@hasna/skills 0.10.72 → 0.10.73

package/bin/mcp.js

@@ -23,7 +23,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.72",
+    version: "0.10.73",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -32219,6 +32219,10 @@ function canonical4(value, depth = 0, budget2 = { remaining: 65536 }) {
 function hashCodexSettingsReplacement(text2, budget2 = { remaining: 256 * 1024 * 1024 }) {
   need4(Buffer.byteLength(text2) <= 1024 * 1024 && budget2.remaining >= Buffer.byteLength(text2));
   budget2.remaining -= Buffer.byteLength(text2);
+  const prepared = prepareCodexSettingsV1(text2);
+  return finishCodexSettingsV1(prepared.config, prepared.tokens);
+}
+function prepareCodexSettingsV1(text2) {
   let config2;
   try {
     config2 = Bun.TOML.parse(text2);
@@ -32226,6 +32230,9 @@ function hashCodexSettingsReplacement(text2, budget2 = { remaining: 256 * 1024 *
     throw new Error("Invalid Codex settings witness");
   }
   need4(config2 && typeof config2 === "object" && !Array.isArray(config2));
+  return { config: config2, tokens: numericTokens(text2) };
+}
+function finishCodexSettingsV1(config2, tokens) {
   if (Object.hasOwn(config2, "model")) {
     need4(typeof config2.model === "string" && /^[A-Za-z0-9][A-Za-z0-9._:/-]{0,127}$/.test(config2.model));
     delete config2.model;
@@ -32235,11 +32242,7 @@ function hashCodexSettingsReplacement(text2, budget2 = { remaining: 256 * 1024 *
       need4(typeof config2[key] === "string" && values.has(config2[key]));
       delete config2[key];
     }
-  return sha(`hasna.skills.codex-settings.v1\x00${JSON.stringify([canonical4(config2), numericTokens(text2)])}`);
-}
-function captureCodexSettings(path, budget2 = { remaining: 256 * 1024 * 1024 }) {
-  const text2 = readNativeSettingsWitnessFile(path, budget2, "config.toml");
-  return { path, hashMode: "codex-settings-v1", sha256: hashCodexSettingsReplacement(text2) };
+  return sha(`hasna.skills.codex-settings.v1\x00${JSON.stringify([canonical4(config2), tokens])}`);
 }
 var sha = (text2) => createHash11("sha256").update(text2).digest("hex"), EFFORT, VERBOSITY;
 var init_codex_settings_witness_v1 = __esm(() => {
@@ -32953,7 +32956,7 @@ function projectStatusLine(config2) {
   if (!Object.keys(tui).length)
     delete config2.tui;
 }
-function settingsDigest2(text2, version2 = 2, dependencies) {
+function prepareSettings(text2, version2, dependencies) {
   let config2;
   try {
     config2 = Bun.TOML.parse(text2);
@@ -32992,51 +32995,106 @@ function settingsDigest2(text2, version2 = 2, dependencies) {
       delete config2.tui.model_availability_nux;
     if (isRecord3(config2.tui) && typeof config2.tui.screen_reader_detection_done === "boolean")
       delete config2.tui.screen_reader_detection_done;
-    config2 = embedCodexNumericTokens(config2, tokens);
+    return { config: embedCodexNumericTokens(config2, tokens), numericSource: text2, dependencies };
+  }
+  const mcp = version2 >= 3 ? projectRegularCodexMcp(config2, text2) : { config: config2, numericSource: text2 };
+  return version2 >= 4 ? projectModelAvailabilityNux(mcp.config, mcp.numericSource) : mcp;
+}
+function finishSettings(prepared, version2) {
+  const config2 = prepared.config;
+  if (version2 === 6) {
     normalize2(config2, 6);
     if (isRecord3(config2.tui) && !Object.keys(config2.tui).length)
       delete config2.tui;
-    return sha2(`hasna.skills.codex-settings.v6\x00${JSON.stringify([canonical5(config2), canonical5(dependencies)])}`);
+    return sha2(`hasna.skills.codex-settings.v6\x00${JSON.stringify([canonical5(config2), canonical5(prepared.dependencies)])}`);
   }
-  const mcp = version2 >= 3 ? projectRegularCodexMcp(config2, text2) : { config: config2, numericSource: text2 };
-  const projected = version2 >= 4 ? projectModelAvailabilityNux(mcp.config, mcp.numericSource) : mcp;
-  normalize2(projected.config, version2);
-  const values = [canonical5(projected.config), numericTokens2(projected.numericSource)];
+  normalize2(config2, version2);
+  const values = [canonical5(config2), numericTokens2(prepared.numericSource)];
   return sha2(`hasna.skills.codex-settings.v${version2}\x00${JSON.stringify(values)}`);
 }
+function settingsDigest2(text2, version2 = 2, dependencies) {
+  return finishSettings(prepareSettings(text2, version2, dependencies), version2);
+}
+function cloneTree(value) {
+  if (Array.isArray(value))
+    return value.map(cloneTree);
+  if (isRecord3(value) && [Object.prototype, null].includes(Object.getPrototypeOf(value)))
+    return Object.fromEntries(Object.entries(value).map(([key2, child2]) => [key2, cloneTree(child2)]));
+  return value;
+}
+function receiptEdits(config2) {
+  const tui = config2.tui;
+  const set2 = (value) => (target) => {
+    if (!isRecord3(target.tui))
+      target.tui = {};
+    target.tui[SCREEN_READER_RECEIPT] = value;
+  };
+  if (tui === undefined || isRecord3(tui) && !Object.hasOwn(tui, SCREEN_READER_RECEIPT))
+    return [set2(true), set2(false)];
+  if (!isRecord3(tui) || typeof tui[SCREEN_READER_RECEIPT] !== "boolean")
+    return [];
+  const remove = (dropEmpty) => (target) => {
+    delete target.tui[SCREEN_READER_RECEIPT];
+    if (dropEmpty && !Object.keys(target.tui).length)
+      delete target.tui;
+  };
+  return [remove(true), ...Object.keys(tui).length === 1 ? [remove(false)] : [], set2(!tui[SCREEN_READER_RECEIPT])];
+}
+function codexSettingsToleratesScreenReaderReceipt(text2, hashMode, expected) {
+  try {
+    if (Buffer.byteLength(text2) > 1024 * 1024 || !/^[a-f0-9]{64}$/.test(expected))
+      return false;
+    if (hashMode === "codex-settings-v1") {
+      const prepared2 = prepareCodexSettingsV1(text2);
+      return receiptEdits(prepared2.config).some((edit) => {
+        const candidate = cloneTree(prepared2.config);
+        edit(candidate);
+        return finishCodexSettingsV1(candidate, prepared2.tokens) === expected;
+      });
+    }
+    const version2 = Number(hashMode.slice("codex-settings-v".length));
+    if (![2, 3, 4, 5].includes(version2))
+      return false;
+    const prepared = prepareSettings(text2, version2);
+    return receiptEdits(prepared.config).some((edit) => {
+      const candidate = cloneTree(prepared.config);
+      edit(candidate);
+      if (version2 >= 4 && isRecord3(candidate.tui) && !Object.keys(candidate.tui).length)
+        delete candidate.tui;
+      return finishSettings({ ...prepared, config: candidate }, version2) === expected;
+    });
+  } catch {
+    return false;
+  }
+}
+function codexSettingsWitnessMatch(path, hashMode, expected, budget2 = { remaining: 256 * 1024 * 1024 }) {
+  const text2 = readNativeSettingsWitnessFile(path, budget2, "config.toml");
+  need7(Buffer.byteLength(text2) <= 1024 * 1024);
+  const exact = hashMode === "codex-settings-v1" ? hashCodexSettingsReplacement(text2) : settingsDigest2(text2, Number(hashMode.slice("codex-settings-v".length)));
+  if (exact === expected)
+    return "exact";
+  return codexSettingsToleratesScreenReaderReceipt(text2, hashMode, expected) ? "screen-reader-receipt" : null;
+}
 function hashCodexSettingsReplacementV2(text2, budget2 = { remaining: 256 * 1024 * 1024 }) {
   need7(Buffer.byteLength(text2) <= 1024 * 1024 && budget2.remaining >= Buffer.byteLength(text2));
   budget2.remaining -= Buffer.byteLength(text2);
   return settingsDigest2(text2);
 }
-function captureCodexSettingsV2(path, budget2 = { remaining: 256 * 1024 * 1024 }) {
-  const text2 = readNativeSettingsWitnessFile(path, budget2, "config.toml");
-  return { path, hashMode: "codex-settings-v2", sha256: settingsDigest2(text2) };
-}
 function hashCodexSettingsReplacementV3(text2, budget2 = { remaining: 256 * 1024 * 1024 }) {
   need7(Buffer.byteLength(text2) <= 1024 * 1024 && budget2.remaining >= Buffer.byteLength(text2));
   budget2.remaining -= Buffer.byteLength(text2);
   return settingsDigest2(text2, 3);
 }
-function captureCodexSettingsV3(path, budget2 = { remaining: 256 * 1024 * 1024 }) {
-  return { path, hashMode: "codex-settings-v3", sha256: settingsDigest2(readNativeSettingsWitnessFile(path, budget2, "config.toml"), 3) };
-}
 function hashCodexSettingsReplacementV4(text2, budget2 = { remaining: 256 * 1024 * 1024 }) {
   need7(Buffer.byteLength(text2) <= 1024 * 1024 && budget2.remaining >= Buffer.byteLength(text2));
   budget2.remaining -= Buffer.byteLength(text2);
   return settingsDigest2(text2, 4);
 }
-function captureCodexSettingsV4(path, budget2 = { remaining: 256 * 1024 * 1024 }) {
-  return { path, hashMode: "codex-settings-v4", sha256: settingsDigest2(readNativeSettingsWitnessFile(path, budget2, "config.toml"), 4) };
-}
 function hashCodexSettingsReplacementV5(text2, budget2 = { remaining: 256 * 1024 * 1024 }) {
   need7(Buffer.byteLength(text2) <= 1024 * 1024 && budget2.remaining >= Buffer.byteLength(text2));
   budget2.remaining -= Buffer.byteLength(text2);
   return settingsDigest2(text2, 5);
 }
-function captureCodexSettingsV5(path, budget2 = { remaining: 256 * 1024 * 1024 }) {
-  return { path, hashMode: "codex-settings-v5", sha256: settingsDigest2(readNativeSettingsWitnessFile(path, budget2, "config.toml"), 5) };
-}
 function captureCodexSettingsV6(path, reviewedSources, budget2 = { remaining: 256 * 1024 * 1024 }, changes) {
   const original = readNativeSettingsWitnessFile(path, budget2, "config.toml");
   const text2 = changes?.get(path) ?? original;
@@ -33046,7 +33104,7 @@ function captureCodexSettingsV6(path, reviewedSources, budget2 = { remaining: 25
   need7(dependencies.servers.every((server) => !["codex_apps", "_codex_apps"].includes(server) && isCodexLocalStdioMcpServer(server, config2.mcp_servers?.[server])));
   return { path, hashMode: "codex-settings-v6", sha256: settingsDigest2(text2, 6, dependencies), hookSources: dependencies.sources };
 }
-var sha2 = (text2) => createHash13("sha256").update(text2).digest("hex"), EFFORT2, VERBOSITY2, MODEL, CODEX_DISCOVERY_PROJECTION_FIELDS, INFERENCE;
+var sha2 = (text2) => createHash13("sha256").update(text2).digest("hex"), EFFORT2, VERBOSITY2, MODEL, CODEX_DISCOVERY_PROJECTION_FIELDS, INFERENCE, SCREEN_READER_RECEIPT = "screen_reader_detection_done";
 var init_codex_settings_witness = __esm(() => {
   init_codex_settings_witness_v1();
   init_codex_settings_witness_v1();
@@ -35310,6 +35368,13 @@ var init_codex_semantic_cache_witness = __esm(() => {
   ]);
 });
 
+// src/lib/codex-node-modules.ts
+var PLUGIN_MANIFESTS;
+var init_codex_node_modules = __esm(() => {
+  init_claude_settings_witness();
+  PLUGIN_MANIFESTS = Object.freeze(["plugin.json", ".codex-plugin/plugin.json", ".claude-plugin/plugin.json", ".cursor-plugin/plugin.json"]);
+});
+
 // src/lib/managed-policy.ts
 import { closeSync as closeSync14, constants as constants11, fstatSync as fstatSync14, lstatSync as lstatSync17, openSync as openSync14, readSync as readSync8 } from "fs";
 import { join as join22 } from "path";
@@ -35838,6 +35903,7 @@ var init_agent_integration = __esm(() => {
   init_native_discovery_roots();
   init_codex_vendor_refresh();
   init_codex_native_skill_catalog();
+  init_codex_node_modules();
   init_config();
   init_managed_policy();
   init_agent_bridge();
@@ -37313,10 +37379,9 @@ function projected(source, changes, budget2 = discoveryByteBudget()) {
   if (source.hashMode === "codex-settings-v1" || source.hashMode === "codex-settings-v2" || (source.hashMode === "codex-settings-v3" || source.hashMode === "codex-settings-v4" || source.hashMode === "codex-settings-v5")) {
     if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || typeof source.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(source.sha256))
       throw new Error("Codex settings witnesses require exact typed metadata");
-    const current = (source.hashMode === "codex-settings-v5" ? captureCodexSettingsV5 : source.hashMode === "codex-settings-v4" ? captureCodexSettingsV4 : source.hashMode === "codex-settings-v3" ? captureCodexSettingsV3 : source.hashMode === "codex-settings-v2" ? captureCodexSettingsV2 : captureCodexSettings)(source.path, budget2).sha256;
-    if (current !== source.sha256)
+    if (codexSettingsWitnessMatch(source.path, source.hashMode, source.sha256, budget2) === null)
       throw new NativeDiscoveryWitnessChange("input", source.path, `Native discovery input changed; run skills hook install with a fresh discovery review: ${source.path}`);
-    return changes?.has(source.path) ? (source.hashMode === "codex-settings-v5" ? hashCodexSettingsReplacementV5 : source.hashMode === "codex-settings-v4" ? hashCodexSettingsReplacementV4 : source.hashMode === "codex-settings-v3" ? hashCodexSettingsReplacementV3 : source.hashMode === "codex-settings-v2" ? hashCodexSettingsReplacementV2 : hashCodexSettingsReplacement)(changes.get(source.path), budget2) : current;
+    return changes?.has(source.path) ? (source.hashMode === "codex-settings-v5" ? hashCodexSettingsReplacementV5 : source.hashMode === "codex-settings-v4" ? hashCodexSettingsReplacementV4 : source.hashMode === "codex-settings-v3" ? hashCodexSettingsReplacementV3 : source.hashMode === "codex-settings-v2" ? hashCodexSettingsReplacementV2 : hashCodexSettingsReplacement)(changes.get(source.path), budget2) : source.sha256;
   }
   if (source.hashMode === "claude-settings-v1" || source.hashMode === "claude-settings-v2" || (source.hashMode === "claude-settings-v3" || source.hashMode === "claude-settings-v4")) {
     if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined || typeof source.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(source.sha256))
@@ -37429,10 +37494,22 @@ function retiredCodexRoots(binding, tolerance) {
   }
   return proof.roots;
 }
-function retainableAbsentSource(source) {
+function retainableAbsentWitness(source) {
   if (source.format !== undefined || source.fields !== undefined || source.managedPlugins !== undefined)
-    return false;
-  return [undefined, "bytes"].includes(source.hashMode) || source.hashMode === "claude-plugin-manifest-v1" && source.sha256 !== null && source.path.endsWith(join30(sep11, ".claude-plugin", "plugin.json")) || source.hashMode === CLAUDE_ORPHAN_MARKER_MODE && source.sha256 !== null && isClaudePluginCacheOrphanMarker(source.path);
+    return null;
+  if ([undefined, "bytes"].includes(source.hashMode))
+    return "bytes";
+  if (source.hashMode === "claude-plugin-manifest-v1" && source.sha256 !== null && source.path.endsWith(join30(sep11, ".claude-plugin", "plugin.json")))
+    return "claude-plugin-manifest-v1";
+  if (source.hashMode === CLAUDE_ORPHAN_MARKER_MODE && source.sha256 !== null && isClaudePluginCacheOrphanMarker(source.path))
+    return CLAUDE_ORPHAN_MARKER_MODE;
+  return null;
+}
+function retainableAbsentSource(source) {
+  return retainableAbsentWitness(source) !== null;
+}
+function retainedAbsentRoot(absentRoots, source) {
+  return retainableAbsentSource(source) ? absentRoots.find((root) => source.path.startsWith(root + sep11)) : undefined;
 }
 function absentRetiredClaudeRoots(binding) {
   if (binding.agent !== "claude" || binding.method !== "reviewed")
@@ -37625,7 +37702,7 @@ function verifyAgentDiscovery(binding, codexRecovery, reviewedRootAliases, witne
       safe6(source.path);
       continue;
     }
-    if (absentRoots.some((root) => source.path.startsWith(root + sep11)) && retainableAbsentSource(source)) {
+    if (retainedAbsentRoot(absentRoots, source) !== undefined) {
       safe6(source.path);
       continue;
     }
@@ -37999,7 +38076,7 @@ var DISCOVERY_RUNTIME_COMMANDS, realpathOrNull = (path) => {
   } catch {
     return null;
   }
-}, digest2 = (text2) => createHash24("sha256").update(text2).digest("hex");
+}, digest2 = (text2) => createHash24("sha256").update(text2).digest("hex"), CLAUDE_CONTROL_WITNESS_MODES, CLAUDE_CONTROL_FILES, ADOPTABLE_SETTINGS_MATCHES, CLAUDE_PROJECT_DISCOVERY_KEYS;
 var init_agent_discovery = __esm(() => {
   init_sumi_settings_witness();
   init_agent_policy_limits();
@@ -38029,6 +38106,10 @@ var init_agent_discovery = __esm(() => {
   init_codex_semantic_cache_witness();
   init_agent_discovery_directories();
   DISCOVERY_RUNTIME_COMMANDS = Object.freeze({ gemini: "gemini" });
+  CLAUDE_CONTROL_WITNESS_MODES = new Set(["claude-settings-v1", "claude-settings-v2", "claude-settings-v3", "claude-settings-v4", "claude-marketplace-registry", "claude-marketplace-registry-v2", "claude-marketplace-entry-v1", "claude-plugin-registry"]);
+  CLAUDE_CONTROL_FILES = new Set(["settings.json", "settings.local.json", "installed_plugins.json", "known_marketplaces.json"]);
+  ADOPTABLE_SETTINGS_MATCHES = Object.freeze(["exact", "screen-reader-receipt"]);
+  CLAUDE_PROJECT_DISCOVERY_KEYS = Object.freeze(["enabledPlugins", "extraKnownMarketplaces", "additionalMarketplaces", "skillOverrides"]);
 });
 
 // src/lib/authoring-path.ts

package/bin/migrate.js

@@ -25,7 +25,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.72",
+  version: "0.10.73",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/server.js

@@ -24140,7 +24140,7 @@ restoreLaunchCwd();
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.72",
+  version: "0.10.73",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/worker.js

@@ -24143,7 +24143,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.72",
+  version: "0.10.73",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {