@hasna/skills 0.10.76 → 0.10.77

package/dist/lib/codex-plugin-capability-paths.d.ts

@@ -0,0 +1,31 @@
+/** The one package-owned definition of the plugin-root locations Codex reads.
+ *
+ * The vendor-refresh guard (codex-vendor-refresh.ts), the semantic cache
+ * witness (codex-semantic-cache-witness.ts) and the reviewed hook dependency
+ * closure (codex-hook-mcp-dependencies.ts) all derive their capability rules
+ * from these lists, so a location added here reaches every mode at once.
+ */
+/** Manifest locations in a plugin version root, in the order Codex 0.160.0 and
+ * later look them up: the Agent Plugins root `plugin.json` first, then the
+ * `.codex-plugin`, `.claude-plugin` and `.cursor-plugin` manifests. The first
+ * one present is the plugin's manifest. */
+export declare const CODEX_PLUGIN_MANIFEST_LOCATIONS: readonly string[];
+/** The manifest directories among CODEX_PLUGIN_MANIFEST_LOCATIONS. */
+export declare const CODEX_PLUGIN_MANIFEST_DIRECTORIES: readonly string[];
+/** Every direct entry of a plugin version root that carries a capability Codex
+ * reads: each manifest location, the default hooks directory and a root hooks
+ * file, the MCP and connector declarations, and the default command and agent
+ * directories. Spelled in lowercase; compare names through
+ * codexPluginRootCapabilityEntry so a case-insensitive file system cannot alias
+ * one. */
+export declare const CODEX_PLUGIN_ROOT_CAPABILITY_ENTRIES: readonly string[];
+/** Case-insensitive comparison form. Upper- then lower-casing also folds the
+ * Kelvin sign, long s and dotless i onto their ASCII letters, so a name a
+ * case-insensitive file system could open as a capability entry folds onto it. */
+export declare function foldCodexPluginEntryName(name: string): string;
+/** The lowercase CODEX_PLUGIN_ROOT_CAPABILITY_ENTRIES member a directory entry
+ * name denotes, matched without regard to case, or null. */
+export declare function codexPluginRootCapabilityEntry(name: string): string | null;
+/** Whether a directory entry name is a skill document (`SKILL.md`), matched
+ * without regard to case. */
+export declare function isCodexSkillDocumentName(name: string): boolean;

package/dist/lib/credential-profile-command.d.ts

@@ -0,0 +1,5 @@
+export declare function skillsShellArgument(value: string): string;
+/** Set every supported URL alias consistently for this invocation only. */
+export declare function skillsApiUrlEnvironment(origin: string): string;
+/** Keep copied CLI commands on the credential profile selected by CLI or environment. */
+export declare function skillsProfileCommand(command: string, env?: Record<string, string | undefined>, origin?: string): string;

package/dist/lib/fleet-credentials.d.ts

@@ -134,7 +134,7 @@ export interface LocalSkillsFleet {
 }
 export type SkillsFleet = HostedSkillsFleet | LocalSkillsFleet;
 /** Machine-readable reasons a hosted resolution was refused. */
-export type SkillsFleetErrorCode = "MISSING_API_CREDENTIAL" | "INVALID_API_URL" | "INSTANCE_CREDENTIAL_MISMATCH" | "GATEWAY_AUTH_UNAVAILABLE";
+export type SkillsFleetErrorCode = "MISSING_API_CREDENTIAL" | "INVALID_API_URL" | "INSTANCE_CREDENTIAL_MISMATCH" | "GATEWAY_AUTH_UNAVAILABLE" | "STORED_CREDENTIAL_PROTECTED";
 /**
  * A configured install could not produce a usable hosted client.
  *
@@ -336,14 +336,17 @@ export interface SignInTarget {
     source: string;
     /** Set when an already-resolving credential decided the origin: its source NAME, never a value. */
     credentialSource?: string;
+    /** A captured sign-in carries this through approval and persistence. */
+    unchanged?: () => void;
 }
 /**
  * The refusal for a sign-in that would target the internal gateway, which has
- * no sign-in service — or null. It names what to unset or remove, and never
- * suggests pointing this machine at the product server while an internal
- * credential is still configured. Nothing is sent either way.
+ * no sign-in service — or null. Use a separate profile for product sign-in,
+ * preserving the existing fleet configuration. Nothing is sent either way.
  */
 export declare function gatewaySignInRefusal(target: SignInTarget): SkillsFleetCredentialError | null;
+/** Refuse before sign-in traffic can replace a selected fleet key or vault reference. */
+export declare function assertSkillsSignInCredentialReplaceable(env?: Env, profile?: string): void;
 /**
  * The authority a SIGN-IN talks to: `skills login`, `skills auth login` /
  * `signup`, and the TUI `/login`. Resolved on its own because signing in is how
@@ -354,7 +357,8 @@ export declare function gatewaySignInRefusal(target: SignInTarget): SkillsFleetC
  *   1. `--url <origin>` — an explicit choice for this sign-in. It is refused when
  *      an outranking URL (the environment or the Keychain) names a different
  *      instance, because the key it mints would be shadowed the moment it is
- *      saved. A URL in the credentials file is what a sign-in replaces.
+ *      saved. A URL in the credentials file is replaceable only when it does
+ *      not protect a fleet credential or vault reference.
  *   2. a configured URL — environment, profile or credentials file, Keychain.
  *   3. the instance an already-stored credential belongs to. A legacy internal
  *      key with no recorded URL belongs to the fleet gateway, so a machine that
@@ -366,6 +370,8 @@ export declare function gatewaySignInRefusal(target: SignInTarget): SkillsFleetC
  * Nothing here sends a request.
  */
 export declare function resolveSkillsSignInOrigin(env?: Env, options?: SkillsFleetOptions, explicitUrl?: string): SignInTarget;
+/** Retain the selected credential's exact file state across a multi-step sign-in. */
+export declare function captureSkillsSignInTarget(env?: Env, options?: SkillsFleetOptions, explicitUrl?: string): SignInTarget;
 /**
  * The hosted resolution, or throw. Use on every auth and write path.
  *

package/dist/lib/instance-credentials.d.ts

@@ -16,4 +16,6 @@ export declare function readSkillsInstanceMetadata(file: string): {
  * profile (nothing stored yet, so it may sign in) from a broken selection.
  */
 export declare function skillsFileHasCredential(file: string): boolean;
+/** A stored vault reference must survive interactive sign-in unchanged. */
+export declare function skillsFileHasVaultReference(file: string): boolean;
 export {};

package/dist/lib/sign-in.d.ts

@@ -119,7 +119,7 @@ export declare function clearPendingDeviceSignIn(env?: Env, origin?: string): vo
  * Store the key a sign-in produced, bound to the instance that issued it.
  * A session-only answer (a token, no key) mints a CLI key first.
  */
-export declare function persistSignIn(result: SignInResult, origin: string, env?: Env, issuedBy?: StoredKeyIssuer): Promise<string>;
+export declare function persistSignIn(result: SignInResult, origin: string, env?: Env, issuedBy?: StoredKeyIssuer, assertUnchanged?: () => void): Promise<string>;
 /**
  * What happened to server-side revocation.
  *

package/dist/runtime-prerequisites.js

@@ -49,7 +49,7 @@ var __require = import.meta.require;
 // src/runtime-prerequisites.ts
 import { isAbsolute as isAbsolute7 } from "path";
 // package.json
-var version = "0.10.76";
+var version = "0.10.77";
 var package_default = {
   name: "@hasna/skills",
   version,