex configuration");
-  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4")) && (binding.agent !== "claude" || binding.method !== "reviewed" || basename11(source.path) !== "settings.json"))
+  if ((source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4")) && (binding.agent !== "claude" || binding.method !== "reviewed" || basename13(source.path) !== "settings.json"))
     throw new Error("Claude settings witnesses require explicit reviewed Claude configuration");
   if ((source.hashMode === "claude-marketplace-registry" || source.hashMode === "claude-marketplace-registry-v2") && (binding.agent !== "claude" || binding.method !== "reviewed"))
     throw new Error("Claude marketplace witnesses require explicit reviewed Claude discovery");
@@ -22926,7 +23206,7 @@ function verifyAutomaticDiscoveryClosure(binding, options) {
   const current = resolveAgentDiscovery({ home: options.home, agent: binding.agent, canonical: options.canonical, executable: runtime });
   if (JSON.stringify(current) === JSON.stringify(binding))
     return;
-  const reviewedWithRuntime = (binding.builtinNames?.length ?? 0) > 0 || binding.sources.some((source) => basename11(source.path) === "package.json");
+  const reviewedWithRuntime = (binding.builtinNames?.length ?? 0) > 0 || binding.sources.some((source) => basename13(source.path) === "package.json");
   const otherwiseCurrent = current.method === binding.method && JSON.stringify(current.roots) === JSON.stringify(binding.roots) && JSON.stringify(current.directories) === JSON.stringify(binding.directories) && current.sources.every((source) => binding.sources.some((saved) => isDeepStrictEqual7(saved, source)));
   if (command && gap && runtime === null && reviewedWithRuntime && otherwiseCurrent)
     throw discoveryRootUnresolved(binding.agent, command, gap);
@@ -23069,7 +23349,7 @@ function resolveAgentDiscovery(options) {
       throw new Error("Discovery review must include the agent configuration source");
     const reviewedSources = supersedesSettingsProjection(agent, review.sources, canonical9(configPath)) ? sources.filter((source) => !isSupersededSettingsProjection(agent, canonical9(configPath), source)) : sources;
     const reviewedSourcesWithManifestProjection = review.sources.map((source) => {
-      if (agent !== "claude" || source.sha256 === null || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes" || basename11(source.path) !== "plugin.json" || !source.path.endsWith(join35(sep11, ".claude-plugin", "plugin.json")))
+      if (agent !== "claude" || source.sha256 === null || source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || source.hashMode !== undefined && source.hashMode !== "bytes" || basename13(source.path) !== "plugin.json" || !source.path.endsWith(join35(sep11, ".claude-plugin", "plugin.json")))
         return source;
       const pluginRoot = dirname23(dirname23(source.path)), hooksPath = join35(pluginRoot, "hooks/hooks.json");
       const hookStat = lstatSync28(hooksPath, { throwIfNoEntry: false });
@@ -23235,7 +23515,7 @@ function physicalPath(path) {
   let cursor = resolve24(path);
   const suffix = [];
   while (!lstatSync29(cursor, { throwIfNoEntry: false })) {
-    suffix.unshift(basename12(cursor));
+    suffix.unshift(basename14(cursor));
     const parent = dirname24(cursor);
     if (parent === cursor)
       return resolve24(path);
@@ -23454,7 +23734,7 @@ function physicalImportPath(path) {
   let ancestor = resolve25(path);
   const suffix = [];
   while (!existsSync14(ancestor)) {
-    suffix.unshift(basename13(ancestor));
+    suffix.unshift(basename15(ancestor));
     ancestor = dirname25(ancestor);
   }
   return join37(realpathSync15(ancestor), ...suffix);
@@ -23479,8 +23759,8 @@ function portPortableSkill(sourcePath, options = {}) {
   const explicitName = options.name != null;
   const skillName = normalizeNewPortableSkillName(options.name ?? inferred.name);
   if (isOfficialSkillName(skillName) && !options.allowShadow) {
-    const sourceSlug = safeNormalizeName(basename13(absoluteSource));
-    const via = explicitName ? `Name '${skillName}' matches a bundled official skill.` : `Inferred name '${skillName}'${sourceSlug && sourceSlug !== skillName ? ` (from source folder '${basename13(absoluteSource)}')` : ""} matches a bundled official skill.`;
+    const sourceSlug = safeNormalizeName(basename15(absoluteSource));
+    const via = explicitName ? `Name '${skillName}' matches a bundled official skill.` : `Inferred name '${skillName}'${sourceSlug && sourceSlug !== skillName ? ` (from source folder '${basename15(absoluteSource)}')` : ""} matches a bundled official skill.`;
     throw new Error(`${via} Importing it would shadow the official '${skillName}'. ` + `Pass --name to choose a different name, or --allow-shadow to override deliberately.`);
   }
   const readOnlyDestination = join37(resolvePortableSkillsRoot(options, false), skillName);
@@ -50070,7 +50350,7 @@ async function reconcileSkillSession(input2, options = {}) {
 // src/lib/claude-prospective-review.ts
 import { createHash as createHash38 } from "crypto";
 import { lstatSync as lstatSync31, readFileSync as readFileSync31, readdirSync as readdirSync18, realpathSync as realpathSync17 } from "fs";
-import { basename as basename14, dirname as dirname33, isAbsolute as isAbsolute29, join as join47, relative as relative15, resolve as resolve30, sep as sep18 } from "path";
+import { basename as basename16, dirname as dirname33, isAbsolute as isAbsolute29, join as join47, relative as relative15, resolve as resolve30, sep as sep18 } from "path";
 var MAX_CANDIDATE_FILES = 16384;
 var MAX_CANDIDATE_BYTES = 256 * 1024 * 1024;
 var sha7 = (data) => createHash38("sha256").update(data).digest("hex");