@hasna/skills 0.10.76 → 0.10.77

package/bin/mcp.js

@@ -23,7 +23,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.76",
+    version: "0.10.77",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -1087,6 +1087,10 @@ function skillsFileHasCredential(file) {
     return false;
   return /^\s*(?:export\s+)?(?:HASNA_SKILLS_API_KEY|SKILLS_API_KEY|HASNA_SKILLS_API_KEY_REF)\s*=\s*\S/m.test(text);
 }
+function skillsFileHasVaultReference(file) {
+  const text = readMetadataText(file);
+  return text !== null && /^\s*(?:export\s+)?HASNA_SKILLS_API_KEY_REF\s*=\s*\S/m.test(text);
+}
 var SKILLS_BOUND_API_URL = "HASNA_SKILLS_BOUND_API_URL";
 var init_instance_credentials = __esm(() => {
   init_transport();
@@ -1121,6 +1125,20 @@ var init_local_opt_in = __esm(() => {
 // src/lib/product-default.ts
 var SKILLS_PRODUCT_DEFAULT_ORIGIN = "https://skills.md";
 
+// src/lib/credential-profile-command.ts
+function skillsShellArgument(value) {
+  return /^[A-Za-z0-9._:/-]+$/.test(value) ? value : `'${value.replace(/'/g, "'\\''")}'`;
+}
+function skillsApiUrlEnvironment(origin) {
+  return urlKeys.map((name) => `${name}=${skillsShellArgument(origin)}`).join(" ");
+}
+var urlKeys;
+var init_credential_profile_command = __esm(() => {
+  init_instance_credentials();
+  init_transport();
+  urlKeys = clientTransportEnvKeys("skills").apiUrlKeys;
+});
+
 // src/lib/fleet-credentials.ts
 var exports_fleet_credentials = {};
 __export(exports_fleet_credentials, {
@@ -1145,6 +1163,8 @@ __export(exports_fleet_credentials, {
   gatewaySignInRefusal: () => gatewaySignInRefusal,
   credentialPairing: () => credentialPairing,
   configuredSkillsApiUrl: () => configuredSkillsApiUrl,
+  captureSkillsSignInTarget: () => captureSkillsSignInTarget,
+  assertSkillsSignInCredentialReplaceable: () => assertSkillsSignInCredentialReplaceable,
   SkillsFleetCredentialError: () => SkillsFleetCredentialError,
   SKILLS_LOCAL_OPT_IN_ENV_KEYS: () => SKILLS_LOCAL_OPT_IN_ENV_KEYS,
   SKILLS_CREDENTIAL_TIERS: () => SKILLS_CREDENTIAL_TIERS,
@@ -1450,8 +1470,24 @@ function gatewaySignInRefusal(target) {
   if (normalizeSkillsApiOrigin(target.origin) !== normalizeSkillsApiOrigin(defaultFleetGatewayBaseUrl(SKILLS_APP)))
     return null;
   const cause = target.credentialSource ? `${target.credentialSource} holds a Skills credential for the internal gateway` : target.source === "--url" ? "--url names the internal gateway" : `${target.source} selects the internal gateway`;
-  const unset = target.credentialSource ?? (target.source === "--url" ? null : target.source);
-  return new SkillsFleetCredentialError(`${cause}, which has no sign-in service. Nothing was sent.` + (unset ? ` To sign in to the default server instead, first unset ${unset} (or remove it from where it is stored), then run: skills login.` : ""), "GATEWAY_AUTH_UNAVAILABLE", unset ? [`unset ${unset}`, "skills login"] : undefined);
+  const command = (SKILLS_API_URL_ENV_KEYS.includes(target.source) ? `${skillsApiUrlEnvironment(SKILLS_PRODUCT_DEFAULT_ORIGIN)} ` : "") + "skills --profile <new-profile> login";
+  return new SkillsFleetCredentialError(`${cause}, which has no sign-in service. Nothing was sent. ` + `Keep the fleet configuration and use a separate profile for product sign-in: ${command}.`, "GATEWAY_AUTH_UNAVAILABLE", [command]);
+}
+function assertSkillsSignInCredentialReplaceable(env = process.env, profile) {
+  const files = skillsProfileCredentialFiles(env, profile);
+  const verifyUnchanged = captureSkillsCredentialFiles(files);
+  const gateway = normalizeSkillsApiOrigin(defaultFleetGatewayBaseUrl(SKILLS_APP));
+  const command = (SKILLS_API_URL_ENV_KEYS.some((name) => env[name]?.trim()) ? `${skillsApiUrlEnvironment(SKILLS_PRODUCT_DEFAULT_ORIGIN)} ` : "") + "skills --profile <new-profile> login";
+  for (const file of files) {
+    if (!skillsFileHasCredential(file))
+      continue;
+    const metadata = readSkillsInstanceMetadata(file);
+    const instance = metadata.binding ?? metadata.apiUrl;
+    if (skillsFileHasVaultReference(file) || !instance || normalizeSkillsApiOrigin(instance) === gateway) {
+      throw new SkillsFleetCredentialError("The selected profile contains a protected fleet credential or vault reference. Nothing was sent or changed. " + `Use a separate profile for product sign-in: ${command}.`, "STORED_CREDENTIAL_PROTECTED", [command]);
+    }
+  }
+  verifyUnchanged();
 }
 function explicitSignInOrigin(url) {
   if (!url.trim() || /[\x00-\x1f\x7f]/.test(url)) {
@@ -1479,13 +1515,15 @@ function resolveSkillsSignInOrigin(env = process.env, options = {}, explicitUrl)
     const snapshot = snapshotSkillsEnvironment(env);
     const resolvedOptions = snapshotSkillsOptions(env, options);
     const profile = resolvedOptions.credentials?.profile;
+    assertSkillsSignInCredentialReplaceable(snapshot, profile);
     const configured = configuredSkillsApiUrl(snapshot, resolvedOptions.credentials?.keychain, profile);
     const declared = configured && configured.source !== "default" ? configured : null;
     if (explicitUrl !== undefined) {
       const origin = explicitSignInOrigin(explicitUrl);
       const storedHere = declared ? skillsProfileCredentialFiles(snapshot, profile).includes(declared.source) : false;
       if (declared && !storedHere && normalizeSkillsApiOrigin(declared.value) !== origin) {
-        throw new SkillsFleetCredentialError(`--url ${origin} conflicts with ${declared.source}, which outranks the saved configuration and would ` + `shadow the key this sign-in stores. Unset ${declared.source} or pass the same URL.`, "INVALID_API_URL");
+        const command = `${skillsApiUrlEnvironment(origin)} skills --profile <new-profile> login`;
+        throw new SkillsFleetCredentialError(`--url ${origin} conflicts with ${declared.source}, which outranks the saved configuration and would ` + `shadow the key this sign-in stores. Keep the existing configuration and use a separate process and profile: ${command}.`, "INVALID_API_URL", [command]);
       }
       return { origin, source: "--url" };
     }
@@ -1517,6 +1555,14 @@ function resolveSkillsSignInOrigin(env = process.env, options = {}, explicitUrl)
     throw error;
   }
 }
+function captureSkillsSignInTarget(env = process.env, options = {}, explicitUrl) {
+  const snapshot = snapshotSkillsEnvironment(env);
+  const profile = options.credentials?.profile ?? selectedCliSkillsCredentialProfile();
+  const unchanged2 = captureSkillsCredentialFiles(skillsProfileCredentialFiles(snapshot, profile));
+  const target = resolveSkillsSignInOrigin(env, options, explicitUrl);
+  unchanged2();
+  return { ...target, unchanged: unchanged2 };
+}
 function requireSkillsFleet(action = "This command", env = process.env, options = {}) {
   const fleet = resolveSkillsFleet(env, options);
   if (fleet.mode === "hosted")
@@ -1528,6 +1574,7 @@ var init_fleet_credentials = __esm(() => {
   init_transport();
   init_instance_credentials();
   init_local_opt_in();
+  init_credential_profile_command();
   init_local_opt_in();
   ENV_KEYS = clientTransportEnvKeys(SKILLS_APP);
   SKILLS_API_URL_ENV_KEYS = ENV_KEYS.apiUrlKeys;
@@ -32251,6 +32298,40 @@ var init_codex_settings_witness_v1 = __esm(() => {
   VERBOSITY = new Set(["low", "medium", "high"]);
 });
 
+// src/lib/codex-plugin-capability-paths.ts
+function foldCodexPluginEntryName(name) {
+  return name.toUpperCase().toLowerCase();
+}
+function codexPluginRootCapabilityEntry(name) {
+  const folded = foldCodexPluginEntryName(name);
+  return CODEX_PLUGIN_ROOT_CAPABILITY_ENTRIES.includes(folded) ? folded : null;
+}
+function isCodexSkillDocumentName(name) {
+  return foldCodexPluginEntryName(name) === "skill.md";
+}
+var CODEX_PLUGIN_MANIFEST_LOCATIONS, CODEX_PLUGIN_MANIFEST_DIRECTORIES, CODEX_PLUGIN_ROOT_CAPABILITY_ENTRIES;
+var init_codex_plugin_capability_paths = __esm(() => {
+  CODEX_PLUGIN_MANIFEST_LOCATIONS = Object.freeze([
+    "plugin.json",
+    ".codex-plugin/plugin.json",
+    ".claude-plugin/plugin.json",
+    ".cursor-plugin/plugin.json"
+  ]);
+  CODEX_PLUGIN_MANIFEST_DIRECTORIES = Object.freeze([".codex-plugin", ".claude-plugin", ".cursor-plugin"]);
+  CODEX_PLUGIN_ROOT_CAPABILITY_ENTRIES = Object.freeze([
+    "plugin.json",
+    ".codex-plugin",
+    ".claude-plugin",
+    ".cursor-plugin",
+    "hooks",
+    "hooks.json",
+    ".mcp.json",
+    ".app.json",
+    "commands",
+    "agents"
+  ]);
+});
+
 // src/lib/codex-hook-mcp-dependencies.ts
 import { createHash as createHash12 } from "crypto";
 import { basename as basename7, dirname as dirname12, isAbsolute as isAbsolute12, join as join16, resolve as resolve11, sep as sep5 } from "path";
@@ -32395,15 +32476,13 @@ function captureCodexHookMcpDependencies(configPath, reviewed, configText, chang
       }
     };
     const root = join16(cacheRoot, identity2, selectCodexPluginVersion(versions2, selectionBudget));
-    const agent = read(join16(root, "plugin.json"));
+    const [agentPluginManifest, ...legacyManifests] = CODEX_PLUGIN_MANIFEST_LOCATIONS;
+    const agent = read(join16(root, agentPluginManifest));
     if (agent !== null) {
       const schema = JSON.parse(agent).$schema;
       need5(typeof schema !== "string" || !schema.startsWith("https://agent-plugins.org/schemas/"));
     }
-    const codex = read(join16(root, ".codex-plugin/plugin.json"));
-    const claude = read(join16(root, ".claude-plugin/plugin.json"));
-    const cursor = read(join16(root, ".cursor-plugin/plugin.json"));
-    const text2 = codex ?? claude ?? cursor;
+    const text2 = legacyManifests.map((location) => read(join16(root, location))).find((value) => value !== null) ?? null;
     if (text2 === null)
       continue;
     const manifest = JSON.parse(text2);
@@ -32425,6 +32504,7 @@ var init_codex_hook_mcp_dependencies = __esm(() => {
   init_claude_settings_witness();
   init_agent_discovery_directories();
   init_agent_discovery_bytes();
+  init_codex_plugin_capability_paths();
   events = new Set(["PreToolUse", "PermissionRequest", "PostToolUse", "PreCompact", "PostCompact", "SessionStart", "SessionEnd", "UserPromptSubmit", "SubagentStart", "SubagentStop", "Stop", "Interrupt"]);
 });
 
@@ -34007,9 +34087,10 @@ var CODEX_VENDOR_MARKETPLACES, CODEX_REMOTE_VENDOR_MARKETPLACES, OTHER_PLUGIN_CO
 var init_codex_vendor_refresh = __esm(() => {
   init_claude_settings_witness();
   init_codex_plugin_skill_controls();
+  init_codex_plugin_capability_paths();
   CODEX_VENDOR_MARKETPLACES = Object.freeze(["openai-bundled", "openai-curated", "openai-curated-remote"]);
   CODEX_REMOTE_VENDOR_MARKETPLACES = Object.freeze(["openai-curated-remote"]);
-  OTHER_PLUGIN_CONTROLS = Object.freeze(["plugin.json", ".claude-plugin", ".cursor-plugin", "hooks", "hooks.json", ".mcp.json", "commands", "agents"]);
+  OTHER_PLUGIN_CONTROLS = Object.freeze(CODEX_PLUGIN_ROOT_CAPABILITY_ENTRIES.filter((entry) => entry !== ".codex-plugin" && entry !== ".app.json"));
   VENDOR_MANIFEST_KEYS = Object.freeze(["name", "version", "description", "author", "homepage", "repository", "license", "keywords", "interface", "skills", "apps"]);
   DEFAULT_SKILLS_PATHS = Object.freeze(["./skills", "./skills/"]);
 });
@@ -35114,14 +35195,23 @@ function assertParents(cacheRoot, controls, appOnlyParents, hookParents, files,
       continue;
     const parent = join21(cacheRoot, parts[0], parts[1]);
     const root = join21(parent, parts[2]);
-    const base = parts[parts.length - 1];
-    if (parts.includes(".codex-plugin") && (parts.length < 4 || parts[3] !== ".codex-plugin" || (parts.length === 4 ? base !== ".codex-plugin" : parts.length !== 5 || base !== "plugin.json")))
+    const base = parts[parts.length - 1], folded = foldCodexPluginEntryName(base);
+    if (parts.length === 3 && (codexPluginRootCapabilityEntry(base) !== null || isCodexSkillDocumentName(base)))
+      refuse3();
+    const rootEntry = parts.length >= 4 ? codexPluginRootCapabilityEntry(parts[3]) : null;
+    if (rootEntry !== null && rootEntry !== parts[3])
+      refuse3();
+    if (rootEntry !== null && !SEMANTIC_BOUND_ROOT_ENTRIES.includes(rootEntry))
+      refuse3();
+    if (isCodexSkillDocumentName(base) && base !== "SKILL.md")
+      refuse3();
+    if (parts.some((part) => CODEX_PLUGIN_MANIFEST_DIRECTORIES.includes(foldCodexPluginEntryName(part))) && (parts.length < 4 || parts[3] !== ".codex-plugin" || (parts.length === 4 ? base !== ".codex-plugin" : parts.length !== 5 || base !== "plugin.json")))
       refuse3();
-    if ([".app.json", ".mcp.json"].includes(base) && (parts.length !== 4 || dirname16(member) !== root))
+    if ([".app.json", ".mcp.json"].includes(folded) && (parts.length !== 4 || dirname16(member) !== root))
       refuse3();
-    if ([".app.json", ".mcp.json"].includes(base) && hookParents.some((reviewed) => reviewed.pluginParent === parent))
+    if ([".app.json", ".mcp.json"].includes(folded) && hookParents.some((reviewed) => reviewed.pluginParent === parent))
       refuse3();
-    if ((parts[3] === "hooks" || base === "hooks.json") && (![4, 5].includes(parts.length) || parts[3] !== "hooks" || (parts.length === 4 ? base !== "hooks" : base !== "hooks.json") || !hookParents.some((reviewed) => reviewed.pluginParent === join21(cacheRoot, parts[0], parts[1]))))
+    if ((rootEntry === "hooks" || folded === "hooks.json") && (![4, 5].includes(parts.length) || parts[3] !== "hooks" || (parts.length === 4 ? base !== "hooks" : base !== "hooks.json") || !hookParents.some((reviewed) => reviewed.pluginParent === join21(cacheRoot, parts[0], parts[1]))))
       refuse3();
   }
 }
@@ -35343,13 +35433,15 @@ function assertCodexSemanticCacheWitnessUnchanged(previous, current) {
   if (hash3(priorProjection) !== previous.sha256 || hash3(currentProjection) !== current.sha256 || canonical8(comparable(priorProjection)) !== canonical8(comparable(currentProjection)))
     refuse3();
 }
-var CODEX_SEMANTIC_CACHE_WITNESS_SCHEMA = "hasna.codex-semantic-cache-witness.v1", identifier4 = (value) => typeof value === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(value), digest = (value) => typeof value === "string" && /^[a-f0-9]{64}$/.test(value), refuse3 = () => {
+var CODEX_SEMANTIC_CACHE_WITNESS_SCHEMA = "hasna.codex-semantic-cache-witness.v1", SEMANTIC_BOUND_ROOT_ENTRIES, identifier4 = (value) => typeof value === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(value), digest = (value) => typeof value === "string" && /^[a-f0-9]{64}$/.test(value), refuse3 = () => {
   throw new Error("CODEX_SEMANTIC_CACHE_WITNESS_UNSUPPORTED: review Codex plugin cache identity and controls");
 }, MAX_DOCUMENT_BYTES, MAX_RECEIPT_BYTES, codexHookEvents;
 var init_codex_semantic_cache_witness = __esm(() => {
   init_claude_settings_witness();
   init_codex_plugin_skill_controls();
   init_codex_native_skill_catalog();
+  init_codex_plugin_capability_paths();
+  SEMANTIC_BOUND_ROOT_ENTRIES = Object.freeze([".codex-plugin", ".app.json", ".mcp.json", "hooks"]);
   MAX_DOCUMENT_BYTES = 1024 * 1024;
   MAX_RECEIPT_BYTES = 16 * 1024;
   codexHookEvents = new Set([

package/bin/migrate.js

@@ -25,7 +25,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.76",
+  version: "0.10.77",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/server.js

@@ -24140,7 +24140,7 @@ restoreLaunchCwd();
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.76",
+  version: "0.10.77",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -36934,6 +36934,9 @@ var AUTHORITY_OVERRIDE_HEADERS3 = new Set([
   "x-original-host"
 ]);
 
+// src/lib/credential-profile-command.ts
+var urlKeys = clientTransportEnvKeys("skills").apiUrlKeys;
+
 // src/lib/fleet-credentials.ts
 var SKILLS_APP = "skills";
 var ENV_KEYS = clientTransportEnvKeys(SKILLS_APP);
@@ -38639,9 +38642,9 @@ function createReceiptService(store) {
 }
 
 // node_modules/@aws-sdk/client-ecs/dist-es/ECSClient.js
-var import_client36 = __toESM(require_client2(), 1);
+var import_client37 = __toESM(require_client2(), 1);
 var import_core2 = __toESM(require_dist_cjs2(), 1);
-var import_client37 = __toESM(require_client(), 1);
+var import_client38 = __toESM(require_client(), 1);
 var import_config33 = __toESM(require_config(), 1);
 var import_endpoints8 = __toESM(require_endpoints(), 1);
 var import_protocols10 = __toESM(require_protocols(), 1);
@@ -38650,11 +38653,11 @@ var import_schema4 = __toESM(require_schema(), 1);
 
 // node_modules/@aws-sdk/client-ecs/dist-es/auth/httpAuthSchemeProvider.js
 var import_httpAuthSchemes4 = __toESM(require_httpAuthSchemes(), 1);
-var import_client28 = __toESM(require_client(), 1);
+var import_client29 = __toESM(require_client(), 1);
 var defaultECSHttpAuthSchemeParametersProvider = async (config, context, input) => {
   return {
-    operation: import_client28.getSmithyContext(context).operation,
-    region: await import_client28.normalizeProvider(config.region)() || (() => {
+    operation: import_client29.getSmithyContext(context).operation,
+    region: await import_client29.normalizeProvider(config.region)() || (() => {
       throw new Error("expected `region` to be configured for `aws.auth#sigv4`");
     })()
   };
@@ -38686,7 +38689,7 @@ var defaultECSHttpAuthSchemeProvider = (authParameters) => {
 var resolveHttpAuthSchemeConfig3 = (config) => {
   const config_0 = import_httpAuthSchemes4.resolveAwsSdkSigV4Config(config);
   return Object.assign(config_0, {
-    authSchemePreference: import_client28.normalizeProvider(config.authSchemePreference ?? [])
+    authSchemePreference: import_client29.normalizeProvider(config.authSchemePreference ?? [])
   });
 };
 
@@ -38778,9 +38781,9 @@ var package_default3 = {
 };
 
 // node_modules/@aws-sdk/client-ecs/dist-es/runtimeConfig.js
-var import_client32 = __toESM(require_client2(), 1);
+var import_client33 = __toESM(require_client2(), 1);
 var import_httpAuthSchemes6 = __toESM(require_httpAuthSchemes(), 1);
-var import_client33 = __toESM(require_client(), 1);
+var import_client34 = __toESM(require_client(), 1);
 var import_config32 = __toESM(require_config(), 1);
 var import_retry5 = __toESM(require_retry(), 1);
 var import_serde6 = __toESM(require_serde(), 1);
@@ -38790,12 +38793,12 @@ var import_node_http_handler3 = __toESM(require_dist_cjs6(), 1);
 var import_httpAuthSchemes5 = __toESM(require_httpAuthSchemes(), 1);
 var import_protocols7 = __toESM(require_protocols2(), 1);
 var import_checksum3 = __toESM(require_checksum(), 1);
-var import_client31 = __toESM(require_client(), 1);
+var import_client32 = __toESM(require_client(), 1);
 var import_protocols8 = __toESM(require_protocols(), 1);
 var import_serde5 = __toESM(require_serde(), 1);
 
 // node_modules/@aws-sdk/client-ecs/dist-es/endpoint/endpointResolver.js
-var import_client29 = __toESM(require_client2(), 1);
+var import_client30 = __toESM(require_client2(), 1);
 var import_endpoints7 = __toESM(require_endpoints(), 1);
 
 // node_modules/@aws-sdk/client-ecs/dist-es/endpoint/bdd.js
@@ -38892,14 +38895,14 @@ var defaultEndpointResolver3 = (endpointParams, context = {}) => {
     logger: context.logger
   }));
 };
-import_endpoints7.customEndpointFunctions.aws = import_client29.awsEndpointFunctions;
+import_endpoints7.customEndpointFunctions.aws = import_client30.awsEndpointFunctions;
 
 // node_modules/@aws-sdk/client-ecs/dist-es/schemas/schemas_0.js
 var import_schema3 = __toESM(require_schema(), 1);
 
 // node_modules/@aws-sdk/client-ecs/dist-es/models/ECSServiceException.js
-var import_client30 = __toESM(require_client(), 1);
-class ECSServiceException extends import_client30.ServiceException {
+var import_client31 = __toESM(require_client(), 1);
+class ECSServiceException extends import_client31.ServiceException {
   constructor(options) {
     super(options);
     Object.setPrototypeOf(this, ECSServiceException.prototype);
@@ -41703,7 +41706,7 @@ var getRuntimeConfig4 = (config) => {
         signer: new import_httpAuthSchemes5.AwsSdkSigV4Signer
       }
     ],
-    logger: config?.logger ?? new import_client31.NoOpLogger,
+    logger: config?.logger ?? new import_client32.NoOpLogger,
     protocol: config?.protocol ?? import_protocols7.AwsJson1_1Protocol,
     protocolSettings: config?.protocolSettings ?? {
       defaultNamespace: "com.amazonaws.ecs",
@@ -41722,11 +41725,11 @@ var getRuntimeConfig4 = (config) => {
 
 // node_modules/@aws-sdk/client-ecs/dist-es/runtimeConfig.js
 var getRuntimeConfig5 = (config) => {
-  import_client33.emitWarningIfUnsupportedVersion(process.version);
+  import_client34.emitWarningIfUnsupportedVersion(process.version);
   const defaultsMode = import_config32.resolveDefaultsModeConfig(config);
-  const defaultConfigProvider = () => defaultsMode().then(import_client33.loadConfigsForDefaultMode);
+  const defaultConfigProvider = () => defaultsMode().then(import_client34.loadConfigsForDefaultMode);
   const clientSharedValues = getRuntimeConfig4(config);
-  import_client32.emitWarningIfUnsupportedVersion(process.version);
+  import_client33.emitWarningIfUnsupportedVersion(process.version);
   const loaderConfig = {
     profile: config?.profile,
     logger: clientSharedValues.logger
@@ -41739,7 +41742,7 @@ var getRuntimeConfig5 = (config) => {
     authSchemePreference: config?.authSchemePreference ?? import_config32.loadConfig(import_httpAuthSchemes6.NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, loaderConfig),
     bodyLengthChecker: config?.bodyLengthChecker ?? import_serde6.calculateBodyLength,
     credentialDefaultProvider: config?.credentialDefaultProvider ?? defaultProvider,
-    defaultUserAgentProvider: config?.defaultUserAgentProvider ?? import_client32.createDefaultUserAgentProvider({ serviceId: clientSharedValues.serviceId, clientVersion: package_default3.version }),
+    defaultUserAgentProvider: config?.defaultUserAgentProvider ?? import_client33.createDefaultUserAgentProvider({ serviceId: clientSharedValues.serviceId, clientVersion: package_default3.version }),
     maxAttempts: config?.maxAttempts ?? import_config32.loadConfig(import_retry5.NODE_MAX_ATTEMPT_CONFIG_OPTIONS, config),
     region: config?.region ?? import_config32.loadConfig(import_config32.NODE_REGION_CONFIG_OPTIONS, { ...import_config32.NODE_REGION_CONFIG_FILE_OPTIONS, ...loaderConfig }),
     requestHandler: import_node_http_handler3.NodeHttpHandler.create(config?.requestHandler ?? defaultConfigProvider),
@@ -41750,13 +41753,13 @@ var getRuntimeConfig5 = (config) => {
     streamCollector: config?.streamCollector ?? import_node_http_handler3.streamCollector,
     useDualstackEndpoint: config?.useDualstackEndpoint ?? import_config32.loadConfig(import_config32.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, loaderConfig),
     useFipsEndpoint: config?.useFipsEndpoint ?? import_config32.loadConfig(import_config32.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, loaderConfig),
-    userAgentAppId: config?.userAgentAppId ?? import_config32.loadConfig(import_client32.NODE_APP_ID_CONFIG_OPTIONS, loaderConfig)
+    userAgentAppId: config?.userAgentAppId ?? import_config32.loadConfig(import_client33.NODE_APP_ID_CONFIG_OPTIONS, loaderConfig)
   };
 };
 
 // node_modules/@aws-sdk/client-ecs/dist-es/runtimeExtensions.js
-var import_client34 = __toESM(require_client2(), 1);
-var import_client35 = __toESM(require_client(), 1);
+var import_client35 = __toESM(require_client2(), 1);
+var import_client36 = __toESM(require_client(), 1);
 var import_protocols9 = __toESM(require_protocols(), 1);
 
 // node_modules/@aws-sdk/client-ecs/dist-es/auth/httpAuthExtensionConfiguration.js
@@ -41800,34 +41803,34 @@ var resolveHttpAuthRuntimeConfig3 = (config) => {
 
 // node_modules/@aws-sdk/client-ecs/dist-es/runtimeExtensions.js
 var resolveRuntimeExtensions3 = (runtimeConfig, extensions) => {
-  const extensionConfiguration = Object.assign(import_client34.getAwsRegionExtensionConfiguration(runtimeConfig), import_client35.getDefaultExtensionConfiguration(runtimeConfig), import_protocols9.getHttpHandlerExtensionConfiguration(runtimeConfig), getHttpAuthExtensionConfiguration3(runtimeConfig));
+  const extensionConfiguration = Object.assign(import_client35.getAwsRegionExtensionConfiguration(runtimeConfig), import_client36.getDefaultExtensionConfiguration(runtimeConfig), import_protocols9.getHttpHandlerExtensionConfiguration(runtimeConfig), getHttpAuthExtensionConfiguration3(runtimeConfig));
   extensions.forEach((extension) => extension.configure(extensionConfiguration));
-  return Object.assign(runtimeConfig, import_client34.resolveAwsRegionExtensionConfiguration(extensionConfiguration), import_client35.resolveDefaultRuntimeConfig(extensionConfiguration), import_protocols9.resolveHttpHandlerRuntimeConfig(extensionConfiguration), resolveHttpAuthRuntimeConfig3(extensionConfiguration));
+  return Object.assign(runtimeConfig, import_client35.resolveAwsRegionExtensionConfiguration(extensionConfiguration), import_client36.resolveDefaultRuntimeConfig(extensionConfiguration), import_protocols9.resolveHttpHandlerRuntimeConfig(extensionConfiguration), resolveHttpAuthRuntimeConfig3(extensionConfiguration));
 };
 
 // node_modules/@aws-sdk/client-ecs/dist-es/ECSClient.js
-class ECSClient extends import_client37.Client {
+class ECSClient extends import_client38.Client {
   config;
   constructor(...[configuration]) {
     const _config_0 = getRuntimeConfig5(configuration || {});
     super(_config_0);
     this.initConfig = _config_0;
     const _config_1 = resolveClientEndpointParameters3(_config_0);
-    const _config_2 = import_client36.resolveUserAgentConfig(_config_1);
+    const _config_2 = import_client37.resolveUserAgentConfig(_config_1);
     const _config_3 = import_retry6.resolveRetryConfig(_config_2);
     const _config_4 = import_config33.resolveRegionConfig(_config_3);
-    const _config_5 = import_client36.resolveHostHeaderConfig(_config_4);
+    const _config_5 = import_client37.resolveHostHeaderConfig(_config_4);
     const _config_6 = import_endpoints8.resolveEndpointConfig(_config_5);
     const _config_7 = resolveHttpAuthSchemeConfig3(_config_6);
     const _config_8 = resolveRuntimeExtensions3(_config_7, configuration?.extensions || []);
     this.config = _config_8;
     this.middlewareStack.use(import_schema4.getSchemaSerdePlugin(this.config));
-    this.middlewareStack.use(import_client36.getUserAgentPlugin(this.config));
+    this.middlewareStack.use(import_client37.getUserAgentPlugin(this.config));
     this.middlewareStack.use(import_retry6.getRetryPlugin(this.config));
     this.middlewareStack.use(import_protocols10.getContentLengthPlugin(this.config));
-    this.middlewareStack.use(import_client36.getHostHeaderPlugin(this.config));
-    this.middlewareStack.use(import_client36.getLoggerPlugin(this.config));
-    this.middlewareStack.use(import_client36.getRecursionDetectionPlugin(this.config));
+    this.middlewareStack.use(import_client37.getHostHeaderPlugin(this.config));
+    this.middlewareStack.use(import_client37.getLoggerPlugin(this.config));
+    this.middlewareStack.use(import_client37.getRecursionDetectionPlugin(this.config));
     this.middlewareStack.use(import_core2.getHttpAuthSchemeEndpointRuleSetPlugin(this.config, {
       httpAuthSchemeParametersProvider: defaultECSHttpAuthSchemeParametersProvider,
       identityProviderConfigProvider: async (config) => new import_core2.DefaultIdentityProviderConfig({
@@ -41842,9 +41845,9 @@ class ECSClient extends import_client37.Client {
 }
 
 // node_modules/@aws-sdk/client-ecs/dist-es/commandBuilder.js
-var import_client38 = __toESM(require_client(), 1);
+var import_client39 = __toESM(require_client(), 1);
 var import_endpoints9 = __toESM(require_endpoints(), 1);
-var command3 = import_client38.makeBuilder(commonParams3, "AmazonEC2ContainerServiceV20141113", "ECSClient", import_endpoints9.getEndpointPlugin);
+var command3 = import_client39.makeBuilder(commonParams3, "AmazonEC2ContainerServiceV20141113", "ECSClient", import_endpoints9.getEndpointPlugin);
 var _ep03 = {};
 var _mw03 = (Command, cs, config, o2) => [];
 

package/bin/worker.js

@@ -24143,7 +24143,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.76",
+  version: "0.10.77",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -36158,6 +36158,9 @@ var AUTHORITY_OVERRIDE_HEADERS3 = new Set([
   "x-original-host"
 ]);
 
+// src/lib/credential-profile-command.ts
+var urlKeys = clientTransportEnvKeys("skills").apiUrlKeys;
+
 // src/lib/fleet-credentials.ts
 var SKILLS_APP = "skills";
 var ENV_KEYS = clientTransportEnvKeys(SKILLS_APP);

package/dist/index.js

@@ -12462,6 +12462,39 @@ function captureCodexSettings(path, budget2 = { remaining: 256 * 1024 * 1024 })
 // src/lib/codex-hook-mcp-dependencies.ts
 import { createHash as createHash13 } from "crypto";
 import { basename as basename6, dirname as dirname11, isAbsolute as isAbsolute11, join as join13, resolve as resolve11, sep as sep4 } from "path";
+
+// src/lib/codex-plugin-capability-paths.ts
+var CODEX_PLUGIN_MANIFEST_LOCATIONS = Object.freeze([
+  "plugin.json",
+  ".codex-plugin/plugin.json",
+  ".claude-plugin/plugin.json",
+  ".cursor-plugin/plugin.json"
+]);
+var CODEX_PLUGIN_MANIFEST_DIRECTORIES = Object.freeze([".codex-plugin", ".claude-plugin", ".cursor-plugin"]);
+var CODEX_PLUGIN_ROOT_CAPABILITY_ENTRIES = Object.freeze([
+  "plugin.json",
+  ".codex-plugin",
+  ".claude-plugin",
+  ".cursor-plugin",
+  "hooks",
+  "hooks.json",
+  ".mcp.json",
+  ".app.json",
+  "commands",
+  "agents"
+]);
+function foldCodexPluginEntryName(name) {
+  return name.toUpperCase().toLowerCase();
+}
+function codexPluginRootCapabilityEntry(name) {
+  const folded = foldCodexPluginEntryName(name);
+  return CODEX_PLUGIN_ROOT_CAPABILITY_ENTRIES.includes(folded) ? folded : null;
+}
+function isCodexSkillDocumentName(name) {
+  return foldCodexPluginEntryName(name) === "skill.md";
+}
+
+// src/lib/codex-hook-mcp-dependencies.ts
 var need5 = (value) => {
   if (!value)
     throw new Error("Incomplete or unsupported reviewed Codex hook dependency");
@@ -12610,15 +12643,13 @@ function captureCodexHookMcpDependencies(configPath, reviewed, configText, chang
       }
     };
     const root = join13(cacheRoot, identity2, selectCodexPluginVersion(versions, selectionBudget));
-    const agent = read2(join13(root, "plugin.json"));
+    const [agentPluginManifest, ...legacyManifests] = CODEX_PLUGIN_MANIFEST_LOCATIONS;
+    const agent = read2(join13(root, agentPluginManifest));
     if (agent !== null) {
       const schema = JSON.parse(agent).$schema;
       need5(typeof schema !== "string" || !schema.startsWith("https://agent-plugins.org/schemas/"));
     }
-    const codex = read2(join13(root, ".codex-plugin/plugin.json"));
-    const claude = read2(join13(root, ".claude-plugin/plugin.json"));
-    const cursor = read2(join13(root, ".cursor-plugin/plugin.json"));
-    const text2 = codex ?? claude ?? cursor;
+    const text2 = legacyManifests.map((location) => read2(join13(root, location))).find((value) => value !== null) ?? null;
     if (text2 === null)
       continue;
     const manifest = JSON.parse(text2);
@@ -15065,16 +15096,16 @@ function codexVendorMarketplace(cache, path) {
     return null;
   return CODEX_VENDOR_MARKETPLACES.includes(parts[0]) ? parts[0] : null;
 }
-var OTHER_PLUGIN_CONTROLS = Object.freeze(["plugin.json", ".claude-plugin", ".cursor-plugin", "hooks", "hooks.json", ".mcp.json", "commands", "agents"]);
+var OTHER_PLUGIN_CONTROLS = Object.freeze(CODEX_PLUGIN_ROOT_CAPABILITY_ENTRIES.filter((entry) => entry !== ".codex-plugin" && entry !== ".app.json"));
 var VENDOR_MANIFEST_KEYS = Object.freeze(["name", "version", "description", "author", "homepage", "repository", "license", "keywords", "interface", "skills", "apps"]);
 var DEFAULT_SKILLS_PATHS = Object.freeze(["./skills", "./skills/"]);
 var VENDOR_APP_DECLARATION = "./.app.json";
 var MAX_SUBTREE_ENTRIES = 20000;
 var MAX_SUBTREE_DEPTH = 32;
 var hiddenName = (name) => name.startsWith(".") || name === "node_modules";
-var isSkillDocument = (name) => name.toLowerCase() === "skill.md";
+var isSkillDocument = isCodexSkillDocumentName;
 var present = (path) => lstatSync15(path, { throwIfNoEntry: false }) !== undefined;
-var holdsOtherControl = (path) => readdirSync7(path).some((name) => OTHER_PLUGIN_CONTROLS.includes(name.toLowerCase()));
+var holdsOtherControl = (path) => readdirSync7(path).some((name) => OTHER_PLUGIN_CONTROLS.includes(codexPluginRootCapabilityEntry(name) ?? ""));
 function pluginTreeVisible(path, hidden, insideSkill, depth, budget2) {
   if (depth > MAX_SUBTREE_DEPTH)
     return false;
@@ -15415,7 +15446,7 @@ import { basename as basename13, dirname as dirname24, isAbsolute as isAbsolute2
 import { homedir as homedir5 } from "os";
 import { isAbsolute as isAbsolute25, join as join36, resolve as resolve24 } from "path";
 // package.json
-var version = "0.10.76";
+var version = "0.10.77";
 var package_default = {
   name: "@hasna/skills",
   version,
@@ -16503,6 +16534,9 @@ function selectsSkillsLocalMode(env = process.env) {
   return !hasSkillsEnvAuthorityIntent(env) && isSkillsLocalOptIn(env);
 }
 
+// src/lib/credential-profile-command.ts
+var urlKeys = clientTransportEnvKeys("skills").apiUrlKeys;
+
 // src/lib/fleet-credentials.ts
 var SKILLS_APP = "skills";
 var ENV_KEYS = clientTransportEnvKeys(SKILLS_APP);
@@ -17886,6 +17920,7 @@ import { createHash as createHash22 } from "crypto";
 import { constants as constants12, closeSync as closeSync12, fstatSync as fstatSync12, lstatSync as lstatSync20, openSync as openSync12, readSync as readSync8, readdirSync as readdirSync9, realpathSync as realpathSync9 } from "fs";
 import { basename as basename10, dirname as dirname18, isAbsolute as isAbsolute19, join as join25, relative as relative8, resolve as resolve18, sep as sep11 } from "path";
 var CODEX_SEMANTIC_CACHE_WITNESS_SCHEMA = "hasna.codex-semantic-cache-witness.v1";
+var SEMANTIC_BOUND_ROOT_ENTRIES = Object.freeze([".codex-plugin", ".app.json", ".mcp.json", "hooks"]);
 var identifier5 = (value) => typeof value === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(value);
 var digest = (value) => typeof value === "string" && /^[a-f0-9]{64}$/.test(value);
 var refuse4 = () => {
@@ -18395,14 +18430,23 @@ function assertParents(cacheRoot, controls, appOnlyParents, hookParents, files,
       continue;
     const parent = join25(cacheRoot, parts[0], parts[1]);
     const root = join25(parent, parts[2]);
-    const base = parts[parts.length - 1];
-    if (parts.includes(".codex-plugin") && (parts.length < 4 || parts[3] !== ".codex-plugin" || (parts.length === 4 ? base !== ".codex-plugin" : parts.length !== 5 || base !== "plugin.json")))
+    const base = parts[parts.length - 1], folded = foldCodexPluginEntryName(base);
+    if (parts.length === 3 && (codexPluginRootCapabilityEntry(base) !== null || isCodexSkillDocumentName(base)))
+      refuse4();
+    const rootEntry = parts.length >= 4 ? codexPluginRootCapabilityEntry(parts[3]) : null;
+    if (rootEntry !== null && rootEntry !== parts[3])
+      refuse4();
+    if (rootEntry !== null && !SEMANTIC_BOUND_ROOT_ENTRIES.includes(rootEntry))
+      refuse4();
+    if (isCodexSkillDocumentName(base) && base !== "SKILL.md")
+      refuse4();
+    if (parts.some((part) => CODEX_PLUGIN_MANIFEST_DIRECTORIES.includes(foldCodexPluginEntryName(part))) && (parts.length < 4 || parts[3] !== ".codex-plugin" || (parts.length === 4 ? base !== ".codex-plugin" : parts.length !== 5 || base !== "plugin.json")))
       refuse4();
-    if ([".app.json", ".mcp.json"].includes(base) && (parts.length !== 4 || dirname18(member) !== root))
+    if ([".app.json", ".mcp.json"].includes(folded) && (parts.length !== 4 || dirname18(member) !== root))
       refuse4();
-    if ([".app.json", ".mcp.json"].includes(base) && hookParents.some((reviewed) => reviewed.pluginParent === parent))
+    if ([".app.json", ".mcp.json"].includes(folded) && hookParents.some((reviewed) => reviewed.pluginParent === parent))
       refuse4();
-    if ((parts[3] === "hooks" || base === "hooks.json") && (![4, 5].includes(parts.length) || parts[3] !== "hooks" || (parts.length === 4 ? base !== "hooks" : base !== "hooks.json") || !hookParents.some((reviewed) => reviewed.pluginParent === join25(cacheRoot, parts[0], parts[1]))))
+    if ((rootEntry === "hooks" || folded === "hooks.json") && (![4, 5].includes(parts.length) || parts[3] !== "hooks" || (parts.length === 4 ? base !== "hooks" : base !== "hooks.json") || !hookParents.some((reviewed) => reviewed.pluginParent === join25(cacheRoot, parts[0], parts[1]))))
       refuse4();
   }
 }

package/dist/lib/auth-store.d.ts

@@ -88,7 +88,7 @@ export declare function getAuthConfigReadOnly(env?: Env, options?: SkillsFleetOp
  * forgotten locally. Recorded in identity.json (never a secret).
  */
 export type StoredKeyIssuer = "sign-in" | "api-key";
-export declare function saveAuthConfig(config: StoredAuthConfig, env?: Env, authenticatedOrigin?: string, issuedBy?: StoredKeyIssuer): string;
+export declare function saveAuthConfig(config: StoredAuthConfig, env?: Env, authenticatedOrigin?: string, issuedBy?: StoredKeyIssuer, assertUnchanged?: () => void): string;
 /**
  * Who put the active profile's stored credential there — the question
  * `skills logout` has to answer before it touches it (Instructions rule