@hasna/skills 0.10.76 → 0.10.78

package/bin/server.js

@@ -24140,7 +24140,7 @@ restoreLaunchCwd();
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.76",
+  version: "0.10.78",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -36934,6 +36934,9 @@ var AUTHORITY_OVERRIDE_HEADERS3 = new Set([
   "x-original-host"
 ]);
 
+// src/lib/credential-profile-command.ts
+var urlKeys = clientTransportEnvKeys("skills").apiUrlKeys;
+
 // src/lib/fleet-credentials.ts
 var SKILLS_APP = "skills";
 var ENV_KEYS = clientTransportEnvKeys(SKILLS_APP);
@@ -38639,9 +38642,9 @@ function createReceiptService(store) {
 }
 
 // node_modules/@aws-sdk/client-ecs/dist-es/ECSClient.js
-var import_client36 = __toESM(require_client2(), 1);
+var import_client37 = __toESM(require_client2(), 1);
 var import_core2 = __toESM(require_dist_cjs2(), 1);
-var import_client37 = __toESM(require_client(), 1);
+var import_client38 = __toESM(require_client(), 1);
 var import_config33 = __toESM(require_config(), 1);
 var import_endpoints8 = __toESM(require_endpoints(), 1);
 var import_protocols10 = __toESM(require_protocols(), 1);
@@ -38650,11 +38653,11 @@ var import_schema4 = __toESM(require_schema(), 1);
 
 // node_modules/@aws-sdk/client-ecs/dist-es/auth/httpAuthSchemeProvider.js
 var import_httpAuthSchemes4 = __toESM(require_httpAuthSchemes(), 1);
-var import_client28 = __toESM(require_client(), 1);
+var import_client29 = __toESM(require_client(), 1);
 var defaultECSHttpAuthSchemeParametersProvider = async (config, context, input) => {
   return {
-    operation: import_client28.getSmithyContext(context).operation,
-    region: await import_client28.normalizeProvider(config.region)() || (() => {
+    operation: import_client29.getSmithyContext(context).operation,
+    region: await import_client29.normalizeProvider(config.region)() || (() => {
       throw new Error("expected `region` to be configured for `aws.auth#sigv4`");
     })()
   };
@@ -38686,7 +38689,7 @@ var defaultECSHttpAuthSchemeProvider = (authParameters) => {
 var resolveHttpAuthSchemeConfig3 = (config) => {
   const config_0 = import_httpAuthSchemes4.resolveAwsSdkSigV4Config(config);
   return Object.assign(config_0, {
-    authSchemePreference: import_client28.normalizeProvider(config.authSchemePreference ?? [])
+    authSchemePreference: import_client29.normalizeProvider(config.authSchemePreference ?? [])
   });
 };
 
@@ -38778,9 +38781,9 @@ var package_default3 = {
 };
 
 // node_modules/@aws-sdk/client-ecs/dist-es/runtimeConfig.js
-var import_client32 = __toESM(require_client2(), 1);
+var import_client33 = __toESM(require_client2(), 1);
 var import_httpAuthSchemes6 = __toESM(require_httpAuthSchemes(), 1);
-var import_client33 = __toESM(require_client(), 1);
+var import_client34 = __toESM(require_client(), 1);
 var import_config32 = __toESM(require_config(), 1);
 var import_retry5 = __toESM(require_retry(), 1);
 var import_serde6 = __toESM(require_serde(), 1);
@@ -38790,12 +38793,12 @@ var import_node_http_handler3 = __toESM(require_dist_cjs6(), 1);
 var import_httpAuthSchemes5 = __toESM(require_httpAuthSchemes(), 1);
 var import_protocols7 = __toESM(require_protocols2(), 1);
 var import_checksum3 = __toESM(require_checksum(), 1);
-var import_client31 = __toESM(require_client(), 1);
+var import_client32 = __toESM(require_client(), 1);
 var import_protocols8 = __toESM(require_protocols(), 1);
 var import_serde5 = __toESM(require_serde(), 1);
 
 // node_modules/@aws-sdk/client-ecs/dist-es/endpoint/endpointResolver.js
-var import_client29 = __toESM(require_client2(), 1);
+var import_client30 = __toESM(require_client2(), 1);
 var import_endpoints7 = __toESM(require_endpoints(), 1);
 
 // node_modules/@aws-sdk/client-ecs/dist-es/endpoint/bdd.js
@@ -38892,14 +38895,14 @@ var defaultEndpointResolver3 = (endpointParams, context = {}) => {
     logger: context.logger
   }));
 };
-import_endpoints7.customEndpointFunctions.aws = import_client29.awsEndpointFunctions;
+import_endpoints7.customEndpointFunctions.aws = import_client30.awsEndpointFunctions;
 
 // node_modules/@aws-sdk/client-ecs/dist-es/schemas/schemas_0.js
 var import_schema3 = __toESM(require_schema(), 1);
 
 // node_modules/@aws-sdk/client-ecs/dist-es/models/ECSServiceException.js
-var import_client30 = __toESM(require_client(), 1);
-class ECSServiceException extends import_client30.ServiceException {
+var import_client31 = __toESM(require_client(), 1);
+class ECSServiceException extends import_client31.ServiceException {
   constructor(options) {
     super(options);
     Object.setPrototypeOf(this, ECSServiceException.prototype);
@@ -41703,7 +41706,7 @@ var getRuntimeConfig4 = (config) => {
         signer: new import_httpAuthSchemes5.AwsSdkSigV4Signer
       }
     ],
-    logger: config?.logger ?? new import_client31.NoOpLogger,
+    logger: config?.logger ?? new import_client32.NoOpLogger,
     protocol: config?.protocol ?? import_protocols7.AwsJson1_1Protocol,
     protocolSettings: config?.protocolSettings ?? {
       defaultNamespace: "com.amazonaws.ecs",
@@ -41722,11 +41725,11 @@ var getRuntimeConfig4 = (config) => {
 
 // node_modules/@aws-sdk/client-ecs/dist-es/runtimeConfig.js
 var getRuntimeConfig5 = (config) => {
-  import_client33.emitWarningIfUnsupportedVersion(process.version);
+  import_client34.emitWarningIfUnsupportedVersion(process.version);
   const defaultsMode = import_config32.resolveDefaultsModeConfig(config);
-  const defaultConfigProvider = () => defaultsMode().then(import_client33.loadConfigsForDefaultMode);
+  const defaultConfigProvider = () => defaultsMode().then(import_client34.loadConfigsForDefaultMode);
   const clientSharedValues = getRuntimeConfig4(config);
-  import_client32.emitWarningIfUnsupportedVersion(process.version);
+  import_client33.emitWarningIfUnsupportedVersion(process.version);
   const loaderConfig = {
     profile: config?.profile,
     logger: clientSharedValues.logger
@@ -41739,7 +41742,7 @@ var getRuntimeConfig5 = (config) => {
     authSchemePreference: config?.authSchemePreference ?? import_config32.loadConfig(import_httpAuthSchemes6.NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, loaderConfig),
     bodyLengthChecker: config?.bodyLengthChecker ?? import_serde6.calculateBodyLength,
     credentialDefaultProvider: config?.credentialDefaultProvider ?? defaultProvider,
-    defaultUserAgentProvider: config?.defaultUserAgentProvider ?? import_client32.createDefaultUserAgentProvider({ serviceId: clientSharedValues.serviceId, clientVersion: package_default3.version }),
+    defaultUserAgentProvider: config?.defaultUserAgentProvider ?? import_client33.createDefaultUserAgentProvider({ serviceId: clientSharedValues.serviceId, clientVersion: package_default3.version }),
     maxAttempts: config?.maxAttempts ?? import_config32.loadConfig(import_retry5.NODE_MAX_ATTEMPT_CONFIG_OPTIONS, config),
     region: config?.region ?? import_config32.loadConfig(import_config32.NODE_REGION_CONFIG_OPTIONS, { ...import_config32.NODE_REGION_CONFIG_FILE_OPTIONS, ...loaderConfig }),
     requestHandler: import_node_http_handler3.NodeHttpHandler.create(config?.requestHandler ?? defaultConfigProvider),
@@ -41750,13 +41753,13 @@ var getRuntimeConfig5 = (config) => {
     streamCollector: config?.streamCollector ?? import_node_http_handler3.streamCollector,
     useDualstackEndpoint: config?.useDualstackEndpoint ?? import_config32.loadConfig(import_config32.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, loaderConfig),
     useFipsEndpoint: config?.useFipsEndpoint ?? import_config32.loadConfig(import_config32.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, loaderConfig),
-    userAgentAppId: config?.userAgentAppId ?? import_config32.loadConfig(import_client32.NODE_APP_ID_CONFIG_OPTIONS, loaderConfig)
+    userAgentAppId: config?.userAgentAppId ?? import_config32.loadConfig(import_client33.NODE_APP_ID_CONFIG_OPTIONS, loaderConfig)
   };
 };
 
 // node_modules/@aws-sdk/client-ecs/dist-es/runtimeExtensions.js
-var import_client34 = __toESM(require_client2(), 1);
-var import_client35 = __toESM(require_client(), 1);
+var import_client35 = __toESM(require_client2(), 1);
+var import_client36 = __toESM(require_client(), 1);
 var import_protocols9 = __toESM(require_protocols(), 1);
 
 // node_modules/@aws-sdk/client-ecs/dist-es/auth/httpAuthExtensionConfiguration.js
@@ -41800,34 +41803,34 @@ var resolveHttpAuthRuntimeConfig3 = (config) => {
 
 // node_modules/@aws-sdk/client-ecs/dist-es/runtimeExtensions.js
 var resolveRuntimeExtensions3 = (runtimeConfig, extensions) => {
-  const extensionConfiguration = Object.assign(import_client34.getAwsRegionExtensionConfiguration(runtimeConfig), import_client35.getDefaultExtensionConfiguration(runtimeConfig), import_protocols9.getHttpHandlerExtensionConfiguration(runtimeConfig), getHttpAuthExtensionConfiguration3(runtimeConfig));
+  const extensionConfiguration = Object.assign(import_client35.getAwsRegionExtensionConfiguration(runtimeConfig), import_client36.getDefaultExtensionConfiguration(runtimeConfig), import_protocols9.getHttpHandlerExtensionConfiguration(runtimeConfig), getHttpAuthExtensionConfiguration3(runtimeConfig));
   extensions.forEach((extension) => extension.configure(extensionConfiguration));
-  return Object.assign(runtimeConfig, import_client34.resolveAwsRegionExtensionConfiguration(extensionConfiguration), import_client35.resolveDefaultRuntimeConfig(extensionConfiguration), import_protocols9.resolveHttpHandlerRuntimeConfig(extensionConfiguration), resolveHttpAuthRuntimeConfig3(extensionConfiguration));
+  return Object.assign(runtimeConfig, import_client35.resolveAwsRegionExtensionConfiguration(extensionConfiguration), import_client36.resolveDefaultRuntimeConfig(extensionConfiguration), import_protocols9.resolveHttpHandlerRuntimeConfig(extensionConfiguration), resolveHttpAuthRuntimeConfig3(extensionConfiguration));
 };
 
 // node_modules/@aws-sdk/client-ecs/dist-es/ECSClient.js
-class ECSClient extends import_client37.Client {
+class ECSClient extends import_client38.Client {
   config;
   constructor(...[configuration]) {
     const _config_0 = getRuntimeConfig5(configuration || {});
     super(_config_0);
     this.initConfig = _config_0;
     const _config_1 = resolveClientEndpointParameters3(_config_0);
-    const _config_2 = import_client36.resolveUserAgentConfig(_config_1);
+    const _config_2 = import_client37.resolveUserAgentConfig(_config_1);
     const _config_3 = import_retry6.resolveRetryConfig(_config_2);
     const _config_4 = import_config33.resolveRegionConfig(_config_3);
-    const _config_5 = import_client36.resolveHostHeaderConfig(_config_4);
+    const _config_5 = import_client37.resolveHostHeaderConfig(_config_4);
     const _config_6 = import_endpoints8.resolveEndpointConfig(_config_5);
     const _config_7 = resolveHttpAuthSchemeConfig3(_config_6);
     const _config_8 = resolveRuntimeExtensions3(_config_7, configuration?.extensions || []);
     this.config = _config_8;
     this.middlewareStack.use(import_schema4.getSchemaSerdePlugin(this.config));
-    this.middlewareStack.use(import_client36.getUserAgentPlugin(this.config));
+    this.middlewareStack.use(import_client37.getUserAgentPlugin(this.config));
     this.middlewareStack.use(import_retry6.getRetryPlugin(this.config));
     this.middlewareStack.use(import_protocols10.getContentLengthPlugin(this.config));
-    this.middlewareStack.use(import_client36.getHostHeaderPlugin(this.config));
-    this.middlewareStack.use(import_client36.getLoggerPlugin(this.config));
-    this.middlewareStack.use(import_client36.getRecursionDetectionPlugin(this.config));
+    this.middlewareStack.use(import_client37.getHostHeaderPlugin(this.config));
+    this.middlewareStack.use(import_client37.getLoggerPlugin(this.config));
+    this.middlewareStack.use(import_client37.getRecursionDetectionPlugin(this.config));
     this.middlewareStack.use(import_core2.getHttpAuthSchemeEndpointRuleSetPlugin(this.config, {
       httpAuthSchemeParametersProvider: defaultECSHttpAuthSchemeParametersProvider,
       identityProviderConfigProvider: async (config) => new import_core2.DefaultIdentityProviderConfig({
@@ -41842,9 +41845,9 @@ class ECSClient extends import_client37.Client {
 }
 
 // node_modules/@aws-sdk/client-ecs/dist-es/commandBuilder.js
-var import_client38 = __toESM(require_client(), 1);
+var import_client39 = __toESM(require_client(), 1);
 var import_endpoints9 = __toESM(require_endpoints(), 1);
-var command3 = import_client38.makeBuilder(commonParams3, "AmazonEC2ContainerServiceV20141113", "ECSClient", import_endpoints9.getEndpointPlugin);
+var command3 = import_client39.makeBuilder(commonParams3, "AmazonEC2ContainerServiceV20141113", "ECSClient", import_endpoints9.getEndpointPlugin);
 var _ep03 = {};
 var _mw03 = (Command, cs, config, o2) => [];
 

package/bin/worker.js

@@ -24143,7 +24143,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.76",
+  version: "0.10.78",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -36158,6 +36158,9 @@ var AUTHORITY_OVERRIDE_HEADERS3 = new Set([
   "x-original-host"
 ]);
 
+// src/lib/credential-profile-command.ts
+var urlKeys = clientTransportEnvKeys("skills").apiUrlKeys;
+
 // src/lib/fleet-credentials.ts
 var SKILLS_APP = "skills";
 var ENV_KEYS = clientTransportEnvKeys(SKILLS_APP);

package/dist/cli/commands/runtime-mcp.d.ts

@@ -1,4 +1,5 @@
 export declare function handleMcp(options: {
     register?: string;
     json: boolean;
+    apiUrl?: string;
 }): Promise<void>;

package/dist/index.d.ts

@@ -53,7 +53,7 @@ export { WorkspaceLeaveInputError, RemoteWorkspaceLeaveError, RemoteWorkspaceLea
 export type { RemoteWorkspaceInvitation, RemoteWorkspaceInvitationsPage, RemoteWorkspaceInvitationResult, RemoteWorkspaceInvitationAcceptance, ListRemoteWorkspaceInvitations, IssueRemoteWorkspaceInvitation, ResendRemoteWorkspaceInvitation, RevokeRemoteWorkspaceInvitation, AcceptRemoteWorkspaceInvitation, RemoteWorkspaceInvitationErrorCode } from "./lib/remote-invitations.js";
 export { WorkspaceInvitationInputError, RemoteWorkspaceInvitationError, RemoteWorkspaceInvitationUnconfirmedError, RemoteWorkspaceInvitationReadError } from "./lib/remote-invitations.js";
 export { InvitationEmailInputError, RemoteInvitationEmailError, RemoteInvitationEmailUnconfirmedError, type RequestInvitationEmailChallenge, type AcceptInvitationEmailChallenge, type RemoteInvitationEmailChallenge, type RemoteInvitationEmailAcceptance, type RemoteInvitationEmailErrorCode } from "./lib/remote-invitation-recovery.js";
-export { RemotePrivatePublicationsClient, PrivatePublicationError, PRIVATE_PUBLICATION_MAX_BYTES, type PrivatePublicationDeclaration, type PrivatePublicationView, type PrivatePublicationState, type PrivatePublishingCapability } from "./lib/remote-private-publications.js";
+export { RemotePrivatePublicationsClient, PrivatePublicationError, PRIVATE_PUBLICATION_MAX_BYTES, type CreatePrivateSkillInput, type CreatedPrivateSkill, type PrivatePublicationDeclaration, type PrivatePublicationView, type PrivatePublicationState, type PrivatePublishingCapability } from "./lib/remote-private-publications.js";
 export { preparePrivatePublication, readPrivatePublicationRecovery, continuePrivatePublication, inspectPrivatePublication, type PrivatePublicationRecovery, type PrivatePublicationResult } from "./lib/private-publication-recovery.js";
 export { HttpProfileClient, createProfileClient, type ProfileClient, type AuthenticatedProfilePrincipal, type AuthenticatedProfileRole } from "./lib/profile-client.js";
 export type { SkillSelection, SkillProfile, ResolvedSkillSelection, ResolvedSkillProfile, StationSkillStateInput, StationSkillState } from "./types/skill-selection.js";

package/dist/index.js

@@ -9405,7 +9405,8 @@ var MEASURED_CODEX_CAPABILITIES = {
   "codex-cli 0.160.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
   "codex-cli 0.161.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
   "codex-cli 0.162.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
-  "codex-cli 0.162.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
+  "codex-cli 0.162.1": ["hooks", "qualified-skill-catalog", "installed-plugin-review"],
+  "codex-cli 0.163.0": ["hooks", "qualified-skill-catalog", "installed-plugin-review"]
 };
 function supportsCodexNativeCapability(version, capability) {
   return typeof version === "string" && Object.hasOwn(MEASURED_CODEX_CAPABILITIES, version) && MEASURED_CODEX_CAPABILITIES[version].includes(capability);
@@ -12462,6 +12463,39 @@ function captureCodexSettings(path, budget2 = { remaining: 256 * 1024 * 1024 })
 // src/lib/codex-hook-mcp-dependencies.ts
 import { createHash as createHash13 } from "crypto";
 import { basename as basename6, dirname as dirname11, isAbsolute as isAbsolute11, join as join13, resolve as resolve11, sep as sep4 } from "path";
+
+// src/lib/codex-plugin-capability-paths.ts
+var CODEX_PLUGIN_MANIFEST_LOCATIONS = Object.freeze([
+  "plugin.json",
+  ".codex-plugin/plugin.json",
+  ".claude-plugin/plugin.json",
+  ".cursor-plugin/plugin.json"
+]);
+var CODEX_PLUGIN_MANIFEST_DIRECTORIES = Object.freeze([".codex-plugin", ".claude-plugin", ".cursor-plugin"]);
+var CODEX_PLUGIN_ROOT_CAPABILITY_ENTRIES = Object.freeze([
+  "plugin.json",
+  ".codex-plugin",
+  ".claude-plugin",
+  ".cursor-plugin",
+  "hooks",
+  "hooks.json",
+  ".mcp.json",
+  ".app.json",
+  "commands",
+  "agents"
+]);
+function foldCodexPluginEntryName(name) {
+  return name.toUpperCase().toLowerCase();
+}
+function codexPluginRootCapabilityEntry(name) {
+  const folded = foldCodexPluginEntryName(name);
+  return CODEX_PLUGIN_ROOT_CAPABILITY_ENTRIES.includes(folded) ? folded : null;
+}
+function isCodexSkillDocumentName(name) {
+  return foldCodexPluginEntryName(name) === "skill.md";
+}
+
+// src/lib/codex-hook-mcp-dependencies.ts
 var need5 = (value) => {
   if (!value)
     throw new Error("Incomplete or unsupported reviewed Codex hook dependency");
@@ -12610,15 +12644,13 @@ function captureCodexHookMcpDependencies(configPath, reviewed, configText, chang
       }
     };
     const root = join13(cacheRoot, identity2, selectCodexPluginVersion(versions, selectionBudget));
-    const agent = read2(join13(root, "plugin.json"));
+    const [agentPluginManifest, ...legacyManifests] = CODEX_PLUGIN_MANIFEST_LOCATIONS;
+    const agent = read2(join13(root, agentPluginManifest));
     if (agent !== null) {
       const schema = JSON.parse(agent).$schema;
       need5(typeof schema !== "string" || !schema.startsWith("https://agent-plugins.org/schemas/"));
     }
-    const codex = read2(join13(root, ".codex-plugin/plugin.json"));
-    const claude = read2(join13(root, ".claude-plugin/plugin.json"));
-    const cursor = read2(join13(root, ".cursor-plugin/plugin.json"));
-    const text2 = codex ?? claude ?? cursor;
+    const text2 = legacyManifests.map((location) => read2(join13(root, location))).find((value) => value !== null) ?? null;
     if (text2 === null)
       continue;
     const manifest = JSON.parse(text2);
@@ -15065,16 +15097,16 @@ function codexVendorMarketplace(cache, path) {
     return null;
   return CODEX_VENDOR_MARKETPLACES.includes(parts[0]) ? parts[0] : null;
 }
-var OTHER_PLUGIN_CONTROLS = Object.freeze(["plugin.json", ".claude-plugin", ".cursor-plugin", "hooks", "hooks.json", ".mcp.json", "commands", "agents"]);
+var OTHER_PLUGIN_CONTROLS = Object.freeze(CODEX_PLUGIN_ROOT_CAPABILITY_ENTRIES.filter((entry) => entry !== ".codex-plugin" && entry !== ".app.json"));
 var VENDOR_MANIFEST_KEYS = Object.freeze(["name", "version", "description", "author", "homepage", "repository", "license", "keywords", "interface", "skills", "apps"]);
 var DEFAULT_SKILLS_PATHS = Object.freeze(["./skills", "./skills/"]);
 var VENDOR_APP_DECLARATION = "./.app.json";
 var MAX_SUBTREE_ENTRIES = 20000;
 var MAX_SUBTREE_DEPTH = 32;
 var hiddenName = (name) => name.startsWith(".") || name === "node_modules";
-var isSkillDocument = (name) => name.toLowerCase() === "skill.md";
+var isSkillDocument = isCodexSkillDocumentName;
 var present = (path) => lstatSync15(path, { throwIfNoEntry: false }) !== undefined;
-var holdsOtherControl = (path) => readdirSync7(path).some((name) => OTHER_PLUGIN_CONTROLS.includes(name.toLowerCase()));
+var holdsOtherControl = (path) => readdirSync7(path).some((name) => OTHER_PLUGIN_CONTROLS.includes(codexPluginRootCapabilityEntry(name) ?? ""));
 function pluginTreeVisible(path, hidden, insideSkill, depth, budget2) {
   if (depth > MAX_SUBTREE_DEPTH)
     return false;
@@ -15415,7 +15447,7 @@ import { basename as basename13, dirname as dirname24, isAbsolute as isAbsolute2
 import { homedir as homedir5 } from "os";
 import { isAbsolute as isAbsolute25, join as join36, resolve as resolve24 } from "path";
 // package.json
-var version = "0.10.76";
+var version = "0.10.78";
 var package_default = {
   name: "@hasna/skills",
   version,
@@ -16503,6 +16535,9 @@ function selectsSkillsLocalMode(env = process.env) {
   return !hasSkillsEnvAuthorityIntent(env) && isSkillsLocalOptIn(env);
 }
 
+// src/lib/credential-profile-command.ts
+var urlKeys = clientTransportEnvKeys("skills").apiUrlKeys;
+
 // src/lib/fleet-credentials.ts
 var SKILLS_APP = "skills";
 var ENV_KEYS = clientTransportEnvKeys(SKILLS_APP);
@@ -17886,6 +17921,7 @@ import { createHash as createHash22 } from "crypto";
 import { constants as constants12, closeSync as closeSync12, fstatSync as fstatSync12, lstatSync as lstatSync20, openSync as openSync12, readSync as readSync8, readdirSync as readdirSync9, realpathSync as realpathSync9 } from "fs";
 import { basename as basename10, dirname as dirname18, isAbsolute as isAbsolute19, join as join25, relative as relative8, resolve as resolve18, sep as sep11 } from "path";
 var CODEX_SEMANTIC_CACHE_WITNESS_SCHEMA = "hasna.codex-semantic-cache-witness.v1";
+var SEMANTIC_BOUND_ROOT_ENTRIES = Object.freeze([".codex-plugin", ".app.json", ".mcp.json", "hooks"]);
 var identifier5 = (value) => typeof value === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(value);
 var digest = (value) => typeof value === "string" && /^[a-f0-9]{64}$/.test(value);
 var refuse4 = () => {
@@ -18395,14 +18431,23 @@ function assertParents(cacheRoot, controls, appOnlyParents, hookParents, files,
       continue;
     const parent = join25(cacheRoot, parts[0], parts[1]);
     const root = join25(parent, parts[2]);
-    const base = parts[parts.length - 1];
-    if (parts.includes(".codex-plugin") && (parts.length < 4 || parts[3] !== ".codex-plugin" || (parts.length === 4 ? base !== ".codex-plugin" : parts.length !== 5 || base !== "plugin.json")))
+    const base = parts[parts.length - 1], folded = foldCodexPluginEntryName(base);
+    if (parts.length === 3 && (codexPluginRootCapabilityEntry(base) !== null || isCodexSkillDocumentName(base)))
       refuse4();
-    if ([".app.json", ".mcp.json"].includes(base) && (parts.length !== 4 || dirname18(member) !== root))
+    const rootEntry = parts.length >= 4 ? codexPluginRootCapabilityEntry(parts[3]) : null;
+    if (rootEntry !== null && rootEntry !== parts[3])
       refuse4();
-    if ([".app.json", ".mcp.json"].includes(base) && hookParents.some((reviewed) => reviewed.pluginParent === parent))
+    if (rootEntry !== null && !SEMANTIC_BOUND_ROOT_ENTRIES.includes(rootEntry))
       refuse4();
-    if ((parts[3] === "hooks" || base === "hooks.json") && (![4, 5].includes(parts.length) || parts[3] !== "hooks" || (parts.length === 4 ? base !== "hooks" : base !== "hooks.json") || !hookParents.some((reviewed) => reviewed.pluginParent === join25(cacheRoot, parts[0], parts[1]))))
+    if (isCodexSkillDocumentName(base) && base !== "SKILL.md")
+      refuse4();
+    if (parts.some((part) => CODEX_PLUGIN_MANIFEST_DIRECTORIES.includes(foldCodexPluginEntryName(part))) && (parts.length < 4 || parts[3] !== ".codex-plugin" || (parts.length === 4 ? base !== ".codex-plugin" : parts.length !== 5 || base !== "plugin.json")))
+      refuse4();
+    if ([".app.json", ".mcp.json"].includes(folded) && (parts.length !== 4 || dirname18(member) !== root))
+      refuse4();
+    if ([".app.json", ".mcp.json"].includes(folded) && hookParents.some((reviewed) => reviewed.pluginParent === parent))
+      refuse4();
+    if ((rootEntry === "hooks" || folded === "hooks.json") && (![4, 5].includes(parts.length) || parts[3] !== "hooks" || (parts.length === 4 ? base !== "hooks" : base !== "hooks.json") || !hookParents.some((reviewed) => reviewed.pluginParent === join25(cacheRoot, parts[0], parts[1]))))
       refuse4();
   }
 }
@@ -44799,11 +44844,12 @@ var remoteAvailabilitySchema = exports_external.object({
   details: exports_external.array(exports_external.string()).optional()
 }).passthrough();
 var remoteSkillSchema = exports_external.object({
+  id: exports_external.string().regex(/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/).optional(),
   name: exports_external.string().min(1).optional(),
   slug: exports_external.string().min(1).optional(),
   displayName: exports_external.string().optional(),
   description: exports_external.string().optional(),
-  category: exports_external.string().optional(),
+  category: exports_external.string().nullable().optional(),
   tags: exports_external.array(exports_external.string()).optional(),
   dependencies: exports_external.array(exports_external.string()).optional(),
   version: exports_external.string().optional(),
@@ -44864,6 +44910,7 @@ function normalizeRemoteSkill(skill) {
   if (!name)
     throw new Error("Remote skill requires name or slug");
   return {
+    ...skill.id !== undefined ? { id: skill.id } : {},
     name,
     displayName: skill.displayName || titleize(name),
     description: skill.description || "",
@@ -48341,6 +48388,16 @@ async function requestInvitationEmail(origin, action, input2) {
 // src/lib/remote-private-publications.ts
 import { createHash as createHash34 } from "crypto";
 var PRIVATE_PUBLICATION_MAX_BYTES = 16 * 1024 * 1024;
+var skillCreateFailures = {
+  INVALID_SLUG: [400, "Provide a lowercase kebab-case skill slug."],
+  INVALID_DISPLAY_NAME: [400, "Provide a nonempty skill display name."],
+  INVALID_VISIBILITY: [400, "Use private or team visibility for source publication."],
+  SESSION_EXPIRED: [401, "Sign in again before creating a private skill."],
+  INTERACTIVE_SESSION_REQUIRED: [403, "An interactive account session is required to create a private skill."],
+  ACCOUNT_UNAVAILABLE: [403, "The current account membership cannot create a private skill."],
+  PLAN_REQUIRED: [403, "Private and team skills require the Pro plan."],
+  SLUG_CONFLICT: [409, "This skill slug already exists. Inspect the existing skill before publishing."]
+};
 var failures2 = {
   INVALID_REQUEST: [400, "The publication request is invalid."],
   SESSION_EXPIRED: [401, "Sign in again to manage this publication."],
@@ -48387,6 +48444,24 @@ var record11 = (v) => !!v && typeof v === "object" && !Array.isArray(v);
 var exact = (v, keys2) => record11(v) && Object.keys(v).sort().join(",") === keys2.sort().join(",");
 var date5 = (v) => typeof v === "string" && /^\d{4}-\d\d-\d\dT[0-9:.]+(?:Z|[+-](?:[01]\d|2[0-3]):[0-5]\d)$/.test(v) && Number.isFinite(Date.parse(v));
 var publicationSha256 = (bytes) => createHash34("sha256").update(bytes).digest("hex");
+function checkedPrivateSkillCreate(value) {
+  const refuse6 = (field3, accepted) => {
+    throw new PrivatePublicationError("INVALID_SKILL_CREATE_INPUT", `Invalid ${field3}. ${accepted}`);
+  };
+  if (!record11(value) || !Object.keys(value).every((key2) => ["slug", "displayName", "description", "visibility", "confirm"].includes(key2)))
+    return refuse6("create input", "Provide only slug, displayName, description, visibility and confirm.");
+  if (value.confirm !== true)
+    throw new PrivatePublicationError("SKILL_CREATE_CONFIRM_REQUIRED", "Explicit confirmation is required to create this skill.");
+  if (typeof value.slug !== "string" || value.slug.length > 128 || !/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(value.slug))
+    return refuse6("slug", "Use lowercase kebab-case, at most 128 characters.");
+  if (typeof value.displayName !== "string" || !value.displayName.trim() || value.displayName.length > 256 || /[\p{Cc}\p{Cs}\u2028\u2029]/u.test(value.displayName))
+    return refuse6("displayName", "Use nonempty text, at most 256 characters, without control characters.");
+  if (value.description !== undefined && (typeof value.description !== "string" || Buffer.byteLength(value.description) > 8192 || /[\p{Cc}\p{Cs}]/u.test(value.description.replace(/[\r\n\t]/g, ""))))
+    return refuse6("description", "Use text of at most 8192 UTF-8 bytes, without control characters other than tabs and newlines.");
+  if (value.visibility !== undefined && value.visibility !== "private" && value.visibility !== "team")
+    return refuse6("visibility", "Use private or team.");
+  return Object.freeze({ slug: value.slug, displayName: value.displayName.trim(), description: value.description ?? "", visibility: value.visibility ?? "private" });
+}
 function checkedPublicationDeclaration(value) {
   if (!exact(value, ["idempotencyKey", "version", "expectedCurrentVersionId", "manifestText", "archiveSha256", "archiveByteSize"]) || !publicationUuid(value.idempotencyKey) || !(value.expectedCurrentVersionId === null || publicationUuid(value.expectedCurrentVersionId)) || typeof value.version !== "string" || !value.version || value.version.length > 128 || /[\p{Cc}\p{Cs}]/u.test(value.version) || typeof value.manifestText !== "string" || Buffer.byteLength(value.manifestText) > 16384 || !hash4(value.archiveSha256) || !Number.isSafeInteger(value.archiveByteSize) || Number(value.archiveByteSize) < 1 || Number(value.archiveByteSize) > PRIVATE_PUBLICATION_MAX_BYTES)
     return bad();
@@ -48406,11 +48481,11 @@ function checkedPublicationView(value, skillId, intentId, declaration) {
     return invalid4();
   return Object.freeze({ ...value });
 }
-async function boundedJson(url2, init, token, mutation, budget3 = 15000, signal) {
+async function boundedJson(url2, init, token, mutation, budget3 = 15000, signal, create = false) {
   const controller = new AbortController;
   let reader;
   let response;
-  const timeout2 = new PrivatePublicationError("PUBLICATION_UNCONFIRMED", "No confirmed publication result. Inspect the saved intent before retrying.", mutation);
+  const timeout2 = new PrivatePublicationError(create ? "SKILL_CREATE_UNCONFIRMED" : "PUBLICATION_UNCONFIRMED", create ? "Skill creation could not be confirmed. Inspect the workspace for this slug before another create; do not retry automatically." : "No confirmed publication result. Inspect the saved intent before retrying.", mutation);
   let timer;
   let abort;
   try {
@@ -48450,11 +48525,19 @@ async function boundedJson(url2, init, token, mutation, budget3 = 15000, signal)
         return invalid4();
       }
       if (!response.ok) {
-        const code = record11(body) && typeof body.code === "string" && Object.hasOwn(failures2, body.code) ? body.code : null;
-        if (code && failures2[code][0] === response.status)
-          throw new PrivatePublicationError(code, failures2[code][1], mutation && code === "PUBLICATION_UNCERTAIN", response.status);
+        const known = create ? skillCreateFailures : failures2;
+        const code = record11(body) && typeof body.code === "string" && Object.hasOwn(known, body.code) ? body.code : null;
+        if (code && known[code][0] === response.status)
+          throw new PrivatePublicationError(code, known[code][1], mutation && code === "PUBLICATION_UNCERTAIN", response.status);
+        if (create) {
+          if (response.status >= 500)
+            throw timeout2;
+          throw new PrivatePublicationError("SKILL_CREATE_REQUEST_FAILED", "The server refused skill creation.", false, response.status);
+        }
         throw new PrivatePublicationError("PUBLICATION_REQUEST_FAILED", "The publication request was refused. Inspect its status before retrying.", mutation && response.status >= 500, response.status);
       }
+      if (create && response.status !== 201)
+        return invalid4();
       return body;
     })(), new Promise((_, reject) => {
       abort = () => {
@@ -48501,6 +48584,15 @@ class RemotePrivatePublicationsClient {
     this.membershipId = checked.user.membershipId;
     Object.freeze(this);
   }
+  async createSkill(input2, options = {}) {
+    const body = checkedPrivateSkillCreate(input2);
+    if (options.timeoutMs !== undefined && (!Number.isSafeInteger(options.timeoutMs) || options.timeoutMs < 1 || options.timeoutMs > 15000))
+      throw new PrivatePublicationError("INVALID_SKILL_CREATE_INPUT", "Invalid timeoutMs. Use an integer from 1 to 15000.");
+    const value = await boundedJson(skillsApiRequestUrl(this.apiOrigin, "/api/v1/skills"), { method: "POST", body: JSON.stringify(body) }, this.#token, true, options.timeoutMs, options.signal, true);
+    if (!record11(value) || !publicationUuid(value.id) || value.slug !== body.slug || value.displayName !== body.displayName || value.description !== body.description || value.visibility !== body.visibility || value.sourceType !== "private_hosted" || !record11(value.metadata) || value.metadata.ownerOrganizationId !== this.organizationId)
+      throw new PrivatePublicationError("SKILL_CREATE_UNCONFIRMED", "Skill creation returned an unbound result. Inspect the workspace for this slug before another create; do not retry automatically.", true);
+    return Object.freeze({ id: value.id, slug: body.slug, visibility: body.visibility, sourceType: "private_hosted", ownerOrganizationId: this.organizationId });
+  }
   async getCapability(options = {}) {
     if (options.timeoutMs !== undefined && (!Number.isSafeInteger(options.timeoutMs) || options.timeoutMs < 1 || options.timeoutMs > 15000))
       return bad();

package/dist/lib/auth-store.d.ts

@@ -88,7 +88,7 @@ export declare function getAuthConfigReadOnly(env?: Env, options?: SkillsFleetOp
  * forgotten locally. Recorded in identity.json (never a secret).
  */
 export type StoredKeyIssuer = "sign-in" | "api-key";
-export declare function saveAuthConfig(config: StoredAuthConfig, env?: Env, authenticatedOrigin?: string, issuedBy?: StoredKeyIssuer): string;
+export declare function saveAuthConfig(config: StoredAuthConfig, env?: Env, authenticatedOrigin?: string, issuedBy?: StoredKeyIssuer, assertUnchanged?: () => void): string;
 /**
  * Who put the active profile's stored credential there — the question
  * `skills logout` has to answer before it touches it (Instructions rule

package/dist/lib/codex-plugin-capability-paths.d.ts

@@ -0,0 +1,31 @@
+/** The one package-owned definition of the plugin-root locations Codex reads.
+ *
+ * The vendor-refresh guard (codex-vendor-refresh.ts), the semantic cache
+ * witness (codex-semantic-cache-witness.ts) and the reviewed hook dependency
+ * closure (codex-hook-mcp-dependencies.ts) all derive their capability rules
+ * from these lists, so a location added here reaches every mode at once.
+ */
+/** Manifest locations in a plugin version root, in the order Codex 0.160.0 and
+ * later look them up: the Agent Plugins root `plugin.json` first, then the
+ * `.codex-plugin`, `.claude-plugin` and `.cursor-plugin` manifests. The first
+ * one present is the plugin's manifest. */
+export declare const CODEX_PLUGIN_MANIFEST_LOCATIONS: readonly string[];
+/** The manifest directories among CODEX_PLUGIN_MANIFEST_LOCATIONS. */
+export declare const CODEX_PLUGIN_MANIFEST_DIRECTORIES: readonly string[];
+/** Every direct entry of a plugin version root that carries a capability Codex
+ * reads: each manifest location, the default hooks directory and a root hooks
+ * file, the MCP and connector declarations, and the default command and agent
+ * directories. Spelled in lowercase; compare names through
+ * codexPluginRootCapabilityEntry so a case-insensitive file system cannot alias
+ * one. */
+export declare const CODEX_PLUGIN_ROOT_CAPABILITY_ENTRIES: readonly string[];
+/** Case-insensitive comparison form. Upper- then lower-casing also folds the
+ * Kelvin sign, long s and dotless i onto their ASCII letters, so a name a
+ * case-insensitive file system could open as a capability entry folds onto it. */
+export declare function foldCodexPluginEntryName(name: string): string;
+/** The lowercase CODEX_PLUGIN_ROOT_CAPABILITY_ENTRIES member a directory entry
+ * name denotes, matched without regard to case, or null. */
+export declare function codexPluginRootCapabilityEntry(name: string): string | null;
+/** Whether a directory entry name is a skill document (`SKILL.md`), matched
+ * without regard to case. */
+export declare function isCodexSkillDocumentName(name: string): boolean;

package/dist/lib/credential-profile-command.d.ts

@@ -0,0 +1,5 @@
+export declare function skillsShellArgument(value: string): string;
+/** Set every supported URL alias consistently for this invocation only. */
+export declare function skillsApiUrlEnvironment(origin: string): string;
+/** Keep copied CLI commands on the credential profile selected by CLI or environment. */
+export declare function skillsProfileCommand(command: string, env?: Record<string, string | undefined>, origin?: string): string;

package/dist/lib/fleet-credentials.d.ts

@@ -134,7 +134,7 @@ export interface LocalSkillsFleet {
 }
 export type SkillsFleet = HostedSkillsFleet | LocalSkillsFleet;
 /** Machine-readable reasons a hosted resolution was refused. */
-export type SkillsFleetErrorCode = "MISSING_API_CREDENTIAL" | "INVALID_API_URL" | "INSTANCE_CREDENTIAL_MISMATCH" | "GATEWAY_AUTH_UNAVAILABLE";
+export type SkillsFleetErrorCode = "MISSING_API_CREDENTIAL" | "INVALID_API_URL" | "INSTANCE_CREDENTIAL_MISMATCH" | "GATEWAY_AUTH_UNAVAILABLE" | "STORED_CREDENTIAL_PROTECTED";
 /**
  * A configured install could not produce a usable hosted client.
  *
@@ -336,14 +336,17 @@ export interface SignInTarget {
     source: string;
     /** Set when an already-resolving credential decided the origin: its source NAME, never a value. */
     credentialSource?: string;
+    /** A captured sign-in carries this through approval and persistence. */
+    unchanged?: () => void;
 }
 /**
  * The refusal for a sign-in that would target the internal gateway, which has
- * no sign-in service — or null. It names what to unset or remove, and never
- * suggests pointing this machine at the product server while an internal
- * credential is still configured. Nothing is sent either way.
+ * no sign-in service — or null. Use a separate profile for product sign-in,
+ * preserving the existing fleet configuration. Nothing is sent either way.
  */
 export declare function gatewaySignInRefusal(target: SignInTarget): SkillsFleetCredentialError | null;
+/** Refuse before sign-in traffic can replace a selected fleet key or vault reference. */
+export declare function assertSkillsSignInCredentialReplaceable(env?: Env, profile?: string): void;
 /**
  * The authority a SIGN-IN talks to: `skills login`, `skills auth login` /
  * `signup`, and the TUI `/login`. Resolved on its own because signing in is how
@@ -354,7 +357,8 @@ export declare function gatewaySignInRefusal(target: SignInTarget): SkillsFleetC
  *   1. `--url <origin>` — an explicit choice for this sign-in. It is refused when
  *      an outranking URL (the environment or the Keychain) names a different
  *      instance, because the key it mints would be shadowed the moment it is
- *      saved. A URL in the credentials file is what a sign-in replaces.
+ *      saved. A URL in the credentials file is replaceable only when it does
+ *      not protect a fleet credential or vault reference.
  *   2. a configured URL — environment, profile or credentials file, Keychain.
  *   3. the instance an already-stored credential belongs to. A legacy internal
  *      key with no recorded URL belongs to the fleet gateway, so a machine that
@@ -366,6 +370,8 @@ export declare function gatewaySignInRefusal(target: SignInTarget): SkillsFleetC
  * Nothing here sends a request.
  */
 export declare function resolveSkillsSignInOrigin(env?: Env, options?: SkillsFleetOptions, explicitUrl?: string): SignInTarget;
+/** Retain the selected credential's exact file state across a multi-step sign-in. */
+export declare function captureSkillsSignInTarget(env?: Env, options?: SkillsFleetOptions, explicitUrl?: string): SignInTarget;
 /**
  * The hosted resolution, or throw. Use on every auth and write path.
  *

package/dist/lib/instance-credentials.d.ts

@@ -16,4 +16,6 @@ export declare function readSkillsInstanceMetadata(file: string): {
  * profile (nothing stored yet, so it may sign in) from a broken selection.
  */
 export declare function skillsFileHasCredential(file: string): boolean;
+/** A stored vault reference must survive interactive sign-in unchanged. */
+export declare function skillsFileHasVaultReference(file: string): boolean;
 export {};

package/dist/lib/mcp-registration-environment.d.ts

@@ -0,0 +1,2 @@
+/** Safe selectors for a later MCP process. Credentials still resolve in that process. */
+export declare function skillsMcpRegistrationEnvironment(env?: Record<string, string | undefined>, origin?: string): Record<string, string>;